Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: sx+/FFVEK3/J4ASYzUCD8G9/aMdjBzFhQu1n9Ec11wM=
Subject key identifier: C0:36:52:96:B9:01:2D:68:8A:04:C7:91:2A:B6:2A:6F:E7:DE:3B:5B
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 019E333C8DC639D34226CBB8A491A46B22F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 15AF
Signing time: Sun 17 May 2026 00:01:06 +0000
Manifest this update: Sun 17 May 2026 00:01:06 +0000
Manifest next update: Mon 18 May 2026 00:01:06 +0000
Files and hashes: 1: 1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa (hash: nATa+n5oWjMZXiwMho7tjE9Rx2x+4yb18TAu52HSqiY=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: hncSFyXkn6Qnvh8NJXWmzXuEBu64R/G9btld4POiRQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:3c:8d:c6:39:d3:42:26:cb:b8:a4:91:a4:6b:22:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: May 17 00:01:06 2026 GMT
Not After : May 18 00:01:06 2026 GMT
Subject: CN=c0365296b9012d688a04c7912ab62a6fe7de3b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:74:fd:87:60:77:cd:39:41:3c:15:d1:c2:
e4:1b:be:de:71:ca:ca:5d:2c:74:99:33:e1:ef:e3:
4a:22:fb:c8:e9:0a:de:27:96:b8:e9:b7:79:5a:95:
18:a7:3f:c3:eb:43:f9:4e:48:92:98:10:1c:12:b9:
41:dc:fe:ac:d0:3e:bf:62:2e:09:3b:e2:1b:83:d4:
49:25:ac:b7:21:49:7f:39:63:76:d7:5a:1d:23:3f:
bb:ea:ed:62:df:69:ea:a9:d4:71:76:29:35:1b:f1:
6e:b0:82:d9:ba:a5:f7:26:dd:48:e6:d5:10:ad:40:
df:c5:d8:21:61:f4:06:2a:b6:1f:41:5e:38:35:b0:
d9:0b:a8:2f:f1:ef:09:4c:8c:c1:2a:e1:91:2f:ec:
a6:17:6d:9f:e8:63:3f:54:8f:2a:8d:d1:9d:18:b2:
fc:2b:a2:83:a4:ec:d6:e1:b9:7f:31:62:7d:48:fb:
06:ab:ac:89:c7:98:17:03:f6:79:d3:a4:cf:30:27:
ca:0d:ae:90:2d:18:af:92:2f:e2:09:e1:21:66:f9:
b3:b8:53:1d:09:d3:cb:4d:d0:7a:c7:39:57:87:34:
70:4d:82:37:ca:e0:43:8b:c5:eb:1c:45:2a:01:1f:
3d:83:bb:84:8f:7c:f1:a5:b6:07:dd:a5:1f:6f:1c:
5c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:36:52:96:B9:01:2D:68:8A:04:C7:91:2A:B6:2A:6F:E7:DE:3B:5B
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:45:b1:7c:ee:a7:92:35:9f:d7:bf:fa:8b:11:71:cd:5f:cb:
5b:f3:e9:45:5e:27:82:e8:ee:44:7b:73:03:28:99:75:c0:b1:
30:2c:20:d1:95:3c:24:ea:5d:36:3f:0f:6b:2c:76:dd:54:5a:
46:9c:9e:0a:41:49:e0:47:be:a3:e5:55:1f:3a:ad:4c:29:ca:
99:32:ac:4b:01:da:73:cf:d3:72:60:53:b5:38:ea:15:dd:fc:
ab:98:e8:d7:f2:bc:33:ed:ba:95:e4:66:8b:ce:ed:e9:6d:1e:
b5:91:67:b4:cd:20:99:b6:00:ab:04:67:f5:ff:01:de:b6:19:
25:d8:7d:d2:57:b0:57:54:70:3b:27:28:0d:79:d4:e5:29:a6:
72:73:59:bb:6a:83:a1:d7:b3:60:a7:8f:ac:16:ac:21:1e:b3:
a2:c5:98:3f:6d:10:5c:ad:3e:ea:e4:98:93:62:38:b8:43:c2:
4c:b3:c9:b9:ce:5a:49:49:7f:64:d1:b4:62:8a:08:9b:b2:c6:
bc:1d:d5:ae:9a:55:39:d6:19:c3:4a:c9:ba:fb:c8:a9:a0:aa:
e6:fe:fb:95:81:cf:39:76:ed:c9:f2:87:45:71:f6:5b:e8:14:
1b:2b:1d:3d:fc:a5:72:ca:a8:4d:f4:23:5a:ea:27:97:f2:62:
f9:f3:a8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 04:16:46 2026 by rpki-client