Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
File: gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json)
Hash identifier: DP23toocjLpea06MxETgJL4vDbXcorVPF6f1F3FbgQg=
Subject key identifier: DD:AD:BD:EA:FD:5D:4B:79:7F:D7:36:A5:40:9C:48:43:83:F8:30:40
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 019DFBE061FBCC79B1E1A0693680BCFA8F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
Manifest number: 18F5
Signing time: Wed 06 May 2026 06:01:19 +0000
Manifest this update: Wed 06 May 2026 06:01:19 +0000
Manifest next update: Thu 07 May 2026 06:01:19 +0000
Files and hashes: 1: bCfnN8Cs-rhA4Q1_kWGUzS2fAKc.roa (hash: KNO75JkgNbMb91A1hmTO0xTL3a65pxvLADRxVDguCYw=)
2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: jVhOzkoGsa6CZ9LThRc5gbgcGdpn8QLU5f95J91KQOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:e0:61:fb:cc:79:b1:e1:a0:69:36:80:bc:fa:8f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: May 6 06:01:19 2026 GMT
Not After : May 7 06:01:19 2026 GMT
Subject: CN=ddadbdeafd5d4b797fd736a5409c484383f83040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:a0:5d:d7:2f:13:78:f4:4c:63:50:be:1e:
65:ed:cc:f7:a2:03:5a:c9:c6:7d:5a:dc:63:ee:00:
3b:89:d4:4c:b9:10:80:6e:dc:45:26:15:50:97:56:
36:23:80:0f:42:38:92:1d:05:0b:49:f2:ce:bf:4d:
2a:a3:05:ad:5c:d5:53:16:5b:60:ac:c2:63:bc:43:
50:89:ff:fa:d8:8f:b1:bb:8f:fc:05:cd:29:85:68:
89:f0:3a:8a:ff:ad:53:58:c3:c0:65:7a:21:d3:e8:
44:09:7b:4e:cd:bc:95:61:3f:b3:c9:4d:74:96:01:
e3:31:df:87:ff:34:35:9f:20:40:de:4f:a4:aa:f1:
18:07:31:c8:bf:ce:0e:0f:10:b2:dd:95:b4:40:9f:
36:c5:4f:68:95:c4:f8:c3:e8:58:dc:aa:2c:a1:6c:
40:6c:6b:bc:91:b6:65:fc:35:32:3b:3f:3b:96:a4:
f0:5e:75:97:5b:e3:a7:be:01:69:14:f9:6f:fe:3e:
83:61:48:cd:54:ea:3d:08:4b:2b:ef:d1:ba:37:ae:
fe:f2:96:74:1a:37:2a:83:aa:4b:26:51:ab:2b:5a:
45:0b:19:95:e8:3b:ca:02:da:ea:cc:c2:7a:06:84:
da:81:de:da:84:75:f7:93:36:84:c1:f3:10:40:8b:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AD:BD:EA:FD:5D:4B:79:7F:D7:36:A5:40:9C:48:43:83:F8:30:40
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:91:26:28:36:88:91:82:21:52:7e:6f:23:18:01:e2:f6:e0:
01:46:88:fe:d2:98:cc:51:99:52:ed:f7:e9:cf:49:c6:d6:16:
92:89:22:c6:9f:83:87:e6:e5:3c:d9:92:6c:64:40:ed:a8:c4:
b1:af:a7:ec:20:9e:af:50:8a:1a:3d:c7:9f:4f:1c:ca:bf:b5:
50:2e:e6:85:db:6c:80:e4:ea:c8:a5:93:46:1a:9e:ec:29:52:
de:4b:3c:4e:fb:0b:eb:38:57:c3:6a:61:6d:67:be:6b:88:05:
96:b2:9a:6b:c4:20:c9:98:7f:25:89:ce:0e:fc:ed:74:7e:20:
42:07:95:24:d1:2b:b6:3a:ce:c4:ea:f7:2d:5d:b8:59:8f:c1:
bb:ad:c5:2f:e5:44:d7:12:9a:94:63:f5:6f:05:3e:77:a5:4d:
bb:90:e3:b4:2b:ab:0f:14:e6:e3:43:c5:f5:36:35:d8:b1:13:
77:ae:e0:ea:47:e6:8b:9f:e0:b7:43:24:03:99:2b:73:a9:ee:
88:a4:17:fc:bf:dc:0a:a1:c9:fa:aa:18:76:e0:5d:0c:ae:56:
99:f3:dd:9b:95:d3:f7:d4:ff:2c:e8:b4:d5:93:e4:77:d7:92:
25:43:fb:6b:0a:4b:6b:37:55:22:37:13:47:e0:b1:8a:35:dd:
fc:e3:2d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 13:24:13 2026 by rpki-client