Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: RtQQpVv1mr+Cc96ugzsDjyGv0xFSYJ6e1bg63dthP/Q=
Subject key identifier: 4D:4A:B8:6F:52:DC:F4:24:0C:9D:FB:17:46:9A:BB:2D:3E:2C:23:50
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 019EB9586F0C1140DCC69E90BFC858F0D5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 067F
Signing time: Fri 12 Jun 2026 01:00:40 +0000
Manifest this update: Fri 12 Jun 2026 01:00:40 +0000
Manifest next update: Sat 13 Jun 2026 01:00:40 +0000
Files and hashes: 1: GHSDF2JPEye0O4AWUxBCYSEkaAI.roa (hash: 0lOTIXpj+IiF+Cvw2ZPIma45JyDvj6gDTakt2B0h2bc=)
2: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: OsnGWU/JVyTPlStzy6fTO7gBDQm+Nlz3YSXUKV3p1j0=)
3: zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa (hash: 3m9rp/jqInhSmfaVC+tbC+fcAxs/SBMNeqBaNmCor5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:6f:0c:11:40:dc:c6:9e:90:bf:c8:58:f0:d5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Jun 12 01:00:40 2026 GMT
Not After : Jun 13 01:00:40 2026 GMT
Subject: CN=4d4ab86f52dcf4240c9dfb17469abb2d3e2c2350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:e0:97:84:6d:39:a2:75:4e:e0:0c:63:ec:
47:db:1e:53:1b:56:3a:4b:f3:06:c0:28:fa:22:a3:
ca:b0:21:f0:ab:b5:9c:8b:71:d9:38:f6:1a:ea:47:
c4:5f:43:7f:26:5f:fa:92:cf:52:97:a9:a1:66:5a:
69:e1:da:38:3c:80:55:5b:43:0d:51:91:9d:ac:0e:
63:a0:65:a3:d6:4d:62:c5:30:5f:52:04:e1:f6:74:
fe:c7:d9:bd:41:58:1a:53:78:e8:1d:33:d4:d4:2c:
82:09:91:1c:a3:05:70:71:e9:82:36:e2:73:6b:02:
03:c0:77:2d:ad:2a:3a:69:f7:6d:c9:dd:58:af:5a:
3f:ce:2f:33:70:ac:1d:6e:dd:e9:64:a7:33:e1:84:
be:a2:b0:12:71:da:58:34:a0:bc:1c:3a:70:fe:f5:
15:12:52:85:31:6c:10:8d:1b:31:61:2f:a0:c7:1e:
dc:07:c3:01:76:0f:c2:66:a3:19:cd:0d:91:61:8a:
21:d9:e4:1a:dd:0d:37:30:b0:c6:27:5a:fe:56:0e:
f7:16:a4:3e:64:4c:04:b0:a9:34:82:ec:e5:85:98:
76:27:d8:e5:2b:72:99:f7:18:d0:04:d1:4b:2b:f5:
58:e5:3f:b7:f8:92:93:ac:8c:46:25:52:99:4e:6d:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4A:B8:6F:52:DC:F4:24:0C:9D:FB:17:46:9A:BB:2D:3E:2C:23:50
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a6:c2:ab:5f:2d:27:1c:cc:41:3d:38:9c:85:ae:d9:bb:62:
e7:66:c1:f5:fe:ef:a6:c5:46:77:6e:db:18:33:8a:9b:3f:75:
d4:43:d7:47:e9:64:29:58:d5:27:fe:6a:88:9c:be:f8:ce:74:
85:f3:0e:1e:56:3a:49:ee:da:49:18:e1:e6:7d:c4:ec:8a:e9:
dc:ea:b8:2c:81:29:da:3f:23:fd:7c:14:c8:42:ae:10:df:14:
1a:a1:33:a9:da:3c:1a:15:1a:dd:d2:ea:09:bd:f2:70:60:fe:
13:37:64:83:3b:a7:ed:0a:ed:bc:2a:f5:0d:b0:5e:df:8c:52:
22:a8:ae:99:8f:57:99:d0:be:27:e0:5b:e9:fe:0d:16:b3:34:
8d:a0:cf:af:77:0f:8e:cf:ac:23:57:7d:66:c4:25:5f:63:8a:
d1:e6:dd:2d:52:c0:8b:a5:41:7c:16:cd:0f:8d:f5:b3:d9:35:
5f:c1:9a:c6:f1:fa:b8:4b:61:94:62:ff:2a:97:69:6d:45:ab:
d9:0e:80:11:d4:bf:fa:4f:a7:64:8e:83:57:21:b9:e7:36:5c:
2f:7f:e2:0a:65:2e:48:25:a1:ae:fd:55:42:b7:25:a8:fb:d5:
93:8f:5c:4a:c1:3b:2c:55:7e:05:83:94:97:1f:a1:76:fd:27:
6a:40:99:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:47:48 2026 by rpki-client