Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: v5Y6OeGjrwXbQ5qy2hA2k1EwJXpOGF2IkJQKjXNd/1A=
Subject key identifier: 44:7A:2E:BF:2D:DB:39:F1:00:98:85:11:BF:7B:92:E2:AD:99:24:F8
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 019E2CCC91A04DB4B54FAAD2E2DF67C73ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 1911
Signing time: Fri 15 May 2026 18:01:04 +0000
Manifest this update: Fri 15 May 2026 18:01:04 +0000
Manifest next update: Sat 16 May 2026 18:01:04 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: fUXVO+6R8URqiRBCk10S9pjSFdaQ9zThN13A4qfy57A=)
2: _LIMNGBB_bM1l_RNh7Jn1ke8Z1Q.roa (hash: Y1Vdc4Bk2253+dyiXjTYX2rbKWMSURyUVb6exyc6X4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:cc:91:a0:4d:b4:b5:4f:aa:d2:e2:df:67:c7:3a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: May 15 18:01:04 2026 GMT
Not After : May 16 18:01:04 2026 GMT
Subject: CN=447a2ebf2ddb39f100988511bf7b92e2ad9924f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:80:28:0a:2a:00:0e:ee:92:19:13:70:f8:
09:2a:69:74:c3:be:7c:06:0c:7a:90:9c:b2:43:80:
df:60:a0:35:0e:42:ee:d2:6b:3d:40:22:23:db:2f:
14:09:94:a2:23:fc:45:f5:1d:21:d2:7a:49:bb:34:
57:92:0f:8f:5f:a7:c4:8a:3a:6d:4f:72:81:a4:34:
4c:91:43:ba:d2:ee:e1:d0:d4:ad:d6:ce:bc:39:59:
4c:2e:df:5b:10:c7:e4:29:b7:ef:0c:1b:ad:06:00:
3a:15:6c:71:74:83:da:ba:c6:5c:f9:a2:06:07:be:
0b:27:1c:06:86:e1:36:4b:e2:f6:e0:aa:d3:f5:89:
42:bb:33:5d:60:4e:5e:d5:d6:df:cb:35:e6:5d:8f:
e2:be:d1:ee:43:2b:97:50:53:a1:df:de:e9:aa:c5:
4c:c2:5b:05:1c:b2:bd:9f:25:c1:e3:9a:c5:40:4e:
30:9e:e4:c6:a1:ae:2d:af:3a:91:fd:91:b3:07:f2:
8f:15:31:d5:02:d2:90:e6:b3:41:e3:c8:4d:50:7e:
b7:8d:c7:e1:38:ad:b6:9a:82:43:3f:98:f9:d4:18:
c2:59:d9:6d:33:03:75:84:b1:45:0e:3d:9e:e6:18:
ca:a7:6d:f6:3c:58:5f:ac:d7:2c:6e:eb:17:16:6d:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7A:2E:BF:2D:DB:39:F1:00:98:85:11:BF:7B:92:E2:AD:99:24:F8
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:36:47:1a:a5:c7:df:f3:41:f7:48:27:3d:3a:79:9f:1f:fb:
03:ce:f2:41:26:2c:50:a8:30:c5:4c:f2:39:a7:11:8d:b4:de:
ad:5b:5c:12:e9:bc:d0:48:e5:df:8a:34:ea:d7:7b:10:9c:93:
42:d3:9c:fe:35:db:ec:90:09:0d:b1:b3:db:2b:99:2e:d9:08:
fd:2b:30:af:05:4f:d1:00:6a:43:44:da:08:a5:88:1c:9e:ed:
d8:76:96:4d:48:45:28:3f:d6:f1:66:11:c0:ae:ab:82:12:a2:
cd:7c:ff:d2:e4:e2:2b:51:b1:12:5a:f3:75:72:95:9e:3e:1b:
fd:57:b8:5e:b4:ff:6f:58:62:0f:a9:9d:8b:ed:c3:37:84:41:
10:9c:df:ce:87:12:9c:79:10:b4:e5:b4:86:87:f5:f0:ed:3d:
d7:a8:d9:53:dd:e6:41:df:96:8d:f5:e0:4c:c1:68:9b:bd:7c:
90:3e:71:cf:c8:f1:b2:5b:43:9d:53:7a:58:4a:d3:ab:69:8d:
ba:44:0d:71:41:a6:2a:87:91:5e:6c:7c:02:dd:01:65:87:78:
91:58:25:42:53:39:06:ce:85:a9:b9:90:41:8d:2d:3a:86:40:
e9:8c:f5:5c:63:75:20:84:20:4b:f6:29:52:f5:a6:32:43:d6:
9c:b4:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:24:19 2026 by rpki-client