Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: bvNt8pLZJIOhfyyR4FqqCNJ4JRqteg0zY/FWyP37G84=
Subject key identifier: 4B:4F:F8:1E:7F:69:5C:D8:39:14:83:8C:57:DE:38:2B:75:AB:72:D6
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 019E5CA689E4B438E0DF8711485CD478055C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 11BD
Signing time: Mon 25 May 2026 01:01:18 +0000
Manifest this update: Mon 25 May 2026 01:01:18 +0000
Manifest next update: Tue 26 May 2026 01:01:18 +0000
Files and hashes: 1: ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa (hash: DP27/a5o1Ym+vesDLFqV0Tua4ny+ds0/pH34jhmErS8=)
2: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: 4+UrydCsvJxV7UFf/WF2OT2G3V/hO/Sh5SuAOOgNp6U=)
3: Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa (hash: KqQ8TKxBYl3JumzrSj+0qt5zeDJPsxKpAnGsc38qwpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5c:a6:89:e4:b4:38:e0:df:87:11:48:5c:d4:78:05:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: May 25 01:01:18 2026 GMT
Not After : May 26 01:01:18 2026 GMT
Subject: CN=4b4ff81e7f695cd83914838c57de382b75ab72d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:41:ad:b0:48:c7:56:d6:d2:b2:80:37:42:
a6:25:25:1d:24:a6:62:ca:d9:eb:e9:ce:ae:ce:9e:
0a:49:be:9b:36:61:7e:8a:b5:65:1c:56:2d:b7:70:
72:3e:6d:16:7b:29:08:f7:8a:89:44:04:18:e6:5d:
6c:71:a7:27:3b:4e:eb:06:ba:cb:ab:81:e6:56:8f:
26:c7:c3:3c:d2:00:74:33:c0:e6:4a:d5:d1:ee:a5:
d7:34:a3:a0:9d:cf:8d:2d:81:54:90:65:ed:53:ee:
2c:c8:5c:f6:7b:a9:57:9e:c3:a3:f4:4e:6b:ad:60:
1a:8e:0d:39:30:78:71:58:e7:1f:6d:d2:03:7f:97:
05:bd:f2:14:37:af:75:ef:f3:32:22:ef:40:17:bb:
b9:ba:d9:a2:93:60:2e:e6:f9:bf:db:b8:fe:be:61:
07:64:a5:97:34:fc:0a:ed:d4:b5:5e:e2:3b:ce:1c:
68:30:e7:15:b3:17:80:51:79:33:38:d5:4c:1f:42:
aa:b6:4a:8f:75:05:2c:cd:98:0c:ee:c4:fd:2f:8c:
51:46:4e:d2:e0:32:00:f2:c9:b7:a8:d2:4c:dc:3a:
2a:d9:7a:7d:70:5c:5e:ec:d1:24:d6:f3:b3:7d:ec:
31:e3:83:0a:33:a1:88:ac:56:04:6e:b5:a6:80:66:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4F:F8:1E:7F:69:5C:D8:39:14:83:8C:57:DE:38:2B:75:AB:72:D6
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6d:01:9f:c9:58:18:ec:0e:95:75:8d:68:b2:51:b6:8d:b0:
59:a7:f9:df:37:47:e0:39:e1:20:5b:e6:d1:fb:7a:02:cf:0d:
e4:d1:ce:f5:69:23:13:8a:d1:b3:0b:6f:23:dc:6f:2b:5e:e9:
45:ac:ee:30:97:8c:ab:8a:63:b3:ea:47:65:ef:35:54:69:35:
0b:fb:03:c5:5d:c6:9f:ff:cc:31:94:5b:4b:0c:e5:c8:ef:86:
c9:30:0d:27:cb:ff:ed:79:17:1b:76:72:71:dd:4f:5b:90:c6:
65:59:af:82:d8:e8:d8:61:2f:db:93:23:6b:88:3c:68:ec:4c:
71:d4:08:9f:34:f7:fe:f3:cb:f3:c4:b6:ae:71:16:96:21:01:
86:ab:21:bd:76:0d:64:e0:17:10:7e:20:f2:85:09:7f:12:b9:
ff:00:49:2f:c8:c9:25:33:90:5b:a6:85:9b:91:8f:49:60:8a:
76:0c:4f:03:64:31:ba:6e:e9:92:fb:94:c9:cb:f5:40:e2:54:
21:44:21:65:f6:f0:4a:e6:ce:1f:03:03:cd:86:fe:68:5e:a0:
7a:69:17:56:3f:80:bf:cb:80:b8:75:6a:ec:90:00:3b:ab:97:
ad:29:d2:13:3e:4d:77:77:a5:09:fd:08:c5:35:50:93:69:08:
ed:82:32:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 07:22:45 2026 by rpki-client