Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: 73ef+/dl2LEs+aNSN5RR808G67t1H8HyzIciLhFmZ1g=
Subject key identifier: 7F:A8:74:4D:36:3D:EA:86:6D:91:42:D0:D2:7A:1C:EF:7D:F6:D5:B2
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 019EB8EACF5D811E5B785FE69E4AEBD12916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 23:00:56 +0000
Manifest this update: Thu 11 Jun 2026 23:00:56 +0000
Manifest next update: Fri 12 Jun 2026 23:00:56 +0000
Files and hashes: 1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: aby06XE3dEd5gn2YnMRTPTj9/JVU41y2J+lw7vuL9m8=)
3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:cf:5d:81:1e:5b:78:5f:e6:9e:4a:eb:d1:29:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Jun 11 23:00:56 2026 GMT
Not After : Jun 12 23:00:56 2026 GMT
Subject: CN=7fa8744d363dea866d9142d0d27a1cef7df6d5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:a6:b7:61:22:1e:b2:c0:49:6e:65:f9:37:
93:a8:42:23:02:d9:28:75:13:cf:f5:0f:55:48:4a:
07:a7:1f:2b:cb:bb:5c:35:08:89:ba:0b:9d:16:60:
3c:ac:51:27:b9:40:a4:36:8d:62:60:8e:3b:9f:f3:
3a:8f:a9:f7:2f:d8:4d:ea:e4:a2:fd:05:41:b7:0f:
12:4d:a8:54:e5:43:3d:6d:b7:3c:25:0d:18:09:56:
a5:4e:cd:cd:e0:4a:f5:1a:39:46:69:c4:a1:f8:f3:
65:b1:e5:23:55:0e:90:79:37:d7:10:ac:0a:b1:9a:
46:12:3b:ff:c4:7a:25:53:f2:3e:b9:2a:a2:0a:55:
54:63:dd:7d:89:f5:45:74:1b:35:18:85:56:d6:a2:
b6:c3:a6:63:42:98:09:0f:c8:59:e3:d1:3a:94:bd:
8a:44:45:67:a7:3e:33:dd:f0:c3:42:5a:c7:fb:f2:
e8:55:3f:db:cc:c8:f4:34:ae:50:80:7b:20:68:b5:
3a:9a:6a:0c:2d:c2:a2:c0:e8:eb:f5:5c:e8:e9:b8:
82:1c:f8:e6:95:bc:22:08:55:b5:4c:3a:55:75:13:
2b:82:c7:4f:0a:f6:73:8b:32:65:6f:c6:3b:b0:f1:
be:c1:55:4f:86:c9:8f:1d:68:27:e6:a8:78:08:7c:
86:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A8:74:4D:36:3D:EA:86:6D:91:42:D0:D2:7A:1C:EF:7D:F6:D5:B2
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:23:48:e9:48:00:5c:32:99:11:71:2e:8a:43:33:df:21:a0:
b7:63:81:02:f8:1b:59:55:c2:a2:76:1f:e5:cd:1a:96:14:cb:
f3:48:b1:8d:79:70:48:40:09:e7:9b:fe:24:04:1a:cd:81:e2:
45:4c:4f:9c:44:84:94:9c:99:74:bf:25:30:26:ec:1f:5d:93:
78:8f:95:49:90:39:dc:6e:df:c6:d8:3e:1e:58:8e:59:e1:cf:
7f:bc:41:77:96:cd:f2:a4:bd:67:11:28:34:2a:0e:0d:3a:47:
5f:7a:ad:c9:93:8e:6f:51:ad:17:70:f7:b8:91:66:f6:d1:94:
93:df:98:be:7a:9c:7d:fe:fb:16:6d:33:39:92:db:d8:60:0c:
ed:89:ed:d2:d3:b3:34:0d:6d:f6:f1:41:8f:ed:37:5e:38:b6:
b8:fc:d8:45:45:8a:7d:70:ef:24:2f:1f:e9:95:10:f3:63:08:
b9:2d:bf:c0:46:9a:32:ac:8c:72:1b:03:55:50:89:bf:a7:66:
90:ee:9e:d4:a2:eb:0b:ee:55:61:8d:d8:a9:28:35:80:02:93:
10:90:86:2a:df:6d:df:df:79:4e:f2:98:3d:67:c4:6b:06:63:
6b:53:61:ec:a9:fa:07:b1:56:41:8c:ea:70:28:e8:48:79:e7:
de:f5:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:37:48 2026 by rpki-client