Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: ys2Ebaqd5bj6mFgE4wtBdeeX8TM4TvC4kG6+EXjjdKg=
Subject key identifier: 81:AD:79:41:9D:7D:F5:A1:0C:6C:CB:61:B7:91:8E:63:92:16:DC:53
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 019E9137C38CD99EE558C7CD2A9134F5AC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 0A01
Signing time: Thu 04 Jun 2026 06:00:11 +0000
Manifest this update: Thu 04 Jun 2026 06:00:11 +0000
Manifest next update: Fri 05 Jun 2026 06:00:11 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: VqVby4UIQUjpX7u4jdg/lrnzTGzi5pBt1/PvmojQNjU=)
2: TsOc3ubRn91JAdgQ5aLAsWxpMqE.roa (hash: tbfSoTjpCJFJ4FddOzyLpgPxxaJetU74fFW5NiMSulQ=)
3: hN7XUM5Glyrot6zaK4scGwI3uPQ.roa (hash: NvKjw+roiIXWY/ok1kEl36Mdnj7pgwk3grKasFBC3AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:37:c3:8c:d9:9e:e5:58:c7:cd:2a:91:34:f5:ac:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Jun 4 06:00:11 2026 GMT
Not After : Jun 5 06:00:11 2026 GMT
Subject: CN=81ad79419d7df5a10c6ccb61b7918e639216dc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:c7:8d:6b:17:8f:c8:78:28:c2:d1:e0:a0:
63:e9:55:c3:7c:0b:b7:97:38:70:39:49:9a:92:5b:
a0:4d:c2:cd:16:47:a8:a3:b2:02:eb:d6:19:4f:52:
1a:2b:7b:68:fd:a5:27:8d:db:5f:d3:92:20:c7:df:
93:2b:c6:72:2e:e6:a4:60:1c:c5:00:0f:a7:17:69:
49:47:58:47:8a:93:59:fc:2b:46:39:71:de:99:98:
34:96:23:97:93:3e:e2:fb:4c:e2:c5:87:56:b4:98:
dd:35:d2:a4:34:6a:da:59:a3:8b:97:f6:a2:eb:80:
b8:a2:cc:41:35:3b:64:e5:8e:55:e2:55:59:b5:f4:
60:d3:14:65:c6:9f:90:f9:c3:76:62:2c:54:33:35:
76:68:8c:6d:eb:28:b2:25:ce:68:af:d9:61:b7:dc:
0e:01:27:ae:98:ea:84:4b:ea:e0:bb:d6:a6:99:d1:
ac:44:6f:c0:a9:4e:df:0d:99:e7:d8:32:db:7b:f3:
19:42:e2:b5:c9:5c:45:35:68:fa:95:7d:06:22:27:
26:ba:a0:44:d6:e2:4f:c2:c2:a4:c9:0e:8f:42:1f:
f9:8e:23:aa:19:f2:bd:14:b3:74:53:ca:4a:05:5c:
ca:40:e1:98:03:53:69:5e:fc:6e:79:52:49:65:79:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AD:79:41:9D:7D:F5:A1:0C:6C:CB:61:B7:91:8E:63:92:16:DC:53
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8a:0a:98:c3:88:44:2e:85:65:72:c0:20:53:a6:6e:7c:17:
02:6d:5d:40:93:e3:2c:e3:a1:15:d3:b4:50:36:b2:cf:9e:fa:
2c:fd:dc:73:0a:ac:83:96:f3:15:99:da:4f:8a:3e:fe:5e:6e:
39:3b:29:cb:30:bb:78:92:9f:b4:a5:89:a0:70:89:a8:9a:69:
ae:0a:28:8a:1a:25:fc:53:68:93:aa:dd:18:11:9d:1c:94:13:
0f:32:71:06:08:9e:68:0d:57:5b:98:2f:ab:78:be:25:01:c2:
e6:5e:e9:7a:b3:c6:a0:3d:0c:aa:9b:8c:37:e3:9e:27:4e:17:
b3:3f:55:51:e9:53:96:3c:e2:b3:22:05:78:ab:a8:c7:b6:51:
9e:52:01:d4:77:ea:c7:9b:ef:fc:20:10:6e:e2:d0:66:8e:c6:
b9:7b:fd:9a:ae:a9:96:dd:57:2e:5b:f8:2b:d1:15:f2:39:c9:
93:b1:d7:d6:74:f6:4c:f6:71:b9:6f:ad:e2:a1:ff:35:f7:10:
7c:7e:2d:2b:b6:ad:4e:f2:ea:30:0b:10:81:ed:72:82:56:59:
87:c7:7e:86:bf:25:79:4a:38:7c:c5:64:af:65:cc:42:81:63:
09:da:2f:58:40:59:cd:61:29:66:8f:7b:ec:84:96:26:8d:00:
98:11:cd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:24:31 2026 by rpki-client