Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: GxZDLYsii8PpMwoFOcwUmbBp87p9GPyRhWvEuGhuh70=
Subject key identifier: BB:0E:BA:EC:2A:98:02:12:A7:E2:DF:DE:89:57:85:68:EB:FB:86:DC
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 019E326085B777AE788617C8B11C5BA0CA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 20:00:46 +0000
Manifest this update: Sat 16 May 2026 20:00:46 +0000
Manifest next update: Sun 17 May 2026 20:00:46 +0000
Files and hashes: 1: 1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa (hash: riRb4iPkDBtyw2U0WQzBeSsFtt3y8g90iqUigaVwK4I=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: V9rSrpaXrPltZwpiEViytvPnSdv1KhnZq3xSohSvvGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:85:b7:77:ae:78:86:17:c8:b1:1c:5b:a0:ca:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: May 16 20:00:46 2026 GMT
Not After : May 17 20:00:46 2026 GMT
Subject: CN=bb0ebaec2a980212a7e2dfde89578568ebfb86dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:75:b0:ec:fe:91:de:5e:ec:cd:de:c3:a2:
da:5d:c0:24:c6:b7:77:92:ec:39:63:39:ef:99:27:
cf:f2:47:89:c1:a3:25:8e:42:7d:24:4c:e3:70:10:
53:e0:f9:8b:3b:a1:80:92:02:9f:43:14:9e:2c:04:
5d:49:0b:e9:32:23:3f:43:82:ca:57:32:43:05:6d:
91:10:d3:d7:a6:7b:23:6b:ce:86:82:48:38:d3:1d:
8d:fe:5a:31:0b:bd:39:8c:21:32:c7:92:96:81:4a:
72:2f:65:2c:8f:92:17:68:85:9e:d4:23:a5:49:7c:
ee:e4:8c:2b:8f:d1:6f:4c:6a:88:91:db:b5:3f:4f:
55:95:22:b0:36:91:fd:79:c9:2e:a3:60:3d:77:ab:
be:63:aa:19:40:13:29:ab:8c:99:05:a4:0e:9b:02:
27:31:b0:a3:20:55:d5:07:7c:e8:ad:c0:8f:df:44:
bb:91:13:be:13:0e:ed:1f:0c:33:91:1f:bd:d7:da:
b9:0b:bd:75:43:ed:56:95:14:97:cd:6c:2d:89:e7:
82:4b:be:c9:03:34:cb:85:25:a3:d6:d8:34:df:8c:
8a:cd:39:17:0b:53:86:af:ec:97:3c:5b:73:ab:3d:
15:22:49:3b:00:aa:67:cd:ca:ca:b6:ef:d3:2d:2f:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0E:BA:EC:2A:98:02:12:A7:E2:DF:DE:89:57:85:68:EB:FB:86:DC
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c6:dd:7e:35:ef:a1:16:31:f9:5e:d9:06:d8:e4:a9:50:17:
70:e0:97:1a:85:f6:42:4b:37:17:e4:d0:d5:fe:cd:0f:c3:ea:
c3:7b:e6:0e:46:20:09:0d:38:78:73:71:71:8e:da:76:3a:f7:
7d:e2:ba:54:b0:c8:9c:a0:9d:9d:69:9a:49:c2:75:5f:b3:90:
13:0b:5a:34:52:94:1c:2c:ae:f2:51:2c:d4:01:f7:2b:4c:67:
2d:ca:90:bc:dc:0f:87:6a:bd:cd:0d:57:cd:c2:d0:aa:be:8c:
6b:21:2f:00:24:1b:f5:33:b1:a7:b6:b1:03:54:af:99:20:66:
4c:d9:fc:12:d3:88:e2:36:df:3d:cd:3c:17:df:34:b9:b7:42:
14:f4:83:a5:35:e7:21:c9:d7:88:d0:dc:59:e8:49:52:81:8f:
30:b1:6e:b5:14:6f:cf:bb:45:64:c8:89:4e:34:7c:5a:48:e8:
3c:c9:92:d8:e7:5f:3e:97:ab:f1:94:54:59:09:1d:0d:98:b3:
d2:82:5c:ce:0a:fd:1e:a8:9b:9b:92:37:d9:70:cf:9d:06:2c:
7b:d4:a5:48:75:ab:31:6c:5d:47:49:55:02:3a:66:f6:0c:e1:
8d:0f:3b:9a:09:cf:ab:ce:f4:6a:c9:6d:bf:6b:4f:fc:12:90:
d5:fb:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:13:53 2026 by rpki-client