Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: yEf4ZkncVRAOsqGKzcFrU38sg/pRGeDLFPobsoVqapg=
Subject key identifier: A3:31:22:EE:AF:B3:A1:5F:F0:A1:3B:68:31:8E:0A:7C:29:61:58:07
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 019E2C5E4D7583FDCEF3219243CC66835F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0C51
Signing time: Fri 15 May 2026 16:00:38 +0000
Manifest this update: Fri 15 May 2026 16:00:38 +0000
Manifest next update: Sat 16 May 2026 16:00:38 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: NaO5PfwuLaqoPXSg8opyDjJlm7zpjzmiA99KM1e8Xnk=)
2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:5e:4d:75:83:fd:ce:f3:21:92:43:cc:66:83:5f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: May 15 16:00:38 2026 GMT
Not After : May 16 16:00:38 2026 GMT
Subject: CN=a33122eeafb3a15ff0a13b68318e0a7c29615807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:a2:c2:6f:53:f8:28:54:7d:46:77:e4:34:
f0:0c:a4:30:35:d9:06:b2:93:e1:b7:c5:3c:9a:70:
43:68:80:50:51:b5:61:46:79:27:fa:ed:08:fc:2f:
5e:c6:a7:08:8e:58:e1:6e:98:13:a6:b4:6c:a7:57:
26:66:5d:3b:72:4f:92:32:e2:6c:f0:d1:d7:44:42:
45:d9:b2:2e:41:f9:6c:92:68:43:af:3f:6c:14:3c:
84:68:65:a3:7d:5b:ec:75:94:14:c5:71:35:ee:65:
35:a8:12:75:d6:23:f2:f1:1c:8f:00:e3:bc:1f:98:
5a:52:04:ba:81:e8:18:a9:99:3c:45:01:fc:33:d6:
84:43:e7:c5:b8:02:33:a5:d8:86:30:8e:d9:0b:b4:
15:32:5b:0c:11:dd:f4:45:a5:26:0c:76:02:69:cc:
92:53:63:7d:e4:36:87:97:73:db:a7:17:ff:01:d1:
34:3d:c0:31:e8:b7:fa:f3:76:e7:9c:40:66:0c:26:
72:da:c0:0f:82:63:e3:b0:16:94:11:36:20:48:81:
b8:a8:ef:b1:6a:6f:11:4b:0b:99:11:5b:2b:f9:04:
45:ca:92:01:ca:92:1b:46:ec:c3:af:62:05:63:b4:
ca:51:99:cc:14:82:de:04:c2:84:d2:f9:bd:2d:ff:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:31:22:EE:AF:B3:A1:5F:F0:A1:3B:68:31:8E:0A:7C:29:61:58:07
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e5:ab:35:21:5c:6c:04:67:a5:8f:a3:49:69:f5:92:88:14:
1c:fe:58:1d:b2:a7:b5:39:87:73:c6:92:5b:dc:e6:14:c3:2c:
e9:6a:29:8b:2d:24:c3:aa:22:8c:84:69:ca:c7:64:cc:26:78:
3d:78:a6:cd:0b:75:1d:c0:17:1b:87:76:94:93:c8:03:88:ee:
e2:6f:ae:ca:51:84:4f:a4:52:c3:51:2e:d1:9f:b3:b6:85:48:
4b:27:5c:8c:91:2d:68:82:3e:24:45:21:8c:84:71:bb:e2:ed:
bb:c4:37:76:56:3b:f5:e0:3a:da:a8:68:25:bf:9c:f1:fa:ea:
6e:f2:2d:05:d2:e2:7b:95:49:29:88:af:8e:02:7b:54:b5:e7:
2d:eb:10:20:84:f3:09:35:39:68:95:a4:a7:2f:f8:9a:fc:8b:
93:f4:f6:6e:06:6b:a4:7a:95:b3:31:58:7a:56:5b:7c:33:38:
b4:ce:b5:52:f7:1a:6a:76:22:eb:6d:85:7a:10:10:79:2a:68:
f0:5e:0c:f0:8c:3e:82:bb:7d:8d:66:1b:ea:01:4b:1c:92:56:
c8:01:88:dc:d6:1f:87:8d:c8:7b:99:91:16:6c:68:d1:9d:d2:
a4:59:ea:f9:d8:d3:81:08:d2:17:f8:d6:04:10:c7:cd:3b:36:
da:69:af:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:54:56 2026 by rpki-client