Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: Sartf8Fx7F8gxAKfHddleHvi6klEKBq3l9oHsJWxfiU=
Subject key identifier: B9:C5:3A:6A:89:E1:82:5F:2F:03:15:A1:80:4A:FA:8D:8C:6F:F5:03
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 019EB80E93D5F60C27E22B7D22BDAE03CF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 0377
Signing time: Thu 11 Jun 2026 19:00:23 +0000
Manifest this update: Thu 11 Jun 2026 19:00:23 +0000
Manifest next update: Fri 12 Jun 2026 19:00:23 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: EMUD9BMiQP4pc++DjMbVMvPUnN6G7np3vw2zndySpQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:93:d5:f6:0c:27:e2:2b:7d:22:bd:ae:03:cf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Jun 11 19:00:23 2026 GMT
Not After : Jun 12 19:00:23 2026 GMT
Subject: CN=b9c53a6a89e1825f2f0315a1804afa8d8c6ff503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:49:26:6c:6f:a5:12:5b:19:47:62:65:ac:4a:
55:24:d6:df:48:df:d1:26:56:8d:59:5d:35:cd:32:
dd:ad:35:2e:bc:79:a8:75:c6:da:20:6e:41:a5:e5:
c7:26:d2:a3:0c:4a:96:a7:af:6b:6a:b1:a2:58:53:
49:e5:8f:67:9b:02:b6:4d:6e:c2:66:37:8c:d8:0e:
80:16:9e:bf:78:c1:9e:86:cf:ae:1f:56:d9:59:5c:
0c:06:5d:50:d6:ce:59:1e:84:c5:18:ce:8b:42:78:
be:e3:ac:a4:d3:dc:96:be:c7:d9:73:b5:32:a5:64:
f9:2a:23:21:a8:95:9c:6c:27:18:d2:e7:7d:9c:17:
ef:77:ab:df:7a:57:47:6d:32:60:5e:1c:b3:83:da:
e8:a2:28:da:6a:a8:dc:97:50:8a:e8:83:59:e9:29:
98:1c:02:33:6a:d9:b0:c8:08:fc:ce:38:51:fe:21:
ac:c0:76:a1:cb:43:ab:4f:92:93:c2:38:12:d5:a5:
9b:02:2e:4b:11:b9:24:4f:c5:f7:c5:89:7b:e5:26:
8b:e2:4f:14:be:47:28:be:52:e0:7c:81:48:ca:9f:
9f:ca:ed:50:d6:9e:fd:21:2b:8e:0d:93:a8:e6:b0:
b7:b9:32:57:2d:06:e1:e0:84:59:21:b1:fc:70:74:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C5:3A:6A:89:E1:82:5F:2F:03:15:A1:80:4A:FA:8D:8C:6F:F5:03
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:41:52:66:f4:02:22:4a:45:47:20:78:1d:90:56:29:d3:fd:
a5:a2:23:34:98:87:44:e6:23:45:68:12:2d:66:53:56:6a:aa:
ff:71:ad:c8:ae:e2:78:5b:8c:22:ce:fd:61:1f:bc:93:f0:39:
21:7a:9d:53:5d:82:f4:28:ec:b8:c2:d2:1f:a2:5e:89:4d:a3:
6b:d4:bb:0e:eb:24:5b:50:c4:19:a9:07:1b:49:96:a7:44:f7:
78:1e:bf:bf:f5:1d:16:4e:79:66:16:3b:14:fd:51:fa:88:65:
1f:67:0c:a0:f8:b0:cb:e5:6c:01:75:c2:54:6e:d9:50:fc:50:
ce:69:41:99:00:74:ce:b8:bf:a7:38:f0:ec:55:a8:d7:53:22:
34:f0:23:69:f8:0f:67:78:c9:df:50:ac:27:56:53:25:19:ab:
f2:8c:28:2b:8d:b5:ce:57:4a:0a:bb:ea:cc:47:34:ca:70:35:
64:73:83:d4:3b:68:68:8b:f4:e5:b5:9d:e2:c6:2c:be:21:7c:
aa:79:8e:65:21:4e:1a:17:4f:21:67:36:62:29:e1:82:b3:b8:
bb:f9:2e:81:72:d0:f4:fb:6e:3e:dc:ee:fa:5b:f3:a3:57:3c:
ca:1c:7a:4f:8d:7c:87:a7:83:fd:13:65:37:0e:a0:8c:e0:5c:
c7:66:b5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:04 2026 by rpki-client