Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: f2IsbkN5cX2KDcjcUtAhRcuumW9BsPjZZr8ZcWoSheg=
Subject key identifier: 13:11:B5:F7:5A:FD:91:E9:05:9C:A5:91:D1:C7:7C:2C:EE:C9:3D:F0
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 019E3260792AB8F512EA4CB6DABE22DB2BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 1432
Signing time: Sat 16 May 2026 20:00:43 +0000
Manifest this update: Sat 16 May 2026 20:00:43 +0000
Manifest next update: Sun 17 May 2026 20:00:43 +0000
Files and hashes: 1: MKLnBwEoTvJQ6Ll9HAStk_6b-lo.roa (hash: UcMYN8ihICS5eRjwAvcwUGC2jCQeNNKHfqsuNIFnBhE=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: +TvJXcnqeJIHS9YiosoNbt+kYH8WMDujxqQZtTndpYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:79:2a:b8:f5:12:ea:4c:b6:da:be:22:db:2b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: May 16 20:00:43 2026 GMT
Not After : May 17 20:00:43 2026 GMT
Subject: CN=1311b5f75afd91e9059ca591d1c77c2ceec93df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:5d:71:68:14:45:97:04:8e:24:32:a4:c7:
67:fb:4d:2a:10:bc:3b:eb:ca:56:40:d5:04:4b:ad:
f1:76:a0:a0:3b:13:36:ab:f5:8b:4d:d6:a2:e3:b8:
12:bf:9b:06:21:72:72:11:ef:03:1d:b0:f9:0f:b0:
c6:50:7e:c9:38:bf:da:77:39:19:19:6d:bc:e7:27:
05:bd:d6:18:0e:46:04:7e:93:c8:8c:4c:c2:55:c1:
dc:44:94:54:4e:c5:12:84:1e:aa:96:9c:05:31:63:
36:38:db:a2:19:3d:cc:4b:6a:0c:d1:15:78:5e:58:
c3:85:05:44:c9:b2:d1:92:c6:52:a0:d1:32:81:bb:
a9:78:84:c8:9b:a4:03:c3:5c:1d:07:bd:dd:f4:8a:
4a:96:12:42:75:2a:b9:98:cb:32:9b:5e:42:64:e7:
f0:0d:e7:3e:63:a5:bf:cf:27:88:d9:66:d7:86:75:
9e:83:ef:37:9b:54:42:cc:b9:98:d2:67:01:33:55:
0d:29:5e:47:ec:42:46:5e:e5:3f:ec:e7:a8:c4:97:
df:64:78:5c:f9:24:e2:08:98:98:6f:1d:1e:1b:2b:
74:37:13:59:a2:6b:09:a4:41:2a:6d:38:12:72:a1:
8f:77:aa:ca:09:dc:9f:cc:61:83:a4:98:76:1a:0d:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:11:B5:F7:5A:FD:91:E9:05:9C:A5:91:D1:C7:7C:2C:EE:C9:3D:F0
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0c:11:97:13:5c:00:b5:77:05:6c:f8:0a:f8:45:3b:25:1a:
e7:60:55:d9:ad:d9:b7:10:be:ab:85:68:5e:dd:84:b1:92:fe:
e1:40:15:3f:8d:f9:8a:f4:b0:81:c0:58:b5:b4:4f:bd:cc:17:
a3:6d:93:bc:29:07:86:4f:23:4b:20:27:c9:f0:94:d6:90:11:
9c:be:4d:17:93:ef:e0:2c:d1:ae:0c:d1:e8:65:84:e2:a7:25:
1c:d5:bc:72:20:4a:e2:c6:db:f8:e1:5c:08:e6:48:45:0c:96:
b2:e8:71:82:e8:94:d3:7f:29:4a:e9:e9:59:df:ce:76:e2:14:
0d:fa:04:2d:33:17:5d:9c:cc:1d:0f:ea:42:3c:7a:23:80:c1:
1b:38:40:3c:01:d6:73:8f:b7:0a:ae:61:a4:55:d8:5e:01:27:
e4:b7:93:24:c3:27:63:20:07:ef:c1:a9:a8:bb:21:16:96:4c:
88:ac:bf:6d:f4:5c:35:b7:50:ea:91:96:4b:5a:18:c2:85:2f:
21:c2:95:0b:09:81:ed:f6:3c:ee:94:fe:7f:5f:a9:40:27:0a:
6c:7b:de:7a:19:9e:e8:61:29:fa:79:68:c3:5f:93:a3:be:44:
5d:55:4b:08:5b:2e:27:cf:5e:9b:08:63:c3:a9:b5:58:a1:5e:
09:32:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:30 2026 by rpki-client