Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: czp5PO4i3XKZuQzsHn4szzziHzxOrCATtwgu8/1PvFg=
Subject key identifier: 84:95:83:31:EE:E0:1E:BA:80:1E:F3:62:65:CD:B1:19:C3:F8:30:BB
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 019E31F29836C4719256302967BF175624FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 18:00:42 +0000
Manifest this update: Sat 16 May 2026 18:00:42 +0000
Manifest next update: Sun 17 May 2026 18:00:42 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: QpzAIAOSwlgNZ/uDXcATu9Fx5eQfvo7BrCwdoYMKUYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:98:36:c4:71:92:56:30:29:67:bf:17:56:24:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: May 16 18:00:42 2026 GMT
Not After : May 17 18:00:42 2026 GMT
Subject: CN=84958331eee01eba801ef36265cdb119c3f830bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:b0:07:79:9a:d1:ef:2e:50:5d:8c:c1:48:
d5:bc:c9:f2:2b:c0:94:d6:45:df:79:d4:56:3b:7e:
68:0e:40:52:54:f4:46:fb:47:77:85:a2:ad:40:2d:
99:35:ab:f9:d5:24:11:9a:16:d3:de:fd:72:1e:cb:
17:84:83:41:71:e7:4c:7b:27:4f:7c:1b:d5:0c:8a:
0d:2d:ca:da:8e:b7:d1:08:9a:17:d5:06:cd:29:69:
ec:6a:ca:9f:b3:cd:31:09:85:fb:5c:43:7c:68:53:
da:25:5a:83:bc:21:f1:2a:37:17:72:dc:d9:e4:ef:
29:de:30:d3:66:c2:df:b5:12:7c:3a:20:27:50:88:
06:5a:1d:f9:4a:9b:d2:aa:13:63:03:19:54:f0:11:
86:3b:37:c2:74:04:e7:44:a5:7a:42:f1:3f:cb:17:
8c:c2:9d:14:85:d8:f5:d3:00:21:81:9b:93:df:42:
2d:64:61:cb:ef:af:9e:1c:4e:4b:7f:3c:4c:fd:c4:
d1:86:e7:c2:bf:7f:fe:76:3f:0e:86:39:60:70:5d:
d4:65:79:1b:81:78:d7:d5:56:28:e9:8a:eb:4a:88:
55:b3:04:ee:30:af:25:bd:48:16:e0:f7:e1:37:89:
cc:67:74:35:e4:f3:29:32:63:68:81:ca:85:cc:d6:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:83:31:EE:E0:1E:BA:80:1E:F3:62:65:CD:B1:19:C3:F8:30:BB
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:04:ba:f0:23:fe:e3:6d:a3:40:6b:f5:c7:31:88:b4:25:d6:
58:aa:8a:04:fe:cd:01:d6:ef:fa:f1:5f:0d:d0:e3:9e:d3:39:
33:36:5c:46:90:ff:11:8c:16:85:04:a7:02:39:3f:4d:0f:1b:
cd:6f:99:4c:43:e5:7d:f1:2a:38:ff:9e:ec:1d:21:f7:77:28:
b4:1e:68:bf:f9:7a:7e:12:c9:57:f2:de:92:3f:df:83:46:55:
e4:1b:07:ca:68:65:52:85:26:4f:89:5f:4f:27:d5:93:00:6c:
44:76:46:d5:c5:a6:3f:3c:47:40:ae:62:0c:14:50:4c:cb:cd:
f5:bd:31:d2:94:04:d2:25:07:c4:f3:bb:24:f3:2f:4a:22:9f:
e6:9d:69:eb:c5:a0:29:37:af:ee:ab:cf:20:3c:74:6b:6a:e1:
8d:c1:9d:bb:d5:07:34:6e:aa:57:e2:22:e0:f3:61:aa:f5:61:
29:67:70:9a:82:f9:6f:b5:c9:03:05:e1:70:3e:fd:a4:8a:64:
5a:36:4c:1b:a8:8c:fc:1b:84:c3:34:6a:64:2b:52:08:87:8a:
04:01:f6:01:ca:a6:ed:c4:46:09:08:a8:d4:61:56:c2:92:96:
23:6a:8c:7a:32:11:c9:db:4e:f2:46:db:71:5a:04:ce:ff:15:
e8:cc:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:29:37 2026 by rpki-client