Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: kfenp0DoIW/OAQ0/wtl4G/w/qKk9UN0v3sGLBO0PDJg=
Subject key identifier: 11:8A:EF:F2:58:A9:A7:6B:D1:D5:98:C0:4C:5D:33:02:FB:EF:2F:E3
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 019EB7D81136F7F9CC96D295D77DDCC2A3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 18E8
Signing time: Thu 11 Jun 2026 18:00:51 +0000
Manifest this update: Thu 11 Jun 2026 18:00:51 +0000
Manifest next update: Fri 12 Jun 2026 18:00:51 +0000
Files and hashes: 1: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (hash: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ=)
2: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: NSnNEK/SrHPEpj0iWpdipeThiiSIf7kUYKBmPIH2l9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d8:11:36:f7:f9:cc:96:d2:95:d7:7d:dc:c2:a3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Jun 11 18:00:51 2026 GMT
Not After : Jun 12 18:00:51 2026 GMT
Subject: CN=118aeff258a9a76bd1d598c04c5d3302fbef2fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:b8:3c:42:d2:18:4e:db:a5:c2:10:85:10:
9f:2f:13:2e:5e:c8:fd:4a:73:51:3d:8f:0c:a1:01:
f5:be:c0:63:91:56:94:d0:09:05:74:4b:08:ff:10:
d8:a0:d9:33:d0:fe:1d:30:b7:07:7b:c9:b6:2a:ee:
2d:9a:d5:c8:96:ea:05:03:7b:25:8e:09:c9:92:2b:
11:38:99:f6:95:9e:eb:b0:b8:76:9c:7b:b1:32:7c:
d8:a5:36:f2:d1:e5:54:d2:fd:26:76:af:5e:5c:c6:
f5:25:87:eb:4a:9d:aa:cc:ec:13:38:96:f7:6d:ed:
a1:66:d9:bf:0f:a3:6f:75:f2:9a:a4:2c:4b:6d:29:
fc:04:2d:a0:d6:8a:4c:a2:34:e0:91:0e:8b:e9:0e:
81:f6:ff:06:08:d8:b1:5c:89:1c:e6:30:0b:a4:ab:
24:f4:79:d7:fa:7a:5b:74:3e:1d:ac:fc:b9:29:db:
9a:71:72:11:78:2e:f1:52:ac:7d:ad:70:63:1b:e5:
c4:6a:c6:ed:85:77:6f:52:ab:d7:15:48:d4:69:85:
d2:da:eb:9c:f7:95:85:00:b7:86:97:aa:e5:ca:8c:
6e:69:3c:92:95:2e:cf:9e:3a:e0:4e:33:c8:05:33:
ea:17:a9:1f:20:b1:56:7c:d3:9f:b8:c6:29:2f:71:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:EF:F2:58:A9:A7:6B:D1:D5:98:C0:4C:5D:33:02:FB:EF:2F:E3
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:14:2d:d0:0f:42:85:5a:e0:6d:56:c2:26:5a:a6:8e:b9:a4:
48:98:cc:fe:69:24:ab:c5:c5:b0:6c:68:e0:61:40:06:94:82:
97:ec:b4:f4:00:2b:63:49:b1:bb:69:87:0d:2b:68:80:f8:23:
f7:81:29:ce:a7:99:da:f1:15:86:0f:ce:5b:8e:a9:6d:e5:f5:
14:36:a6:50:1d:5b:55:aa:29:d4:cf:ed:95:a0:ca:4a:5a:90:
5b:88:a0:11:ed:51:97:4a:ee:4f:1f:39:60:d9:8a:8e:7b:c2:
09:8e:7c:ad:c3:c8:de:5c:fa:81:57:0e:27:79:de:00:4a:e3:
b0:13:c1:41:66:28:4b:12:a2:11:a8:f3:19:eb:09:a0:03:95:
3f:c1:e2:ad:85:ee:42:03:d7:72:e1:d8:fe:3d:57:a0:a2:c0:
a2:8a:46:cb:3b:18:02:9a:51:2c:2d:5c:ea:53:09:83:2d:d1:
81:d7:be:9b:86:53:21:9f:28:ff:e0:40:97:b1:99:0d:de:de:
1e:a2:39:fc:93:a1:2f:6b:c4:49:c4:c6:15:e1:67:7e:41:9d:
43:b8:26:fa:35:ce:08:c1:1d:83:75:f6:f0:f4:44:33:ca:b7:
bb:7f:56:1e:48:c1:75:56:54:6f:c3:ee:c2:7d:36:9f:5a:80:
56:1f:0b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:57:15 2026 by rpki-client