Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: t2wowiyKnVieQZtsNdcUIKdTBU6vWIcPuYZxDvglwps=
Subject key identifier: 99:8F:4B:51:4C:C0:AF:B0:7E:D1:27:08:CA:E1:10:D7:EB:CE:34:D0
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 019EB92126D201F7C0A83CB077A8BF4433B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 1952
Signing time: Fri 12 Jun 2026 00:00:17 +0000
Manifest this update: Fri 12 Jun 2026 00:00:17 +0000
Manifest next update: Sat 13 Jun 2026 00:00:17 +0000
Files and hashes: 1: E2vGMfTh0_d3hFyTF_vwxF5KrPA.roa (hash: DBcvB5VPooiTXjGKSVqOi+hUE2hv4iu9s06iz8E2+EI=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: NULkMMwS60px/DInRY3aCxHimJhy75KrLMSQ9Ze5EIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:26:d2:01:f7:c0:a8:3c:b0:77:a8:bf:44:33:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Jun 12 00:00:17 2026 GMT
Not After : Jun 13 00:00:17 2026 GMT
Subject: CN=998f4b514cc0afb07ed12708cae110d7ebce34d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:32:6d:de:f1:a3:4c:e1:3e:a0:01:8d:57:
be:8e:a1:f2:c4:db:29:85:62:7a:4a:8f:b6:2b:58:
84:a0:a2:ae:df:98:dd:79:6b:d8:eb:cd:4d:46:5d:
e2:53:43:ea:e8:44:40:3b:d2:21:01:a7:62:36:36:
0e:2c:e5:f1:eb:ab:11:78:19:45:10:95:65:9e:3a:
05:d3:5e:e1:3f:86:84:73:18:52:d2:69:80:34:ca:
fe:c4:69:78:a4:61:05:13:11:c5:d3:10:87:c3:7c:
a5:42:36:bc:b9:4b:0f:d2:c2:e4:66:a7:2c:5f:cf:
52:83:a1:65:a7:fb:8b:60:85:ca:e5:5c:73:31:f9:
91:68:04:27:49:1a:c1:0c:09:b1:93:ae:36:8c:c4:
14:ac:d9:92:33:7d:de:1b:ed:40:07:f0:e2:23:b6:
33:29:c4:78:c5:c0:69:0a:63:30:9a:38:a1:6f:64:
9e:18:fa:6e:16:74:c5:df:df:58:c8:05:c9:e2:68:
d0:0e:df:d6:eb:98:5b:e7:81:9b:81:31:10:d3:17:
f3:30:78:6a:0b:a7:1a:da:c0:c9:2e:99:99:e8:8a:
63:1b:a1:6b:a2:72:bc:88:6a:0e:85:e0:57:8f:31:
9f:96:83:dd:2b:fe:80:fd:fc:8d:82:7e:e6:4f:c1:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8F:4B:51:4C:C0:AF:B0:7E:D1:27:08:CA:E1:10:D7:EB:CE:34:D0
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:77:bf:60:b8:5b:27:aa:7a:8a:86:68:39:fa:21:2f:78:ed:
ed:5f:8c:81:a9:7c:5a:02:ce:1c:dc:1e:0e:78:c6:1a:7b:d5:
15:88:3b:e9:78:09:4c:ed:08:09:0f:73:b1:00:e4:3c:5a:bd:
31:cb:50:cb:33:8c:3a:9e:55:e4:bb:08:f0:1e:3e:4d:94:ee:
55:a7:c6:2b:ae:e1:2b:81:77:fd:c6:6c:15:a0:f1:63:ac:a0:
0c:fb:4e:03:0b:68:c4:e3:9b:87:9a:e0:e6:f8:94:ef:ef:5e:
a7:5c:3a:93:65:27:8e:f9:ce:43:b6:41:9c:b2:95:e4:d0:90:
2d:78:15:47:36:9d:68:eb:24:4e:53:44:ce:36:c0:a4:ba:b0:
67:a1:92:3d:fc:10:ec:3e:9f:19:c6:b6:45:14:d1:ed:8e:9d:
2c:22:47:94:6b:4d:4e:64:e2:ee:d4:44:55:3f:1a:57:7b:31:
1b:18:e8:9c:66:aa:9e:71:b4:ed:00:2e:fa:9e:b5:6e:99:4b:
23:bf:4e:2c:d4:d3:72:30:20:99:b7:d6:de:c0:da:77:39:7f:
8d:af:e7:41:5b:ca:7e:7a:88:02:1b:f1:aa:d4:39:63:c7:a8:
76:78:1f:28:07:ce:04:c2:ad:af:a2:54:45:24:24:25:7b:c3:
4a:36:7b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65ISbSAffAqDywd6i/RDOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2NhZmRlMzEzNWEyNmJkZDQxNzkwMjllZWJmNzQxNGU5
NjQzYWYwHhcNMjYwNjEyMDAwMDE3WhcNMjYwNjEzMDAwMDE3WjAzMTEwLwYDVQQD
Eyg5OThmNGI1MTRjYzBhZmIwN2VkMTI3MDhjYWUxMTBkN2ViY2UzNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB0ybd7xo0zhPqABjVe+jqHyxNsp
hWJ6So+2K1iEoKKu35jdeWvY681NRl3iU0Pq6ERAO9IhAadiNjYOLOXx66sReBlF
EJVlnjoF017hP4aEcxhS0mmANMr+xGl4pGEFExHF0xCHw3ylQja8uUsP0sLkZqcs
X89Sg6Flp/uLYIXK5VxzMfmRaAQnSRrBDAmxk642jMQUrNmSM33eG+1AB/DiI7Yz
KcR4xcBpCmMwmjihb2SeGPpuFnTF399YyAXJ4mjQDt/W65hb54GbgTEQ0xfzMHhq
C6ca2sDJLpmZ6IpjG6FronK8iGoOheBXjzGfloPdK/6A/fyNgn7mT8HzbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmPS1FMwK+wftEnCMrhENfrzjTQMB8GA1UdIwQY
MBaAFBp8r94xNaJr3UF5Ap7r90FOlkOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82MmFmYmItYjhmOC00YjEyLTkxOTMt
MWM1MTA3Y2FiMzUzLzEvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82MmFmYmItYjhmOC00YjEyLTkxOTMtMWM1MTA3Y2FiMzUz
LzEvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3e/YLhb
J6p6ioZoOfohL3jt7V+Mgal8WgLOHNweDnjGGnvVFYg76XgJTO0ICQ9zsQDkPFq9
MctQyzOMOp5V5LsI8B4+TZTuVafGK67hK4F3/cZsFaDxY6ygDPtOAwtoxOObh5rg
5viU7+9ep1w6k2UnjvnOQ7ZBnLKV5NCQLXgVRzadaOskTlNEzjbApLqwZ6GSPfwQ
7D6fGca2RRTR7Y6dLCJHlGtNTmTi7tREVT8aV3sxGxjonGaqnnG07QAu+p61bplL
I79OLNTTcjAgmbfW3sDadzl/ja/nQVvKfnqIAhvxqtQ5Y8eodngfKAfOBMKtr6JU
RSQkJXvDSjZ77g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:47:56 2026 by rpki-client