Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: MDW7L/gyHjtmRV6VVWcglsxJYjVou+RoGtD7x134IGY=
Subject key identifier: D4:0A:9F:E6:28:0E:70:82:CE:F0:EC:A0:C6:54:E5:EE:64:CE:6D:A7
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 019E31F2B2D7EB6D0DD194A58C9A4A6CA67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0B34
Signing time: Sat 16 May 2026 18:00:49 +0000
Manifest this update: Sat 16 May 2026 18:00:49 +0000
Manifest next update: Sun 17 May 2026 18:00:49 +0000
Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=)
2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: cG9HAFT6ScqMB3DwbEw3Ley+bV6P+9PR9CTAWC9Ncv4=)
3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:b2:d7:eb:6d:0d:d1:94:a5:8c:9a:4a:6c:a6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: May 16 18:00:49 2026 GMT
Not After : May 17 18:00:49 2026 GMT
Subject: CN=d40a9fe6280e7082cef0eca0c654e5ee64ce6da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:f3:2b:3d:45:2e:c0:cc:8b:7c:20:82:34:
4e:94:07:97:4c:6a:39:68:85:f7:b4:01:e3:82:d0:
fa:c6:79:6a:bc:56:26:94:d8:da:16:a9:f0:17:89:
70:c5:a3:11:20:e9:8f:e2:85:5b:c8:65:50:f8:67:
31:9c:85:00:ce:3c:9e:49:a0:86:37:21:72:62:f4:
b5:26:71:f7:cd:f0:8f:1e:84:6a:62:6a:6f:2f:fd:
db:19:bc:be:7e:9c:8c:64:c6:20:1a:f8:1c:ea:95:
2b:23:e8:a8:0c:c3:87:06:0c:72:41:0d:ef:03:93:
a1:28:bc:b3:44:2a:53:7c:64:d0:a9:00:b7:69:8f:
da:bb:a1:b8:94:d4:6c:a4:b8:28:03:de:39:32:4e:
c7:12:d7:17:13:c9:ff:f9:88:58:61:66:85:7d:08:
c5:9f:84:cd:e9:1d:9c:03:31:0b:f2:a1:3a:bf:f5:
76:62:00:93:39:ca:4a:a7:1d:af:e8:e3:bb:d3:fd:
fa:57:2a:7b:a1:16:a3:46:00:2a:d0:0e:8e:bc:28:
e0:a3:4b:ca:bd:7b:43:8c:dd:fa:34:2d:ec:75:51:
01:44:75:fb:27:07:81:e8:16:ac:a2:98:73:31:50:
cd:ed:7c:9a:12:c5:b9:39:df:19:ec:27:81:67:25:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0A:9F:E6:28:0E:70:82:CE:F0:EC:A0:C6:54:E5:EE:64:CE:6D:A7
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0b:33:2c:4c:88:e5:f4:d9:a4:00:66:e5:62:f6:24:28:83:
4d:20:65:6f:1e:bc:2a:33:16:6b:a3:7f:32:86:c9:b7:be:ab:
a2:46:a7:c7:0c:6a:01:52:ba:10:02:b0:46:42:ba:c2:50:b6:
90:a2:9b:9e:7c:d4:55:74:02:18:b7:b1:0f:7a:02:24:8e:48:
5c:19:55:07:5e:82:13:0a:55:1d:7f:fc:7b:da:43:68:20:98:
ca:84:ea:a1:88:25:b0:ef:93:96:a8:7a:1d:8f:0a:94:ea:20:
2d:fb:dd:38:ed:31:f3:8b:dd:47:a7:11:c2:33:b2:f2:29:43:
98:8c:52:50:18:81:03:d0:92:4c:f1:3f:34:67:0f:0d:3a:ac:
21:68:ee:78:55:d1:9f:e1:e4:f5:86:37:05:bb:a7:e5:4d:69:
51:fc:25:e7:dd:90:c8:76:c9:38:7b:70:70:56:35:4d:cf:1d:
80:ed:a9:ca:85:a9:7b:6a:b6:61:2f:1d:bc:79:36:1f:db:4c:
bc:95:56:0b:ff:90:5e:ce:c5:dc:a9:f6:f1:67:2e:38:bb:8f:
c4:f5:b2:84:b1:02:d2:4c:9a:d8:35:17:04:3c:73:5f:5e:26:
5f:d3:ed:8c:b9:bd:7c:ab:43:a0:20:52:aa:4b:71:4d:b4:e7:
f1:76:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:43 2026 by rpki-client