Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: CXEubRMuOatPuUrfoC+npVpUFDMY++dB4doAX+k1fYE=
Subject key identifier: 93:5D:97:A3:5F:9E:B5:A4:94:1B:1E:06:02:F1:54:D9:A6:94:9D:52
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 019EB80FB3B139F1923808F3E0BFBCC36769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 0AB1
Signing time: Thu 11 Jun 2026 19:01:37 +0000
Manifest this update: Thu 11 Jun 2026 19:01:37 +0000
Manifest next update: Fri 12 Jun 2026 19:01:37 +0000
Files and hashes: 1: EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa (hash: CaEBziMi2C6rN6WGf7O34W/+WtB1Ogao7r0fRD3u2XA=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: EKSKJ9IcLbqu19WUuTla0oZzLpT9DxzPUiB3XfoGPuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:b3:b1:39:f1:92:38:08:f3:e0:bf:bc:c3:67:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Jun 11 19:01:37 2026 GMT
Not After : Jun 12 19:01:37 2026 GMT
Subject: CN=935d97a35f9eb5a4941b1e0602f154d9a6949d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:e3:b4:61:c0:48:32:9d:90:f4:4c:34:99:
81:69:88:ff:2b:b8:a9:3e:8d:73:b6:30:1e:27:af:
74:10:71:1d:f4:a8:00:90:82:9e:5f:06:12:50:b7:
c1:7a:e7:eb:60:d0:99:07:d6:17:27:05:77:e5:59:
d2:4e:a0:2b:55:70:9d:78:9d:98:10:d9:2b:a2:18:
c8:e5:39:ec:f8:13:ce:ef:ee:38:3d:ed:ed:cb:b0:
20:b2:62:50:ab:49:4f:3d:30:37:9f:46:a5:b4:b3:
88:22:f4:f5:03:4c:e2:c6:10:6f:bb:86:c0:e0:25:
33:15:b4:d4:b9:36:d1:b0:75:f5:05:d0:07:1f:62:
95:9b:29:7b:8a:90:6f:ee:e4:84:53:48:39:bb:68:
c8:5a:0c:10:e8:7b:18:61:05:bd:bf:1f:b6:93:e1:
fe:11:bf:cc:bc:89:03:e1:80:24:43:4f:51:af:00:
7d:8b:fe:81:45:59:60:94:a5:51:36:2e:5b:f3:cc:
3d:85:c5:3d:c9:29:6b:fc:4f:49:be:b4:3b:24:db:
9a:3c:bd:2f:9f:50:4d:6f:c1:93:2a:44:5a:1a:48:
f9:33:99:1d:16:68:fa:9e:0b:67:eb:3a:90:b0:54:
9d:30:e7:62:3e:bf:17:46:3e:9a:a3:a5:d3:56:f1:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5D:97:A3:5F:9E:B5:A4:94:1B:1E:06:02:F1:54:D9:A6:94:9D:52
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8f:0f:08:63:65:d9:21:db:98:77:f6:fd:21:57:91:4a:4a:
07:a5:89:aa:49:49:05:72:58:93:ae:13:d5:d2:f3:e9:fc:cc:
0a:58:b9:6a:2c:4e:04:7b:f7:28:3c:b1:28:c2:12:8d:26:79:
38:d8:1c:ea:25:2a:a9:d5:39:5c:93:81:d5:cc:ff:15:f8:5b:
7c:8b:5b:8c:1a:42:3a:ac:bf:4d:08:b0:50:45:a7:15:2e:70:
6d:49:3e:55:9d:50:4e:65:70:b9:82:6c:dc:eb:b3:e5:a3:4b:
51:0c:3f:1d:12:cd:7b:a9:0d:d2:89:e0:b5:60:4f:de:d0:a8:
06:d5:9b:6c:39:3e:4c:08:43:df:8e:8f:a6:1a:05:7b:af:cf:
22:5b:09:c1:c0:fc:ad:9e:08:8d:f3:d4:d3:84:5a:90:7e:29:
f5:e4:59:0f:bb:eb:d2:a7:f1:be:1e:9e:85:0a:e8:b4:96:a5:
e1:86:42:ec:02:84:41:f7:1a:88:8d:a1:42:e2:71:cc:cf:04:
77:af:12:ba:bf:ba:8f:3e:ba:ba:9b:62:0e:07:d9:63:f0:ad:
e2:ee:54:45:37:c7:96:29:5e:34:57:84:d3:99:da:19:60:46:
70:ed:6a:39:43:24:48:8a:f9:67:fc:85:4f:49:6c:f3:3d:82:
dc:18:bf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:28 2026 by rpki-client