Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: MqqNiRxzptTS9ao7pcmzFsY7dqufbOU/K1DoU/+khgQ=
Subject key identifier: 50:28:47:D3:10:E0:4D:F4:F8:69:20:92:3A:19:5B:48:69:D5:D1:90
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 019E3F40B08E3315C3E7CD7172163C589DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 04BB
Signing time: Tue 19 May 2026 08:01:04 +0000
Manifest this update: Tue 19 May 2026 08:01:04 +0000
Manifest next update: Wed 20 May 2026 08:01:04 +0000
Files and hashes: 1: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: xO+KAkndqApzgd5fpamFI6fpyvfPn0KaSPHXCJtSsT4=)
2: qTChY0Kq_uA6L6Hi5pDRavsPyQk.roa (hash: UhoY5Jxel6+XTofYPqKQ5kLj+eG01D/abRAxNfVn9cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 07:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:40:b0:8e:33:15:c3:e7:cd:71:72:16:3c:58:9d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: May 19 08:01:04 2026 GMT
Not After : May 20 08:01:04 2026 GMT
Subject: CN=502847d310e04df4f86920923a195b4869d5d190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:e3:fa:11:32:de:b5:5a:f4:c8:03:b7:94:
fe:3c:8d:79:e4:9a:48:21:7e:fd:4b:cf:20:81:5f:
e2:c4:80:29:4c:7c:aa:94:3c:7d:f7:00:fd:c3:13:
a5:6e:96:60:0c:2c:53:2f:37:18:07:52:bd:88:98:
d0:af:d5:60:c7:54:15:50:8b:7d:c0:44:9f:e7:ae:
9b:79:26:ae:cd:6b:20:12:df:0a:1c:dc:d5:48:c7:
71:1d:a1:d7:8e:29:19:d5:a7:23:16:4c:21:68:dd:
64:a6:62:fc:97:91:be:ff:7d:e1:0f:a9:57:c9:cd:
ab:3e:b3:71:e2:b6:5e:c4:f2:b7:a1:53:61:a8:09:
c7:18:ed:fc:89:6a:18:85:09:8a:a2:97:7b:32:1d:
26:aa:02:ee:78:8f:c4:cd:2b:27:32:07:b5:d7:1b:
3a:b5:77:d6:27:0e:fa:6c:cd:e8:56:74:fa:88:88:
00:cc:47:90:ef:17:e7:e4:95:35:5b:a4:fa:82:2d:
0a:4e:fa:06:29:d0:1d:eb:e6:05:93:f5:b4:28:81:
b3:10:ca:18:21:1c:d3:47:41:fc:e4:83:5d:5d:8f:
c0:7a:ea:69:60:65:3e:f9:2d:e4:28:33:0f:e4:b1:
87:1f:58:37:6e:c7:8f:87:ef:b2:20:d1:b2:04:c4:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:28:47:D3:10:E0:4D:F4:F8:69:20:92:3A:19:5B:48:69:D5:D1:90
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ad:d6:43:4f:33:ea:59:6f:9d:c8:b6:fd:90:42:c2:e4:86:
5a:90:01:ed:13:3f:a0:20:e6:a4:ba:d7:3c:ba:1b:da:3e:7d:
3e:f8:00:8a:ee:6a:b6:9e:55:4d:a5:59:70:b4:b3:9f:9c:69:
aa:58:e0:f2:a6:eb:5b:e3:7e:88:08:ce:39:8d:50:21:50:3b:
3f:4f:da:7f:68:09:f2:3e:12:09:65:2f:49:2b:fb:49:2c:3e:
44:2f:74:c2:05:d6:22:93:f1:d8:15:ae:7c:ff:e6:60:00:ea:
13:ce:78:79:41:d1:36:b2:04:fb:7d:dd:eb:5d:b1:45:c7:c1:
bf:2a:7e:00:63:56:62:ed:db:32:35:68:ac:e1:8b:68:bd:6c:
d4:8e:65:d8:52:b6:96:dd:91:e9:2a:2f:1e:bb:c7:ab:e2:66:
cf:4b:67:e8:e4:ca:f2:1c:26:24:b1:97:69:78:b4:75:a0:73:
29:6a:3f:89:78:58:ec:f0:b8:be:26:c7:ad:03:1b:a8:a4:97:
46:c5:96:d1:41:bc:62:1d:f8:f4:9f:6a:f3:39:fa:01:24:ab:
7e:3d:da:0e:df:a3:8e:83:b1:96:9b:ac:0d:0d:93:0b:5f:93:
bb:4d:51:d3:e4:7a:f6:02:60:c3:23:77:eb:1f:61:8f:26:44:
f1:8e:5f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 15:45:43 2026 by rpki-client