Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json)
Hash identifier: PmHv66HyW0lIyTr3CNDVob2Rr1D0r5qsUsORwVbx1QE=
Subject key identifier: 1E:87:C5:FE:D8:49:44:CC:3E:EA:ED:F2:D9:BC:74:25:FE:57:BA:C9
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial: 019E909402A37CA2FC336DEAB2166D096E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
Manifest number: 0CB5
Signing time: Thu 04 Jun 2026 03:01:19 +0000
Manifest this update: Thu 04 Jun 2026 03:01:19 +0000
Manifest next update: Fri 05 Jun 2026 03:01:19 +0000
Files and hashes: 1: IVL7dLrg6wGDU1LsfYsBBP5fLww.roa (hash: nXXz2gE0BqsxA3+AlASgnT6agymsn4mqf9G776nMdI8=)
2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: 6cHjwtT61hWsYby35SlgfHbXTJyYS/glXzUOYW5Zabk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:94:02:a3:7c:a2:fc:33:6d:ea:b2:16:6d:09:6e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Validity
Not Before: Jun 4 03:01:19 2026 GMT
Not After : Jun 5 03:01:19 2026 GMT
Subject: CN=1e87c5fed84944cc3eeaedf2d9bc7425fe57bac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:80:35:23:03:d3:29:09:f9:fc:9f:12:b1:
f9:85:19:58:ff:c9:20:78:a6:4f:5c:05:66:22:2f:
7a:7c:f6:d1:51:e3:95:fb:3e:5d:e8:56:10:5a:77:
1e:6d:63:10:4e:a2:1d:1a:ed:83:ad:1a:00:8b:63:
9c:a4:f2:df:45:8a:a1:1e:d9:92:0c:06:4d:4e:52:
37:28:c3:f6:e5:00:31:cd:b6:96:66:d5:ef:e8:e2:
2c:4c:2b:62:f1:05:ed:18:a5:64:1f:0a:3c:da:67:
36:7d:4a:c7:ce:83:95:da:ec:bb:22:41:66:41:ba:
08:1b:7a:c0:e8:f4:d3:48:75:95:d1:be:ab:22:c9:
a6:c3:c7:29:0b:64:27:0f:b0:ef:33:8d:c2:5c:46:
79:8f:fa:fe:02:f5:82:a6:2a:74:d9:c3:53:9f:6b:
46:90:0f:5e:14:c3:2c:04:84:cf:a6:6f:c4:3a:c7:
7f:e7:b6:f4:1d:fe:b8:fa:62:ff:84:f9:51:4c:c6:
40:e1:55:e3:1b:5e:58:cd:ca:88:63:6d:5a:6b:23:
df:4c:0b:58:25:e6:05:05:ed:0b:41:f2:21:f1:28:
cd:dd:fa:15:e3:ed:31:0d:5d:7d:a5:94:3d:f8:d6:
e5:81:72:d6:e8:6a:88:3b:05:5d:1f:93:35:dc:9a:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:87:C5:FE:D8:49:44:CC:3E:EA:ED:F2:D9:BC:74:25:FE:57:BA:C9
X509v3 Authority Key Identifier:
keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ce:62:38:44:ef:43:6d:2b:f8:7f:f7:60:eb:94:ba:e7:8c:
ac:1f:7b:82:57:59:4f:de:35:e1:a1:17:1c:e5:b8:7e:89:c9:
1b:33:3c:3a:cf:9a:fc:4c:9e:30:17:7e:2a:24:40:2b:b8:07:
49:b8:e0:a9:68:d2:4e:48:a1:a4:f4:3d:e4:8b:4f:94:ce:a9:
5b:9a:59:b4:b9:25:24:dc:76:29:5b:69:e0:0a:77:08:cc:ee:
a5:f7:01:39:df:2b:8a:dd:36:05:fd:c9:6c:4c:14:17:63:48:
fa:9a:49:b5:20:b6:92:7a:dd:c6:64:65:04:a3:20:43:29:d4:
1a:27:d1:83:67:75:d8:38:0d:f4:4d:a2:c6:32:50:92:78:74:
b2:51:a3:cd:f3:18:02:e9:31:9b:3d:30:76:8c:e7:dd:cd:86:
3e:f9:c8:3e:f6:3f:c3:76:7f:85:40:ea:79:d0:83:be:e3:65:
7d:88:af:43:ee:70:a6:7c:e4:ed:38:e3:a7:a3:0b:ce:f3:86:
0d:6b:db:8d:ed:f9:cf:ee:99:53:5d:45:97:ab:24:0c:02:13:
16:1d:86:34:dd:de:f5:ad:3e:c5:67:96:c2:13:a2:0b:32:93:
4e:50:c5:e7:b5:b6:72:57:6b:68:c9:37:cc:ad:0c:58:f6:5a:
28:d2:8a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:02:28 2026 by rpki-client