Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: oAI2Gxm1gK6taJfoKz2bS76Jnip+DieXsPqBTCBmOK4=
Subject key identifier: 30:D1:1C:1D:59:58:2A:1C:55:D0:19:CD:86:FE:7F:DD:46:3D:63:98
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 019E30E0072CB5CD3285D60143E836D0B459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 10C1
Signing time: Sat 16 May 2026 13:00:48 +0000
Manifest this update: Sat 16 May 2026 13:00:48 +0000
Manifest next update: Sun 17 May 2026 13:00:48 +0000
Files and hashes: 1: 9PZjCn76gwRRUpq9MvbclVXkdOU.roa (hash: CaqNlJNQ1Ni2aWKqDPfoQcAYDuSQhepNqZ+uo297E2U=)
2: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: DpsvZ7QJeozjIlGjim4WwzUpZeE0n1W2Fg7EvTEulYg=)
3: ur76ehndzl2-pGTHmrbh1qcAWBI.roa (hash: Sb+oNrAUwZsJERFHDlGdgS7sblzKLRz12cNiy1csEgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:07:2c:b5:cd:32:85:d6:01:43:e8:36:d0:b4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: May 16 13:00:48 2026 GMT
Not After : May 17 13:00:48 2026 GMT
Subject: CN=30d11c1d59582a1c55d019cd86fe7fdd463d6398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:24:61:59:75:ca:e7:14:48:3a:ff:2e:6d:
43:cd:c3:a3:1b:3b:61:c0:ae:d6:47:5f:dd:3e:4b:
05:68:98:f7:61:de:f5:e7:d2:19:2a:26:4d:62:d2:
d6:a9:9b:c2:0f:34:fe:45:53:73:5f:7b:09:42:ee:
82:14:ca:67:67:56:d8:70:ae:bb:aa:60:ca:fb:99:
de:a7:60:70:1d:2d:f3:9c:e3:1c:f4:64:ec:9c:25:
4b:9c:97:0b:43:72:33:d5:33:42:80:fc:c8:e6:b0:
9f:c8:27:16:77:0a:73:6a:94:6e:e8:5d:d5:1b:c6:
98:7b:ca:fc:55:7c:a7:c6:70:84:ee:98:44:e0:91:
ce:c6:d6:cc:9c:b1:54:ad:e3:07:ad:66:05:6e:8f:
f1:28:31:50:85:9c:c2:e0:23:57:2f:df:59:47:cd:
ff:32:43:aa:85:b9:ac:e9:2e:b5:54:33:49:a8:48:
85:f1:72:f6:72:7f:27:b9:8a:8b:73:ee:bb:8d:8b:
2d:a3:ce:91:a5:30:b3:fa:16:c3:86:d6:64:d8:ad:
a6:61:a0:a2:89:58:6c:ea:e7:e0:7d:f7:71:59:59:
d0:cd:45:f8:79:ba:cd:59:d9:c8:16:31:65:13:ee:
9b:6c:9a:db:9c:97:24:41:21:0a:48:19:15:8a:21:
97:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D1:1C:1D:59:58:2A:1C:55:D0:19:CD:86:FE:7F:DD:46:3D:63:98
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:47:f1:37:ee:c7:8b:b4:c7:c5:43:b2:d9:81:33:ac:e3:af:
1a:ed:d5:1e:3d:c8:d7:52:34:1e:06:33:7f:ad:02:93:9c:5a:
0d:23:88:db:33:a8:f9:d8:ae:45:c7:61:ff:55:ad:b1:2b:d1:
9c:48:53:8c:df:71:36:5a:d0:55:5c:ba:23:93:5e:d9:91:d6:
