Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: 7L/cbrUxAzZFg0kInmkJXr+IXsymcO1vY0kwD+ahiYo=
Subject key identifier: 01:15:AB:68:02:9B:D0:87:A2:FD:02:EF:3D:83:F5:55:D1:60:00:2B
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 019E5147463E3A36B1FD30A7998F02257FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 0AB5
Signing time: Fri 22 May 2026 20:01:25 +0000
Manifest this update: Fri 22 May 2026 20:01:25 +0000
Manifest next update: Sat 23 May 2026 20:01:25 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: WeDfMtELT0/df/GH0Qg4lLPpROLb6qHSG6VuqtBoLoM=)
2: oeqcCmqzmosVxM-WY8lmXD_44Ic.roa (hash: QSB9wBcelhQw6T6s+EAUaG07z6Fs95UlwbhmHAqSneQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:47:46:3e:3a:36:b1:fd:30:a7:99:8f:02:25:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: May 22 20:01:25 2026 GMT
Not After : May 23 20:01:25 2026 GMT
Subject: CN=0115ab68029bd087a2fd02ef3d83f555d160002b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e4:21:a1:ae:7f:96:02:ca:2a:6c:9d:9c:e0:
c8:f1:be:b9:0f:dd:27:81:19:11:e4:72:98:c0:c9:
59:b1:a5:0a:14:48:21:b1:ea:dc:03:e6:19:58:3a:
80:1d:52:b7:d1:42:8b:a1:03:6c:54:47:42:68:b2:
d7:33:05:82:e7:c0:2f:d3:fd:72:4b:aa:68:1c:88:
d9:c9:2d:61:5b:27:d5:d4:55:11:57:f1:bd:cc:00:
b9:1e:07:b5:e7:54:c3:6a:43:1d:62:8c:d6:1e:45:
6a:8c:f4:fa:13:2b:df:95:ad:29:4c:44:03:d4:4d:
86:11:1c:fb:e3:12:34:1c:30:6e:f8:f2:57:12:36:
2d:4c:9f:36:4f:d4:9f:fb:70:07:33:f7:61:f0:dd:
56:bb:8b:93:d9:77:41:f6:93:24:26:e2:ab:75:e4:
5e:6b:43:95:37:13:99:96:95:3c:49:ff:56:df:af:
0d:c8:0e:2a:cb:80:25:29:b1:7c:30:47:8d:4c:d6:
0a:0f:a1:18:87:53:18:76:31:e4:ee:cf:f2:51:4c:
c2:af:61:64:1a:01:bd:a0:58:74:10:19:1e:9d:a9:
33:20:24:4f:a4:f6:1d:b9:e1:3f:67:c2:f3:38:53:
3a:07:f6:df:48:60:b1:4b:cd:41:fd:ae:48:76:b0:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:15:AB:68:02:9B:D0:87:A2:FD:02:EF:3D:83:F5:55:D1:60:00:2B
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3b:3d:bc:51:1b:91:98:39:fa:d5:d3:07:f6:34:4e:15:de:
d9:7d:45:88:d9:d6:b9:b9:13:4b:1f:1f:67:8e:c1:75:8c:51:
a5:8e:18:49:d9:6b:3b:d5:bb:00:a6:3f:da:51:66:87:40:48:
b5:f4:f6:76:bd:d3:cc:ba:68:c2:08:16:b5:7f:50:23:35:b6:
aa:cb:1f:39:6f:15:10:81:2e:84:25:12:0c:9a:6b:1d:49:60:
e7:49:ce:c8:d8:50:70:ad:d5:c1:17:5a:d3:60:44:2c:b5:2e:
f6:51:18:db:cf:fb:e1:4c:c7:b4:d0:97:c5:da:86:79:67:f0:
8c:55:08:dc:1c:91:0c:bc:65:c6:49:6b:dd:e9:3a:a3:89:27:
29:0f:05:d9:b5:8b:48:40:e4:15:79:05:03:6e:d1:80:59:11:
d5:47:7a:50:32:15:0f:6b:a5:e3:60:2e:75:70:a2:25:b2:53:
d1:af:48:d0:c3:77:a0:c3:23:1d:02:0e:cd:f7:76:aa:0c:99:
64:4b:0a:9b:d0:0b:ff:6d:ae:8c:77:4d:3e:a6:11:bb:0e:12:
61:1c:2a:4c:7e:84:12:ed:11:af:c3:7e:83:5e:af:71:e4:13:
30:1c:3f:99:be:11:4c:b1:a7:f4:0d:9e:22:68:12:ef:45:cd:
4e:16:f6:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5RR0Y+Ojax/TCnmY8CJX/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDU4MDI5Yzk2Y2UyOGFmODAxOGQ1N2Y4ZmE0MDMxMjYx
NTFiZTYwHhcNMjYwNTIyMjAwMTI1WhcNMjYwNTIzMjAwMTI1WjAzMTEwLwYDVQQD
EygwMTE1YWI2ODAyOWJkMDg3YTJmZDAyZWYzZDgzZjU1NWQxNjAwMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOQhoa5/lgLKKmydnODI8b65D90n
gRkR5HKYwMlZsaUKFEghsercA+YZWDqAHVK30UKLoQNsVEdCaLLXMwWC58Av0/1y
S6poHIjZyS1hWyfV1FURV/G9zAC5Hge151TDakMdYozWHkVqjPT6Eyvfla0pTEQD
1E2GERz74xI0HDBu+PJXEjYtTJ82T9Sf+3AHM/dh8N1Wu4uT2XdB9pMkJuKrdeRe
a0OVNxOZlpU8Sf9W368NyA4qy4AlKbF8MEeNTNYKD6EYh1MYdjHk7s/yUUzCr2Fk
GgG9oFh0EBkenakzICRPpPYdueE/Z8LzOFM6B/bfSGCxS81B/a5IdrCNYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEVq2gCm9CHov0C7z2D9VXRYAArMB8GA1UdIwQY
MBaAFBoFgCnJbOKK+AGNV/j6QDEmFRvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wOWUzMjAtYTNiNi00NWNiLTg3YzAt
MjI4Mzk3NjY5NjBhLzEvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wOWUzMjAtYTNiNi00NWNiLTg3YzAtMjI4Mzk3NjY5NjBh
LzEvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjs9vFEb
kZg5+tXTB/Y0ThXe2X1FiNnWubkTSx8fZ47BdYxRpY4YSdlrO9W7AKY/2lFmh0BI
tfT2dr3TzLpowggWtX9QIzW2qssfOW8VEIEuhCUSDJprHUlg50nOyNhQcK3VwRda
02BELLUu9lEY28/74UzHtNCXxdqGeWfwjFUI3ByRDLxlxklr3ek6o4knKQ8F2bWL
SEDkFXkFA27RgFkR1Ud6UDIVD2ul42AudXCiJbJT0a9I0MN3oMMjHQIOzfd2qgyZ
ZEsKm9AL/22ujHdNPqYRuw4SYRwqTH6EEu0Rr8N+g16vceQTMBw/mb4RTLGn9A2e
ImgS70XNThb2WQ==
-----END CERTIFICATE-----
Generated at Sat May 23 03:48:12 2026 by rpki-client