Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: Pmkk2oglj5aJWcPF6cuSox1dt/MyZjsyShcnJzcQRis=
Subject key identifier: 1C:7B:E6:42:E1:54:3F:76:D5:AC:AE:53:B2:F8:51:3A:25:61:F6:2F
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 019E9BBBF69DB9B9CBC3653317F90F41FC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 0A22
Signing time: Sat 06 Jun 2026 07:00:47 +0000
Manifest this update: Sat 06 Jun 2026 07:00:47 +0000
Manifest next update: Sun 07 Jun 2026 07:00:47 +0000
Files and hashes: 1: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (hash: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: 3vpkM/gnTx+VtdUI70VZrdkqNvyewXeOMZUQVqQr5y0=)
3: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (hash: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY=)
4: XtW69XYWfcYs9FhfW77svXCHmQk.roa (hash: +2PiuVV/xd9FID0vQ4PS/1nWqfCBv4fOx6GV++A7pIo=)
5: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (hash: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:bb:f6:9d:b9:b9:cb:c3:65:33:17:f9:0f:41:fc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Jun 6 07:00:47 2026 GMT
Not After : Jun 7 07:00:47 2026 GMT
Subject: CN=1c7be642e1543f76d5acae53b2f8513a2561f62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:65:b2:35:bf:ba:9d:4e:60:3e:98:b6:90:34:
66:40:c2:b9:08:c1:1d:2a:00:48:cb:a0:a9:69:df:
47:fd:9f:3f:bf:f7:d4:de:3b:f3:8b:bf:0b:60:67:
99:17:a0:f8:f2:38:82:63:ca:05:f4:44:a8:a1:6d:
be:65:92:7b:bd:70:32:13:af:2c:68:37:ed:de:ca:
82:66:8c:02:99:df:c1:53:41:a6:e9:09:e0:0e:1a:
e7:c8:06:60:c8:81:d0:0b:ca:c5:37:1f:3e:13:ae:
21:b1:c7:d0:fc:87:77:93:04:55:ea:1e:9c:da:85:
c7:71:d8:0e:41:2d:77:f6:23:1f:57:62:dd:02:a5:
85:eb:91:e3:c8:94:49:1c:26:29:37:ac:2b:15:0c:
0a:7c:9c:eb:04:2e:c9:24:60:47:28:a3:4a:05:67:
3c:1d:0c:a7:25:7c:96:c6:ed:5a:ac:02:8e:0e:af:
92:53:b9:09:15:07:e7:9c:f4:a0:13:6e:ac:5d:5d:
3f:28:82:61:0a:62:52:be:14:bc:ce:23:63:a2:3f:
f2:9d:09:bb:5a:4a:95:7b:31:c0:80:55:37:49:bd:
c6:54:62:43:21:fb:e0:ac:19:1c:d6:c1:da:fb:20:
c6:61:a1:85:28:f7:6a:30:ce:5a:46:6a:70:3c:49:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7B:E6:42:E1:54:3F:76:D5:AC:AE:53:B2:F8:51:3A:25:61:F6:2F
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a7:f7:cc:41:23:53:24:2f:ba:c7:a4:c1:ee:bb:dc:b3:dd:
0a:42:81:df:3a:e9:8f:20:b3:07:1e:5c:d1:30:86:5d:82:7a:
03:8e:ff:aa:4a:8a:4d:3a:ef:45:bf:6b:c6:d5:87:a9:10:72:
b3:46:d4:95:b7:cf:f1:91:6d:55:44:a3:94:11:da:6b:19:dc:
2e:67:0a:a6:a7:23:38:14:b5:44:f6:1d:eb:68:3b:55:bd:17:
eb:5d:c2:72:8f:d9:58:b2:18:ef:91:ac:2d:e7:70:6c:39:46:
31:34:1b:74:4b:26:7c:61:e4:a9:5a:ba:f1:ec:f1:95:7c:96:
06:67:bd:5e:07:4a:64:2a:5a:08:0d:1d:6e:21:19:eb:9b:56:
a5:0f:fc:90:89:0b:d8:62:50:e0:0d:94:75:a1:68:d4:27:ef:
bd:dc:09:63:5f:63:f9:e3:12:87:f9:d0:1d:f6:2e:11:31:f8:
05:f8:90:7c:9e:1d:ce:82:72:ae:a4:57:f2:78:ca:ab:ad:7a:
60:e2:9b:51:1a:8b:b3:87:14:d0:18:98:a2:2e:ab:70:56:66:
59:e5:10:e5:f8:3f:e5:fa:e3:2c:38:2f:64:97:c8:7e:22:55:
67:86:19:9a:ac:28:65:ff:9b:3d:06:02:d3:ee:14:41:07:4f:
e5:de:82:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:27:57 2026 by rpki-client