Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: rhCSmTphl2OEGqvg1kZ66hlkXSZ75gex5QXxkyKGKyE=
Subject key identifier: 39:F0:29:F8:82:DF:CB:D0:3D:60:00:0D:14:CB:C6:E4:B4:37:6D:80
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 019E1E35CE5EFC5CABBABACB42B8305ACE8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 191B
Signing time: Tue 12 May 2026 22:01:43 +0000
Manifest this update: Tue 12 May 2026 22:01:43 +0000
Manifest next update: Wed 13 May 2026 22:01:43 +0000
Files and hashes: 1: BCTCosehzN-IVujDky1DFPEPdk8.roa (hash: dD51Omff3fmTkuQoAW0zLyIe0HD79k7wegGUmnwdJ5U=)
2: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: PkQcS3sSszYbrf6d5MiBkwW1qD9bGB+F11VhDBe5MtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:ce:5e:fc:5c:ab:ba:ba:cb:42:b8:30:5a:ce:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: May 12 22:01:43 2026 GMT
Not After : May 13 22:01:43 2026 GMT
Subject: CN=39f029f882dfcbd03d60000d14cbc6e4b4376d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:93:db:12:88:2c:44:c5:31:11:45:7f:08:b4:
cb:c5:b1:d5:e9:22:96:6c:39:41:f7:01:3d:54:79:
8d:c1:ab:62:6f:ff:8b:af:75:f3:63:58:1e:d8:ae:
b4:09:5c:df:0d:39:f6:12:c0:3f:49:49:d5:18:03:
44:9c:16:50:1b:6f:a5:fe:b5:09:f4:8d:8b:71:74:
07:8d:cf:ee:a3:bb:2f:0a:04:6f:bf:4e:c9:b3:5b:
2a:fe:00:de:bd:f5:df:bc:94:f3:55:e8:33:7b:bb:
fd:5b:59:92:58:b8:ee:dc:07:f5:46:d1:72:39:3f:
ba:ac:55:a0:ba:9c:34:d4:4b:3d:4b:78:0a:14:42:
7a:eb:14:6e:56:04:57:ab:8c:9f:f3:2a:bd:1c:a5:
03:f3:63:b4:f7:e1:be:00:49:ac:6d:39:d9:34:bf:
b9:a3:1f:bc:76:ab:42:08:4f:81:f4:51:b1:97:59:
c4:d5:f1:c1:78:1e:6a:e6:4e:03:9c:18:56:26:25:
2f:66:9f:77:27:ff:e9:f7:e7:8d:f2:e8:8c:4e:01:
0a:e4:ec:92:da:f8:43:c9:20:4d:ea:64:fd:02:0c:
a7:6b:8e:64:09:ac:a6:1f:7b:f6:56:2e:57:da:1e:
75:e0:5a:fd:72:e1:b6:d7:b7:5b:71:3c:31:3f:4b:
27:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F0:29:F8:82:DF:CB:D0:3D:60:00:0D:14:CB:C6:E4:B4:37:6D:80
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:95:92:87:dc:26:d3:06:48:e0:33:e9:cb:35:d9:bf:32:b7:
66:84:99:e0:68:6b:4d:c2:94:73:98:97:06:2c:eb:37:dc:02:
12:40:b7:34:d4:0a:39:eb:73:be:86:9c:6a:af:6d:8c:e1:a8:
0b:ad:ee:a9:f5:51:bf:a5:7b:fc:51:6f:15:1e:d4:85:2a:93:
6e:3a:4d:d5:69:6b:3e:9b:f3:4b:a0:a5:66:4b:46:ed:43:98:
65:cc:a8:1f:73:bf:16:fa:f0:84:2f:14:6d:ec:20:55:80:f4:
18:d7:d2:4c:f7:a2:21:39:7b:d8:10:95:5b:da:af:09:99:c6:
ad:c8:35:e2:0d:3c:b1:ed:eb:3e:d2:e6:b9:01:b4:91:47:39:
f6:b5:7e:d6:7e:30:3b:35:3e:7f:61:44:d3:32:ae:5f:aa:3d:
ac:24:d0:55:45:7e:5d:97:0a:e7:24:4f:6b:8b:0c:2b:08:16:
7a:a8:39:f9:40:bd:fd:f5:cc:63:6b:55:d1:0d:79:5f:48:bf:
19:98:9a:3c:df:ce:12:be:5d:84:d6:7c:d6:d7:64:de:3b:bd:
fb:e9:66:fb:d3:10:04:62:ce:0f:39:ed:09:38:50:be:3d:6a:
46:a3:41:98:ca:0b:d6:72:26:7b:22:08:b9:e2:ee:5f:63:f4:
d7:ac:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:37 2026 by rpki-client