dc:55:35:08:13:11:7d:e7:d3:f1:14:21:45:17:8d:8a:68:63:
e1:b7:7a:a9:d0:3e:e8:ec:89:3a:52:54:a6:12:8c:3d:8d:5e:
d8:b3:f4:a0:a1:86:66:66:58:4e:de:6d:86:30:86:0c:e2:22:
0c:8f:48:46:95:40:c1:66:58:70:ae:82:6b:5f:ff:42:12:19:
7c:56:8b:f3:bc:2e:a1:c0:b6:85:61:d8:a1:d5:09:73:2b:76:
e1:83:a3:88:65:f2:2e:f4:d4:b2:e0:9c:70:f4:62:b7:d7:19:
52:7a:e8:11:2d:7a:af:a1:7a:8e:73:cc:2e:9c:df:82:eb:e3:
07:16:1b:0e:16:12:3d:50:c4:1e:92:ef:c4:75:80:63:2f:9f:
98:0c:83:75:3d:05:22:eb:04:87:92:75:4d:28:56:18:53:09:
90:8c:f7:14:b1:48:e9:bf:8c:83:36:4f:2a:82:32:8b:b9:19:
04:56:9d:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4Acstc0yhdYBQ+g20LRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YWJhZTBlMWYyMTZhMzIxOTczY2NjOWM2NTM3ZWM2MTk3
ZGFiMTgwHhcNMjYwNTE2MTMwMDQ4WhcNMjYwNTE3MTMwMDQ4WjAzMTEwLwYDVQQD
EygzMGQxMWMxZDU5NTgyYTFjNTVkMDE5Y2Q4NmZlN2ZkZDQ2M2Q2Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDUkYVl1yucUSDr/Lm1DzcOjGzth
wK7WR1/dPksFaJj3Yd7159IZKiZNYtLWqZvCDzT+RVNzX3sJQu6CFMpnZ1bYcK67
qmDK+5nep2BwHS3znOMc9GTsnCVLnJcLQ3Iz1TNCgPzI5rCfyCcWdwpzapRu6F3V
G8aYe8r8VXynxnCE7phE4JHOxtbMnLFUreMHrWYFbo/xKDFQhZzC4CNXL99ZR83/
MkOqhbms6S61VDNJqEiF8XL2cn8nuYqLc+67jYsto86RpTCz+hbDhtZk2K2mYaCi
iVhs6ufgffdxWVnQzUX4ebrNWdnIFjFlE+6bbJrbnJckQSEKSBkViiGXYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDRHB1ZWCocVdAZzYb+f91GPWOYMB8GA1UdIwQY
MBaAFBirrg4fIWoyGXPMycZTfsYZfasYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0t1dURoOGhhaklaYzh6SnhsTi14aGw5cXhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MjE3NDUtY2ZlNS00MTYxLWI0MDUt
MDY5OTk2YzYzMGYwLzEvR0t1dURoOGhhaklaYzh6SnhsTi14aGw5cXhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83MjE3NDUtY2ZlNS00MTYxLWI0MDUtMDY5OTk2YzYzMGYw
LzEvR0t1dURoOGhhaklaYzh6SnhsTi14aGw5cXhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkfxN+7H
i7THxUOy2YEzrOOvGu3VHj3I11I0HgYzf60Ck5xaDSOI2zOo+diuRcdh/1WtsSvR
nEhTjN9xNlrQVVy6I5Ne2ZHW3FU1CBMRfefT8RQhRReNimhj4bd6qdA+6OyJOlJU
phKMPY1e2LP0oKGGZmZYTt5thjCGDOIiDI9IRpVAwWZYcK6Ca1//QhIZfFaL87wu
ocC2hWHYodUJcyt24YOjiGXyLvTUsuCccPRit9cZUnroES16r6F6jnPMLpzfguvj
BxYbDhYSPVDEHpLvxHWAYy+fmAyDdT0FIusEh5J1TShWGFMJkIz3FLFI6b+MgzZP
KoIyi7kZBFad/w==
-----END CERTIFICATE-----
Generated at Sat May 16 20:23:55 2026 by rpki-client