Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier: ZRwJ8aL7L2lTK7kq6O0yfesVWnQHWdRlXfo8HZ/LuDk=
Subject key identifier: 4E:73:C1:55:B6:6C:47:59:2E:EC:B5:34:58:6E:96:D2:AF:6B:13:0B
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial: 019E326164685AA3AC73D7C9DE3F68370E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 20:01:43 +0000
Manifest this update: Sat 16 May 2026 20:01:43 +0000
Manifest next update: Sun 17 May 2026 20:01:43 +0000
Files and hashes: 1: RhRiCLu3V9nkc3JU2Ejeh0r6z3A.roa (hash: /FQPmAw2IpNKrgFt00mOhh1pZSgkOc3LG4d41GRZWyA=)
2: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: k3/Qys4vp0PdWslPYfrZgXMPEUHaB4utbGRpgfRAtBE=)
3: pZJL0eNksfaHvSe4LIDTMSzvlCY.roa (hash: w14PGsWnAom/plqZ5dIIMe8RiKKn/dXWpdjVTgkHyCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:61:64:68:5a:a3:ac:73:d7:c9:de:3f:68:37:0e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Validity
Not Before: May 16 20:01:43 2026 GMT
Not After : May 17 20:01:43 2026 GMT
Subject: CN=4e73c155b66c47592eecb534586e96d2af6b130b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:0e:f5:a6:fb:8d:82:1d:a5:d4:af:c1:62:
55:10:22:a5:1c:70:b3:94:7a:32:95:81:cc:8c:a5:
99:d7:51:7c:20:60:50:21:2f:33:91:d8:93:92:5a:
2a:d7:6d:b2:77:09:76:48:b5:0d:c3:24:66:6e:c7:
82:ab:58:c5:14:ba:42:db:73:79:1b:67:61:84:ac:
f5:b7:6b:f1:1d:64:3f:f2:6f:c8:b1:40:17:3b:95:
27:a9:52:5e:e8:62:23:cb:56:ab:c6:89:32:11:ee:
d0:55:84:5e:65:8e:67:4f:0f:59:fc:dc:09:ff:b2:
1b:0a:b1:8a:5b:9c:0e:d8:d0:df:41:55:ea:2d:ab:
9e:c2:0f:b4:d8:a5:82:6f:70:f6:19:70:23:bf:a6:
c3:e4:5f:7b:62:72:b5:be:a9:c4:e3:e6:c5:0a:29:
16:59:e6:d0:91:80:59:a2:a7:33:1c:56:b4:60:b8:
34:d3:86:e0:64:ac:37:29:35:71:9d:18:b1:68:4f:
13:66:61:48:09:c2:32:bd:d0:3c:fe:28:c9:8c:99:
db:2a:35:f3:62:b7:72:7b:f1:55:27:21:9d:fe:80:
ca:1a:74:73:50:3c:15:8e:f8:7a:99:e9:99:37:35:
d8:6e:dd:a0:06:61:da:7d:0e:39:26:a4:cc:75:d3:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:73:C1:55:B6:6C:47:59:2E:EC:B5:34:58:6E:96:D2:AF:6B:13:0B
X509v3 Authority Key Identifier:
keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:03:9a:50:78:cf:fe:f2:87:9a:bc:3a:15:49:45:7a:a1:7a:
c3:f1:9d:b0:71:eb:c0:ea:7b:23:ed:71:9a:44:b7:77:cc:c4:
70:50:88:91:eb:0b:46:d1:a8:00:c1:c3:70:b3:6d:8e:74:19:
58:77:b6:22:38:71:96:dc:08:3d:d3:bf:52:f9:af:c9:f4:a4:
7d:c7:15:bf:0c:94:17:7e:d1:e0:33:ed:3f:cd:d7:e2:e1:38:
94:81:bf:67:46:e4:28:fe:59:9b:7d:ec:9d:43:e2:82:05:18:
58:5c:8e:3f:87:3f:b0:6a:16:a5:1a:05:fc:74:05:17:3b:cd:
4f:51:d8:e5:31:be:b2:5a:dd:d5:22:c8:6f:cb:fe:c0:74:68:
27:3e:14:0b:0a:a0:45:cc:ad:a4:47:61:39:29:c4:c4:19:30:
49:69:1c:66:14:d0:fb:16:80:42:b8:fc:85:6c:9b:57:a5:f9:
6e:d7:62:81:10:51:34:d2:99:64:b4:9d:8c:ea:f0:28:c1:35:
df:74:8d:82:b7:1b:3b:7c:81:cd:92:de:f4:bf:b9:41:bc:c3:
52:fa:3c:aa:5a:7d:53:bf:d0:ac:ff:7d:85:3d:93:04:e5:3b:
bd:66:a0:81:00:69:b3:e7:39:3a:c7:c0:f5:23:3c:bb:3d:2b:
f8:fa:4c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:28:16 2026 by rpki-client