Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: 7OIz/PmN46WJjIIbwNt9GhiWoD651oC8GxdXoD+JvxI=
Subject key identifier: EC:F6:56:AF:91:14:3A:87:10:C5:E6:87:A6:A9:C5:FE:F6:A6:99:39
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 019EB6FC7CD1CE66AB174171F94061D24006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 0AFC
Signing time: Thu 11 Jun 2026 14:01:00 +0000
Manifest this update: Thu 11 Jun 2026 14:01:00 +0000
Manifest next update: Fri 12 Jun 2026 14:01:00 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: VgQdn/SnMl1fUNGGmoMwK8H7HKa2I6GQVtOMYX9SJ5c=)
2: nTSOIsFCXPktLiPKU0rpSqAxP9c.roa (hash: p4pPo4o8ji9IxG+yykgVyf22JPwriVlViBGbSDBIE2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:7c:d1:ce:66:ab:17:41:71:f9:40:61:d2:40:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Jun 11 14:01:00 2026 GMT
Not After : Jun 12 14:01:00 2026 GMT
Subject: CN=ecf656af91143a8710c5e687a6a9c5fef6a69939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:18:d0:c2:44:50:2b:a8:83:40:87:24:66:
48:32:8c:2b:09:9c:c3:fb:ef:c0:6d:30:af:f2:6f:
a9:32:b3:99:d8:24:af:76:c9:d6:9f:eb:03:98:61:
67:d2:2b:a0:63:96:e7:42:ff:80:59:40:25:28:a9:
d8:19:07:3a:e7:ff:b5:4a:88:15:30:92:d5:84:11:
3f:10:cd:e0:e3:e3:0f:6f:d9:d7:2e:ae:fa:60:2b:
7c:88:ef:c1:4e:c8:d0:22:8f:c9:c9:eb:dc:3a:ff:
62:67:dc:62:3e:a7:6b:a5:a9:4c:18:5b:09:94:73:
c2:08:44:6a:73:e7:d5:79:0c:18:85:7c:a5:e4:6c:
da:d6:3d:0d:75:78:8b:d2:c8:dd:e6:9e:5b:46:cb:
6d:44:f7:e1:dd:f9:c4:94:a5:c3:9a:f5:04:f6:5a:
91:2b:11:bd:54:5d:31:d1:c7:12:d2:02:c0:75:4b:
76:a1:b7:9f:fd:84:4a:f8:03:e8:8d:89:06:d6:0c:
86:0c:10:40:21:3b:a9:13:7e:74:37:12:18:c5:25:
de:12:68:4f:54:53:17:f5:8e:aa:c8:41:f0:a5:b8:
7c:41:bf:f2:90:e4:f1:8b:9e:d1:bc:98:05:eb:57:
2a:c2:61:6a:21:52:8c:73:40:e8:15:94:7b:68:62:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F6:56:AF:91:14:3A:87:10:C5:E6:87:A6:A9:C5:FE:F6:A6:99:39
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3c:cb:b5:9e:73:bb:e3:64:93:cd:84:fa:6c:b7:f4:1f:d4:
bc:36:27:a4:1c:ae:14:d5:28:cb:95:12:76:1c:c7:61:f3:9e:
4b:e4:fc:4c:91:b5:bb:12:8e:b6:d6:ec:48:89:7b:ea:4a:6c:
11:3a:f7:c5:eb:1c:a7:83:c6:b4:a5:b8:ec:ec:ce:ab:5a:11:
8c:6e:2a:8d:12:99:ef:bc:fd:30:77:6d:59:72:14:cc:7a:83:
4b:c2:e1:e8:a9:9f:fa:b3:f0:be:d9:75:e9:e6:d5:5f:70:23:
39:7a:04:86:e8:70:2e:9f:e4:5b:9f:59:94:e7:81:e7:84:18:
85:78:1c:16:da:60:68:71:c8:8e:60:07:ae:3c:36:9a:7e:ad:
7e:68:c0:90:e6:ea:35:7f:1d:b8:e2:5e:74:2a:9d:f0:32:fb:
51:9f:e0:36:90:01:55:e2:f3:b7:58:5b:1c:6c:22:ba:54:17:
80:d0:0b:89:1c:0f:cd:5e:b4:5d:b0:8d:60:92:74:9d:6e:b0:
a8:f7:8a:c9:44:60:6d:ad:9c:fe:d3:9e:06:7d:d9:71:91:81:
4f:48:31:d2:1b:19:fb:ff:aa:12:fd:aa:34:76:b5:0e:1e:66:
f3:c6:90:db:26:d7:9a:1c:54:c3:31:3e:40:5e:2e:bd:7c:c3:
03:29:4d:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62/HzRzmarF0Fx+UBh0kAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZGMyMzUyMTE3NjAyMzIyZDc0MWM1MTM2OGNhOGI4ZGQx
YTNlYWEwHhcNMjYwNjExMTQwMTAwWhcNMjYwNjEyMTQwMTAwWjAzMTEwLwYDVQQD
EyhlY2Y2NTZhZjkxMTQzYTg3MTBjNWU2ODdhNmE5YzVmZWY2YTY5OTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ0Y0MJEUCuog0CHJGZIMowrCZzD
++/AbTCv8m+pMrOZ2CSvdsnWn+sDmGFn0iugY5bnQv+AWUAlKKnYGQc65/+1SogV
MJLVhBE/EM3g4+MPb9nXLq76YCt8iO/BTsjQIo/JyevcOv9iZ9xiPqdrpalMGFsJ
lHPCCERqc+fVeQwYhXyl5Gza1j0NdXiL0sjd5p5bRsttRPfh3fnElKXDmvUE9lqR
KxG9VF0x0ccS0gLAdUt2obef/YRK+APojYkG1gyGDBBAITupE350NxIYxSXeEmhP
VFMX9Y6qyEHwpbh8Qb/ykOTxi57RvJgF61cqwmFqIVKMc0DoFZR7aGJoYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOz2Vq+RFDqHEMXmh6apxf72ppk5MB8GA1UdIwQY
MBaAFBjcI1IRdgIyLXQcUTaMqLjdGj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2Mt
ZDdjMGU5MzkzZWEwLzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2MtZDdjMGU5MzkzZWEw
LzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjzLtZ5z
u+Nkk82E+my39B/UvDYnpByuFNUoy5USdhzHYfOeS+T8TJG1uxKOttbsSIl76kps
ETr3xescp4PGtKW47OzOq1oRjG4qjRKZ77z9MHdtWXIUzHqDS8Lh6Kmf+rPwvtl1
6ebVX3AjOXoEhuhwLp/kW59ZlOeB54QYhXgcFtpgaHHIjmAHrjw2mn6tfmjAkObq
NX8duOJedCqd8DL7UZ/gNpABVeLzt1hbHGwiulQXgNALiRwPzV60XbCNYJJ0nW6w
qPeKyURgba2c/tOeBn3ZcZGBT0gx0hsZ+/+qEv2qNHa1Dh5m88aQ2ybXmhxUwzE+
QF4uvXzDAylNyg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:43 2026 by rpki-client