Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: bgyU76j6hk1cR2OYGZ+VEyZgHG1N99TO24usgWcG0lQ=
Subject key identifier: A0:97:AF:6F:5C:C6:85:B1:EB:6D:0A:EF:D9:F9:B2:4E:6F:77:31:72
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 019E30E09AF8ECA3333FD2ACE333F42724BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 0A8E
Signing time: Sat 16 May 2026 13:01:26 +0000
Manifest this update: Sat 16 May 2026 13:01:26 +0000
Manifest next update: Sun 17 May 2026 13:01:26 +0000
Files and hashes: 1: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: mxbFHiy+quXsV7nPLa5I3B/zdcd2SGyA5gP3t1R/euI=)
2: ImbkEEuw8ciW4XZvQnskEOeml3A.roa (hash: s2ZZTRU19ZLlzKll7MUSBOLRlZD19z6bClWZADEJ0vA=)
3: xTy14ClaR4Rvu9WN2hIEK42ff6w.roa (hash: MWs9WTWsQLed5Ou31CqMyRYBYZdgWbH79vbLFld2S5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:9a:f8:ec:a3:33:3f:d2:ac:e3:33:f4:27:24:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: May 16 13:01:26 2026 GMT
Not After : May 17 13:01:26 2026 GMT
Subject: CN=a097af6f5cc685b1eb6d0aefd9f9b24e6f773172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:d4:8c:e4:9a:e7:75:1e:75:ea:39:4c:75:
ce:a0:30:f5:76:0d:da:d7:5a:bc:63:1d:c9:4a:2a:
9f:75:64:77:53:71:d8:ac:06:04:56:09:66:3a:bc:
8f:f7:34:d2:d4:26:7f:5d:0b:82:5d:93:c9:9e:4b:
27:3a:c3:c3:c0:d9:9e:0f:24:cc:1c:05:86:a1:6b:
d2:69:0b:b1:7c:86:2e:fe:d3:8a:37:09:5c:5d:73:
91:ef:41:68:44:5c:a0:51:ae:c4:79:a9:ec:67:5b:
61:5f:f6:d0:76:13:d2:2c:b8:f7:9b:ff:e5:3e:3f:
c5:b0:93:cd:6a:ff:c4:ab:37:bd:8f:fe:a2:a6:02:
0c:76:46:4d:00:63:da:d3:c5:e5:6b:5d:6c:c9:3b:
08:4a:26:0b:55:a1:4f:8c:03:23:62:b7:b6:b7:79:
01:12:cf:12:4e:7f:28:a8:e5:e2:ca:6f:e1:e3:b7:
fe:52:30:71:f0:37:cd:19:e4:54:33:33:93:d0:a8:
a7:f5:c3:9d:44:eb:8a:29:b6:be:df:07:a2:d0:b5:
c4:01:a9:dd:90:8c:fe:37:0a:b6:85:56:25:44:5d:
00:e7:2d:e2:c2:2d:c9:06:d2:0e:6c:a4:62:87:80:
34:4b:54:e0:a9:04:f4:e0:d1:e3:4c:54:df:77:e0:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:97:AF:6F:5C:C6:85:B1:EB:6D:0A:EF:D9:F9:B2:4E:6F:77:31:72
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:28:6a:46:52:35:ed:32:d8:82:6e:58:4c:d7:b2:01:c7:64:
1b:28:14:3f:52:a4:00:b6:4f:e8:0a:44:bd:11:e4:3c:49:ce:
93:51:bf:90:91:a2:9c:5f:aa:f5:c3:e7:20:61:0e:99:8b:06:
44:e8:88:b5:a0:82:5c:b5:d4:1e:72:aa:c3:48:07:86:84:ff:
aa:bf:65:59:95:14:48:60:ca:df:53:54:29:20:d7:a5:1c:82:
5e:21:97:29:17:d5:af:ac:77:f6:a4:50:92:c6:95:c3:75:9a:
ca:1b:56:e0:eb:d4:b9:8a:c3:4b:e6:09:c7:6c:93:63:94:60:
a2:51:8b:8f:89:d1:b0:c5:94:7a:1f:82:d7:1e:97:05:6c:f4:
2f:17:1b:fc:0a:8c:e6:18:d7:2d:52:8f:0d:17:d9:69:c3:d0:
2b:9d:84:cb:3e:fb:d9:4b:59:a1:cf:55:89:82:ec:23:c5:d1:
07:9b:b9:3b:04:bf:3a:bc:08:51:77:5f:d6:83:6d:91:43:c6:
62:61:4b:c6:54:5e:71:c8:4b:16:d2:54:2a:10:73:6a:d0:8b:
4e:6f:75:75:c8:8b:99:75:b9:75:67:a1:44:88:01:c1:60:9d:
a6:27:a5:99:e2:80:4f:3e:11:3d:07:43:9d:b6:1f:4c:e6:f7:
15:b9:12:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:07 2026 by rpki-client