Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
File: gFOrw9SfVluUh47Y8iDOMn-XSjI.mft (raw, json)
Hash identifier: 5AJbqN8homEH2zEvq39cDkOxRKB3WlrwRoMl8jRqHVg=
Subject key identifier: 62:5B:15:97:A9:4F:9B:1C:D6:B9:22:AA:CC:42:67:5F:E4:70:2F:38
Authority key identifier: 80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
Certificate issuer: /CN=8053abc3d49f565b94878ed8f220ce327f974a32
Certificate serial: 019EB62124EABC3F4522725ECB653F009B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
Manifest number: 50
Signing time: Thu 11 Jun 2026 10:01:25 +0000
Manifest this update: Thu 11 Jun 2026 10:01:25 +0000
Manifest next update: Fri 12 Jun 2026 10:01:25 +0000
Files and hashes: 1: TIw274m8VtVS81gRQbbaAg9y9qo.roa (hash: vQbtbmsP7ww+jMIm8AvD1TwBUQ0YruSRmDg5jICLknw=)
2: WY06-fQH1sr9LbxJ2fzSyQGVf2A.roa (hash: Jj0ifAVA2VOVU8XuAJ0EEBKW9/5TWme2xuNmmdIM59g=)
3: gFOrw9SfVluUh47Y8iDOMn-XSjI.crl (hash: j5ZNt20zGX0sMPUXh79w6jf20hAAW2x+5Y/7CaviV/c=)
4: wV_a04Winoh39sOwGH3_ZcknMH8.roa (hash: yosw8T08uVoT4Dz0+iSF39BAslFv7TeHxE3tRY6UqoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:21:24:ea:bc:3f:45:22:72:5e:cb:65:3f:00:9b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053abc3d49f565b94878ed8f220ce327f974a32
Validity
Not Before: Jun 11 10:01:25 2026 GMT
Not After : Jun 12 10:01:25 2026 GMT
Subject: CN=625b1597a94f9b1cd6b922aacc42675fe4702f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:8b:a7:f0:dd:a0:8e:ae:af:6f:3b:10:57:
68:16:4c:de:80:17:e3:97:55:57:71:30:f5:6f:7b:
f7:6f:eb:e5:8f:eb:e0:39:b3:e5:c3:9a:87:b4:04:
11:4c:dd:2c:7d:50:ae:f2:3a:78:5f:cc:a5:7c:e3:
57:78:60:e8:ed:52:f5:5f:c6:53:34:f3:1f:11:71:
6c:82:07:76:43:c3:98:e3:10:ed:5e:d0:51:9b:7b:
ec:29:e4:2f:29:e4:71:70:a3:89:f5:d9:96:b5:10:
06:dd:88:01:e9:f2:f5:50:54:d3:b6:ea:5f:c8:34:
9e:61:b1:7f:ad:2a:6f:cc:60:06:05:01:ba:9e:2b:
1f:6f:73:7c:7a:7c:f0:68:61:53:52:6e:34:a2:53:
23:77:18:95:ab:69:03:a6:92:bd:e9:85:47:67:e3:
be:52:df:ad:1e:86:56:29:57:3c:69:e2:65:f5:fc:
30:64:f0:6b:7e:a4:d2:f5:dd:fd:de:07:99:82:8f:
94:49:e5:d5:2e:ff:c8:29:53:8f:b5:30:6d:fd:55:
ac:b7:de:ea:73:1e:1b:a0:b0:17:8a:1d:30:49:3c:
f3:69:31:7a:3e:79:1f:5b:91:ac:89:51:46:ef:58:
9e:f4:6d:a4:3f:b1:c1:a4:a7:44:2d:f9:f6:bd:a5:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5B:15:97:A9:4F:9B:1C:D6:B9:22:AA:CC:42:67:5F:E4:70:2F:38
X509v3 Authority Key Identifier:
keyid:80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:67:51:e4:df:c6:ee:78:45:88:90:9e:95:38:b5:19:80:eb:
29:ab:1a:49:01:f9:fa:c8:19:3a:20:4a:97:f9:45:e4:1d:ae:
88:a4:d6:b1:f3:2a:40:e1:64:d8:2a:c5:7a:18:4c:be:55:e2:
31:d7:39:2b:e9:e0:6c:62:97:17:0c:7b:02:2f:1f:53:be:95:
a0:c7:16:9e:06:22:ce:31:44:34:c5:4d:c4:95:e0:2c:8d:63:
d5:a7:1f:41:bb:40:a3:41:dc:48:c1:ae:2a:a2:a8:2e:75:ed:
dc:28:2c:07:6a:c5:d6:23:44:93:03:ca:47:95:ff:95:6c:2f:
8c:34:bf:b8:f7:2d:ee:7e:29:99:49:d0:08:81:95:b1:ba:64:
f2:9d:17:21:54:02:59:f6:68:8e:b3:85:97:62:82:a8:fd:fc:
dc:84:2a:bc:9e:5f:1a:b9:5b:23:b2:80:2a:c3:db:65:cf:9c:
de:b7:45:c3:4f:4e:c6:5d:b6:02:5d:06:aa:1e:93:29:f0:50:
7a:5b:7d:a4:e3:c0:16:76:69:f3:d5:9c:f6:de:04:fe:06:ad:
66:ce:d6:18:f2:7c:c1:ca:a3:e0:98:c8:f6:94:2d:8d:7e:56:
c0:03:a5:42:e6:9c:7d:11:c6:90:3f:6f:d6:70:ba:d1:73:b6:
df:ca:0c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 15:37:46 2026 by rpki-client