Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
File: gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json)
Hash identifier: 3306KoOlA6wFV4ulwG66XAlGl25shIag+Le4AAdImHA=
Subject key identifier: 1D:5A:36:3F:29:BF:5D:61:E1:64:2C:BA:5B:11:DD:EA:2B:65:46:E3
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 019EB7338283005D63707ED251073EE2AD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
Manifest number: 0EF7
Signing time: Thu 11 Jun 2026 15:01:06 +0000
Manifest this update: Thu 11 Jun 2026 15:01:06 +0000
Manifest next update: Fri 12 Jun 2026 15:01:06 +0000
Files and hashes: 1: aIIL3zN4ZUN1hFPhWa5OB2tT7BE.roa (hash: fzKmg/Y3EsolCl+9NGvW6oDouQRm2edVgKukMEtlQJI=)
2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: ksfL4CJ315GQ33xOzkhB+lWYmzrNk8TGid8hgrVOOFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:82:83:00:5d:63:70:7e:d2:51:07:3e:e2:ad:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: Jun 11 15:01:06 2026 GMT
Not After : Jun 12 15:01:06 2026 GMT
Subject: CN=1d5a363f29bf5d61e1642cba5b11ddea2b6546e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:bc:5a:6a:b2:ce:2e:2d:f6:66:0c:6f:ee:
fe:6f:cc:b8:c8:7b:c9:1d:7a:e8:ef:01:3d:2f:59:
72:9a:d4:41:1a:28:8e:43:ff:84:e8:40:01:9c:dc:
cb:a1:17:05:d3:e1:22:72:95:cb:c8:2a:d6:4b:be:
bb:50:4e:17:f4:7a:4d:1a:5c:f7:fd:aa:7e:7b:4a:
a0:b7:93:e7:92:4d:11:71:9b:b6:39:82:9b:39:8c:
86:a9:21:cb:ec:97:9c:6e:9b:ce:a8:18:b5:96:1b:
e4:66:f3:a1:95:45:c3:3d:40:6f:16:fc:a4:53:9d:
db:50:0b:80:53:81:79:65:9b:c6:53:67:ed:cb:03:
d8:e8:40:42:e1:b1:f1:1d:d6:fc:14:91:18:bd:2f:
fd:32:84:bc:07:36:f4:82:f7:19:df:42:a5:e9:43:
73:2a:6c:07:53:59:84:7e:4c:5d:ee:9c:13:90:55:
16:41:96:43:cb:eb:aa:d8:74:f6:1e:00:d2:16:89:
41:12:00:38:82:0c:64:bb:85:11:39:7e:e9:70:04:
21:6b:40:1f:72:b9:f3:d2:31:da:f3:0e:2e:1b:ca:
c9:99:8c:86:0f:5b:45:b8:3a:a1:4e:1f:88:3d:bb:
04:cc:ad:f2:ff:d0:67:42:0a:b1:9a:ee:78:41:f3:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5A:36:3F:29:BF:5D:61:E1:64:2C:BA:5B:11:DD:EA:2B:65:46:E3
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b1:55:3c:ec:d7:af:ab:56:0d:ba:8e:79:22:90:6f:72:38:
de:7e:ed:0d:63:92:35:d9:cf:8b:1b:ec:ed:03:df:8c:f6:95:
8b:e4:07:37:65:d6:f2:d5:09:f4:91:bf:ca:e4:ea:b9:88:09:
55:16:8c:0a:ac:67:3c:c9:25:cc:9b:82:53:4b:d2:87:d7:16:
db:2a:e1:27:20:b2:3a:77:44:8f:b8:9c:41:62:2a:e0:ee:c2:
89:eb:ef:5f:33:52:4a:fe:b1:ed:d2:92:fa:d6:ac:0f:09:8f:
b5:b4:3b:11:aa:ba:70:b7:05:51:e4:c7:99:ae:9a:dc:ce:2f:
93:7b:42:f8:e0:d6:68:39:a8:af:07:5d:7b:c2:01:d2:e2:f7:
3f:6e:4c:6a:85:c0:62:99:c8:f0:fa:8d:4f:7c:1e:a5:24:b0:
24:90:c6:2c:81:dd:b2:61:40:ce:9d:17:95:74:12:93:64:78:
b2:c0:8a:20:20:8c:7b:d0:07:e4:ab:40:f0:a5:ee:d0:d2:c7:
a3:f8:ad:dc:9d:37:af:aa:fb:5c:dd:93:78:64:d0:ea:f4:bb:
69:40:0c:aa:0f:aa:af:60:2d:1a:8d:53:bf:45:9e:1b:73:a6:
f4:4e:de:77:32:21:8f:5d:b2:08:22:71:f7:d5:f4:94:e5:01:
09:ac:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:03:07 2026 by rpki-client