Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: H/PyKwhfjAjUJfh4ZA3FLnL6fSyv1ClMO9mkkYT+Lmc=
Subject key identifier: 4E:C6:5D:55:E2:23:B4:9C:6D:88:DF:4D:FB:11:C9:80:94:C2:AB:C2
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 019EBA340ED3678E663E5E5C14ED6C04F77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 05:00:34 +0000
Manifest this update: Fri 12 Jun 2026 05:00:34 +0000
Manifest next update: Sat 13 Jun 2026 05:00:34 +0000
Files and hashes: 1: 9U9GJ2gIPT5fQlwrS_PORXQ8IEw.roa (hash: Ew3sgvXIFSVbIaXejNH5mh4KuqPNbuNRT+236zCj8P8=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: Ini61UytRpBJ3+8Y2HCunN95BOsPeUoJ1bL+7SrDEvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:0e:d3:67:8e:66:3e:5e:5c:14:ed:6c:04:f7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Jun 12 05:00:34 2026 GMT
Not After : Jun 13 05:00:34 2026 GMT
Subject: CN=4ec65d55e223b49c6d88df4dfb11c98094c2abc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:f8:5a:a4:0f:76:45:14:9b:4c:49:5d:1e:
b8:e2:11:d5:1c:74:61:49:32:16:72:9b:30:18:92:
7e:77:f9:1f:3a:16:60:12:41:7b:1f:6b:28:05:e5:
4a:0e:68:b6:f3:f2:5b:c2:a0:30:55:8f:f8:26:a3:
8b:a3:c2:fd:f3:a9:76:21:8c:f1:74:ba:fa:bf:8b:
69:84:fb:06:81:35:ae:67:64:94:65:8d:28:71:bb:
87:19:96:8a:05:42:8f:f0:f3:34:f9:9f:5c:08:2e:
f6:de:59:11:c5:b8:1d:89:30:7e:0a:06:3a:1f:2c:
91:2a:15:35:b7:b6:de:a4:6f:3c:09:e1:4b:39:26:
d0:35:21:5d:4f:b1:4b:3f:41:c1:da:7f:60:83:7c:
21:34:11:8d:e5:ab:3a:43:75:6f:a8:50:02:c9:62:
b9:45:b5:e0:91:4b:46:5e:ba:9e:b2:4d:7e:1d:a5:
29:6b:57:85:3c:1f:2a:b0:d0:a1:5d:54:c7:89:7d:
46:f3:4a:b9:14:31:2a:2f:75:2d:1f:2d:4f:d3:bd:
6a:3d:03:19:8c:4d:a0:b3:56:0b:79:92:1b:41:5c:
64:c7:73:b9:e2:8d:b6:9b:96:e9:83:d3:41:f2:47:
c1:5d:b6:83:b5:b7:a1:ca:f5:f1:85:64:ef:cc:10:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C6:5D:55:E2:23:B4:9C:6D:88:DF:4D:FB:11:C9:80:94:C2:AB:C2
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ae:6f:c1:52:15:aa:18:fb:bb:14:11:97:9e:f6:64:20:67:
f4:37:80:6d:0d:a7:e0:65:54:a2:10:5e:c4:db:fa:d6:f9:25:
89:9e:35:87:50:7f:8d:fc:7d:8e:c1:51:d6:5e:15:68:ab:2f:
ce:c9:f6:2d:c4:98:c0:d7:1c:36:8a:69:f8:90:dd:2e:25:31:
d1:d3:7c:ba:fc:87:c0:c6:2e:1a:ac:c0:e4:7f:e8:78:94:54:
58:0a:73:b4:34:d8:2b:43:e2:ab:fd:b7:9b:bd:e8:ca:c2:18:
05:e5:8a:45:63:40:bc:79:06:21:29:9c:91:f0:1a:33:a1:35:
77:ff:b1:b8:7b:84:07:8f:e2:95:e2:54:f9:42:73:7c:f6:b6:
43:d6:22:91:25:da:43:ba:b6:08:d9:64:b5:e8:14:64:e2:35:
fb:44:74:0e:08:bd:ba:9c:65:f6:26:36:10:3a:ed:d6:0d:27:
60:3f:d8:a9:2a:97:32:cd:1c:40:3c:e7:5d:15:9d:73:12:dc:
90:f3:e0:c9:a0:2f:89:f6:c8:1e:55:1b:6c:7e:14:1c:2a:cb:
85:26:28:3f:f4:81:0c:24:61:f8:d4:8c:91:d8:10:64:39:94:
0a:a2:f7:fa:3a:4a:73:9a:11:65:1c:8b:01:4c:77:93:78:42:
04:1f:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:46:16 2026 by rpki-client