Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier: 0lMGB27GFq6ei2pvqHszQoaoDJBKY/GCmSu+wrSraZQ=
Subject key identifier: 13:01:FE:06:16:9C:CB:75:E5:D1:DB:E7:69:C4:62:0A:A6:6D:BE:85
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 019F148A99FAE30E2F8F9E368A48063EE8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 18:00:55 +0000
Manifest this update: Mon 29 Jun 2026 18:00:55 +0000
Manifest next update: Tue 30 Jun 2026 18:00:55 +0000
Files and hashes: 1: FRyXsiFg-6BIhEw2ARWH0DNGSnM.roa (hash: HOwOr4bTuIB/KNZWR5lcxrrwlrEvRwNSNG9O5oAt0bs=)
2: M_VtU7f5fPlDKkVKH-oBTR-MfOc.roa (hash: INw4W70ov+0DIQom+PoiFmtJQ/A7yUcxsfN1Ujem6fA=)
3: kkaW2PybyMFtKIudjGW5zNwrUVA.roa (hash: q2dHdK2+xshlUtyI1McPweg9tnAFSg39WkJ96aCsEe8=)
4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: OXsTghGInANqE3aGVb7+hyoZtFFivWIu7wr6tu6Fx90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:8a:99:fa:e3:0e:2f:8f:9e:36:8a:48:06:3e:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Jun 29 18:00:55 2026 GMT
Not After : Jun 30 18:00:55 2026 GMT
Subject: CN=1301fe06169ccb75e5d1dbe769c4620aa66dbe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:15:f9:1b:4a:eb:a3:47:2a:49:6e:a3:0b:
3b:7c:77:0b:ca:72:cd:6b:48:06:d1:87:ea:22:6a:
b1:b1:c2:f6:d3:f9:30:bd:f4:b4:35:d5:86:bb:ae:
af:65:3f:44:ad:ce:4d:bb:ae:2d:7a:91:5c:db:bf:
ba:88:bf:6c:2e:5c:f2:76:9c:1f:bb:12:27:b2:ae:
49:da:1b:92:a3:1f:1a:54:c5:6b:48:fd:67:83:4d:
09:8c:c3:cc:90:9c:99:81:ae:80:db:53:23:41:d9:
76:c4:db:aa:34:bb:98:4e:3e:0f:6e:ce:42:c5:fc:
81:fa:7f:86:dd:f3:a3:95:8c:b3:e4:6d:a9:b8:a3:
f7:94:22:8a:e5:99:fb:dd:c5:54:33:05:38:53:ed:
3c:41:48:6d:52:fc:52:fd:1d:45:a0:1e:a8:ec:51:
2f:39:93:79:30:89:7e:9e:11:b5:c9:88:ab:c9:26:
26:84:79:2b:b0:e4:6c:f4:a7:75:f0:54:b2:58:e0:
8b:2e:20:e0:c0:f6:c9:f7:fd:df:ac:ff:1d:e8:0a:
fb:43:8e:88:e1:5c:b9:3f:4e:e8:28:fd:7a:4f:e1:
e7:1f:59:42:8b:4d:b2:c4:1d:12:b2:c3:64:e6:ae:
41:bd:15:b9:f5:51:91:a6:3f:db:45:92:06:ac:08:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:01:FE:06:16:9C:CB:75:E5:D1:DB:E7:69:C4:62:0A:A6:6D:BE:85
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c0:4d:b8:1f:a4:75:01:d6:fc:5e:41:2e:7b:a7:df:1a:bc:
bd:26:b3:2f:1b:56:43:3e:37:d8:98:a7:63:37:23:08:d7:a1:
c0:3a:47:d0:da:ad:c1:85:62:3a:f9:e6:52:a2:e3:53:7c:7d:
91:09:48:d9:52:02:3b:f7:d2:55:57:1b:bc:54:d5:dd:29:37:
cd:7d:23:57:5a:4a:cf:4e:98:cc:95:1f:82:4a:03:26:23:3c:
f0:c8:cc:6d:07:0a:1c:16:a7:0e:e6:b3:ad:e0:ae:96:75:ba:
98:38:58:92:17:ed:de:b4:fd:64:ba:5b:f7:98:65:fa:fb:20:
94:ea:95:e0:f6:84:84:04:6c:e1:0e:1f:af:f9:9c:11:13:11:
45:eb:22:8a:1f:5f:4a:c5:37:c2:c4:27:17:98:1a:b4:b9:d5:
fd:88:97:a8:61:8d:6c:51:a9:6f:6e:e9:d0:d4:41:c8:36:9a:
2d:68:47:a5:2e:d3:ba:c4:74:4a:41:dc:6b:6a:0d:f6:3e:1a:
b7:1e:42:eb:bf:36:c0:15:ae:0a:2f:53:7e:33:d6:f5:c6:3c:
dd:b5:b8:f7:1a:fc:23:e6:e3:b8:9a:b0:f4:68:d6:81:f8:84:
4c:05:13:a4:44:ac:1b:c5:04:18:ac:59:a5:94:9b:a6:08:05:
bc:be:11:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 20:24:15 2026 by rpki-client