Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier: fVeR5vdnRFqMgw7frBFf9lDPMBXLyl65n4rfGd36tsE=
Subject key identifier: 56:68:8A:94:3B:B2:22:AC:1B:2D:1A:57:5E:E7:98:C5:AC:64:57:25
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 019EB9FDBB536B518447A9F642E37E20CE89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number: 1957
Signing time: Fri 12 Jun 2026 04:01:13 +0000
Manifest this update: Fri 12 Jun 2026 04:01:13 +0000
Manifest next update: Sat 13 Jun 2026 04:01:13 +0000
Files and hashes: 1: Qy5yKoxjLWJA1uRpC0vjfkx5IHQ.roa (hash: y7SNkohtjGeeXJKm5Co5EsY36dtQ+/7kfkwvtYcQU4g=)
2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: crZlREzuZlT5FWnTVd5flr8HKQ2k7DEG2CF8VnPOJAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:bb:53:6b:51:84:47:a9:f6:42:e3:7e:20:ce:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Jun 12 04:01:13 2026 GMT
Not After : Jun 13 04:01:13 2026 GMT
Subject: CN=56688a943bb222ac1b2d1a575ee798c5ac645725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:35:ec:cf:0b:e8:77:91:f6:c8:53:80:e4:
52:62:94:65:8f:0b:f8:e8:16:00:77:a6:87:16:49:
eb:a0:0a:39:4c:72:b8:0b:42:48:2d:61:17:21:71:
57:34:e8:0a:e2:76:3a:bc:39:37:e5:49:bb:b1:87:
94:2b:c2:ea:87:9d:4f:0d:c8:3b:b2:65:42:15:cc:
2e:24:b7:06:cb:5b:65:55:a2:3a:2b:47:58:e0:a3:
ac:94:8f:4f:32:ef:8e:8a:23:67:20:ba:f9:54:83:
0d:6c:bc:37:a4:4c:f9:2c:36:55:23:1f:28:54:5a:
9f:d2:76:e7:76:b4:33:13:a3:d4:f7:ca:62:0b:3a:
00:c9:08:15:87:ed:e3:cb:65:cc:e9:30:2e:64:5e:
0a:f4:0c:fb:e2:0c:36:4b:57:27:5f:77:4b:ac:d2:
68:94:57:dc:b6:aa:d2:80:58:d8:9c:ef:c4:de:5c:
82:2c:fb:7e:a3:5a:57:f1:9c:79:03:8f:ca:3c:b9:
04:95:ca:8a:98:29:77:32:e3:14:25:15:cf:47:82:
44:67:0d:0c:19:cf:63:d7:ed:2e:d4:5c:bd:93:00:
90:06:38:bf:cc:ee:84:19:36:54:6b:a1:07:41:06:
74:0f:1f:14:1b:f7:0c:82:ba:65:b8:54:8b:cf:9b:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:68:8A:94:3B:B2:22:AC:1B:2D:1A:57:5E:E7:98:C5:AC:64:57:25
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f1:f7:1b:2e:c2:7b:07:04:14:61:ef:75:39:2b:be:f2:2b:
e5:a9:1e:44:4c:46:79:72:4b:c8:6e:1b:f8:17:cc:5f:5f:2b:
f6:14:59:62:8a:ac:d0:8f:c1:71:7b:7c:4c:f6:68:00:83:1d:
92:7c:8a:6e:82:45:e2:cd:3a:dd:33:70:ce:9a:03:b9:ff:73:
8c:a6:b7:75:eb:1e:49:44:68:e6:2b:88:46:58:df:b6:95:2f:
d2:fe:b1:40:20:e8:0a:0c:26:14:74:51:65:2b:b8:5e:26:27:
56:35:18:01:3e:8c:90:b4:d6:6b:d3:fa:ee:f2:0b:b0:80:a5:
e9:6e:77:9d:1f:73:35:10:64:0d:d6:15:f0:2e:21:c5:11:dd:
5a:cd:21:da:5d:23:be:6c:ff:0c:26:67:02:6f:01:78:14:87:
22:a3:1c:a3:e2:e4:fa:65:1a:0d:07:c8:ff:95:0e:3d:ae:5b:
9b:e7:f9:07:e7:b5:b4:58:f7:8d:0f:10:a1:8c:c6:f0:ae:53:
4a:e5:ce:ba:c8:7a:27:6a:00:7a:48:d7:5d:d7:e4:97:12:8d:
f2:67:17:76:00:fe:ab:c6:98:09:4d:de:ec:fb:0e:a4:64:f4:
90:af:c9:21:53:a2:93:50:bb:73:b1:f1:f2:00:76:21:ae:2c:
b1:6d:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:10:43 2026 by rpki-client