Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
File: gP-4grVdAkWUCj414a3dU6esf-Y.mft (raw, json)
Hash identifier: cFYgOxOax+IEkYlqf2dpsOY3ll1jKcqC+unE7Usyxjk=
Subject key identifier: 57:0A:71:FA:DC:20:5B:03:19:12:0C:08:97:0B:C7:80:AE:B2:ED:28
Authority key identifier: 80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
Certificate issuer: /CN=80ffb882b55d0245940a3e35e1addd53a7ac7fe6
Certificate serial: 019EB7D78145566E873913BC8C25A8144060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
Manifest number: 01A5
Signing time: Thu 11 Jun 2026 18:00:14 +0000
Manifest this update: Thu 11 Jun 2026 18:00:14 +0000
Manifest next update: Fri 12 Jun 2026 18:00:14 +0000
Files and hashes: 1: gP-4grVdAkWUCj414a3dU6esf-Y.crl (hash: nohGm9a0arKDoiN6jQOfD6rcmnDFiXTOD2PMc7nNv0E=)
2: ghkZqiRBYP7F8aWdqRde-YlWVwI.roa (hash: D1th9djUsHfufM7g4Iy1vOHC4rWVpb4G82R0TUpgdcQ=)
3: uwzrkDAt1bWbxPHQL77n6ueMwTQ.roa (hash: v6tCrn+4VuGO560AfCeDjuj3YGlPBrSypyg+OiqsxoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:81:45:56:6e:87:39:13:bc:8c:25:a8:14:40:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffb882b55d0245940a3e35e1addd53a7ac7fe6
Validity
Not Before: Jun 11 18:00:14 2026 GMT
Not After : Jun 12 18:00:14 2026 GMT
Subject: CN=570a71fadc205b0319120c08970bc780aeb2ed28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:4d:ca:9b:16:5c:0c:c9:ed:8c:57:59:d3:
b2:c2:c6:ed:c8:a6:7c:20:40:ec:95:8c:fc:ff:27:
da:fc:1b:b3:24:4f:83:40:16:3b:0c:bf:0b:3f:fa:
7d:f2:4e:ec:56:a6:85:f4:1e:7e:c9:b1:b6:bf:0b:
20:8a:4d:1a:fa:f9:81:12:ce:b3:3e:db:df:6d:7f:
5b:43:a4:e9:d1:46:65:31:b8:33:e2:c0:c0:26:07:
8d:50:af:22:dc:6c:cb:8c:8e:1e:3b:f1:4b:e4:ab:
0c:b7:4e:00:a7:f7:81:10:4c:8b:96:dd:46:70:75:
97:d6:1a:b7:07:2e:96:ff:17:3e:b0:63:fe:12:68:
cb:e1:33:d9:d3:12:31:23:01:f0:10:02:77:67:0b:
8e:cf:fe:c5:39:a3:28:11:47:f4:b2:76:89:cc:23:
7a:db:90:18:37:d2:2b:9c:96:47:cf:a2:12:de:e7:
22:15:eb:7e:33:6e:39:76:69:5c:ec:af:23:5b:e3:
e0:8b:66:b6:49:68:1c:84:3e:b3:dd:33:22:e9:9a:
d1:51:00:be:b0:36:1b:00:1e:a6:82:f6:99:b7:71:
50:0c:7d:e8:e4:80:4c:dd:81:55:b4:dd:2f:dc:37:
05:aa:2e:81:e9:62:27:96:81:14:8b:9b:da:06:8b:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0A:71:FA:DC:20:5B:03:19:12:0C:08:97:0B:C7:80:AE:B2:ED:28
X509v3 Authority Key Identifier:
keyid:80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2a:b5:68:a1:aa:82:37:fd:16:58:42:bd:49:2e:7a:d4:73:
47:fc:fc:f2:ea:9a:af:2f:b2:b5:01:36:b2:fc:9f:18:45:79:
13:48:9e:ae:6e:c6:db:21:f7:a1:4e:19:e5:89:a8:d5:df:6b:
4a:02:fa:52:06:7f:85:90:50:dd:cb:d3:d2:8b:c7:f1:9f:8c:
18:1f:09:45:de:2e:03:92:8c:8e:5a:65:25:61:b4:2a:ba:0d:
5b:c3:d1:9b:53:e2:15:39:0f:14:3d:16:6f:0c:dc:5d:b0:90:
c8:0c:2e:8f:55:3d:a2:c0:11:ca:8a:d5:8f:3d:c7:dc:a6:29:
0b:ad:f5:74:94:3a:ca:4d:6f:77:25:96:fd:77:03:e7:ed:a9:
fe:50:84:b8:31:3e:ec:58:b1:1b:a4:5b:ac:57:db:d9:3f:f2:
35:f4:6e:c4:46:06:07:14:1f:a1:1d:93:29:b0:74:5f:e8:46:
72:ca:01:90:7a:6b:7a:1f:09:b2:48:48:93:0e:e7:ca:2e:88:
66:e6:c2:e6:bd:21:7a:41:40:c2:4b:aa:93:df:68:f5:12:90:
50:8c:c6:c8:a0:55:0f:cc:91:9a:fe:56:7d:76:e6:5f:6c:1a:
b7:2b:f2:79:f8:5e:02:44:10:8f:bf:81:f0:ee:d8:ff:c4:36:
e6:6a:95:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:08:51 2026 by rpki-client