Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: 3/hyUzP4EZjpSV3QRZoz2oqksC1pBOsVaRvU/s4qqbg=
Subject key identifier: 0A:F1:8D:66:86:9D:4B:B1:3D:50:AF:43:31:8B:9F:51:FB:F0:39:07
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 019EB6FBDF2BC9CBA4998DBC213D0BB8AC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 14:00:20 +0000
Manifest this update: Thu 11 Jun 2026 14:00:20 +0000
Manifest next update: Fri 12 Jun 2026 14:00:20 +0000
Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: gZhBxdT4oVKXF/iE9dRXotltnd/Ds1xS3GNaHbo/zM0=)
2: xQLXNMGtJIEmbmsa0yimk8gh264.roa (hash: 681EcZV9/rvtEn+cL3EpnhUhg/0vWlpEsupf9xZzDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fb:df:2b:c9:cb:a4:99:8d:bc:21:3d:0b:b8:ac:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Jun 11 14:00:20 2026 GMT
Not After : Jun 12 14:00:20 2026 GMT
Subject: CN=0af18d66869d4bb13d50af43318b9f51fbf03907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:94:3c:5d:b1:66:15:74:23:48:0e:05:d8:
6b:2e:a6:d7:84:8d:ff:06:ee:b9:02:4f:de:3f:e0:
c1:1d:8a:58:d6:26:ca:f6:be:08:a7:c9:98:ec:a4:
1f:e0:d1:52:d1:69:08:38:cb:07:59:eb:d7:a3:ca:
bd:69:d2:4c:20:85:a4:2e:75:13:5d:16:16:e7:13:
a2:d5:06:a6:c8:e1:11:60:7a:b0:86:81:55:0b:df:
66:e8:7b:4f:4f:ab:b3:23:f0:8b:18:dd:35:f8:25:
0f:31:c6:53:87:fb:b3:61:18:97:8b:cf:1b:d2:4f:
04:11:6f:5f:21:b7:5b:13:c6:28:81:31:4d:11:a7:
10:e6:d4:9f:f0:d6:6c:e9:d9:20:18:41:b6:5d:2d:
c9:91:85:9d:3d:3e:b8:a4:59:6f:e2:73:a7:68:63:
84:d6:87:9d:38:f6:15:ee:c4:92:24:36:80:86:9b:
1f:34:7a:5e:91:39:b6:c8:a7:43:e7:7d:34:55:17:
06:e5:15:f4:ae:5f:bf:1d:66:03:5b:c3:62:68:96:
8e:05:1f:e6:01:60:ef:7a:41:95:da:a1:51:ec:ba:
7a:ce:45:48:1d:2d:45:0f:ad:d7:dd:93:db:91:4c:
42:99:4e:c6:39:7a:bf:15:02:66:11:44:fb:6d:e9:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F1:8D:66:86:9D:4B:B1:3D:50:AF:43:31:8B:9F:51:FB:F0:39:07
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:84:72:48:2d:67:28:10:ed:2d:31:45:58:98:19:dc:7b:e7:
07:13:65:d8:2c:fd:a0:06:d6:bc:50:21:a9:e1:b1:66:79:6d:
bc:c7:a0:15:97:60:e2:5f:48:97:f0:b6:9c:c3:35:81:24:30:
d2:03:5f:09:fd:0a:5e:48:1f:b6:66:76:80:e4:f3:89:b8:7f:
7e:a1:86:79:a8:9a:f3:d6:ce:52:09:d0:e0:e2:7d:22:f9:df:
d6:d8:f1:2d:7e:e4:fc:f6:3b:6b:27:47:d7:bf:03:23:fa:99:
df:17:d8:48:06:19:cb:f9:b0:54:bb:71:26:75:7c:65:f6:33:
6c:11:3c:64:aa:60:71:0c:a8:44:c5:db:75:36:af:b0:26:6d:
91:01:25:e2:6f:69:d1:7e:c5:6a:28:49:74:4d:53:08:69:af:
1c:64:b6:f0:2d:94:8a:3e:01:8e:96:29:4f:40:91:31:99:f9:
35:62:80:c7:24:86:d0:ba:90:6b:65:42:d4:e3:2a:b9:de:55:
f0:c1:e8:b6:a6:9a:51:f1:17:a5:06:30:96:aa:02:0b:cb:a0:
ee:03:b7:36:69:99:a6:24:3a:70:42:42:fe:d8:a1:af:15:4d:
dd:09:fd:3c:a4:f4:9d:7f:9f:97:a9:aa:93:5b:fc:4a:92:c3:
55:64:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:09 2026 by rpki-client