Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: RybmsY6FEIdWPa4cCRW5lntEgxHjNlgqOFnZ13/A1zs=
Subject key identifier: 8E:2C:52:3A:BF:F9:68:8A:5B:24:81:DD:24:83:40:39:DE:52:C5:5A
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 019EE4B10E92FAD8CE1EEDF6C7D5D81EAE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0B52
Signing time: Sat 20 Jun 2026 11:01:09 +0000
Manifest this update: Sat 20 Jun 2026 11:01:09 +0000
Manifest next update: Sun 21 Jun 2026 11:01:09 +0000
Files and hashes: 1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: Jij88ehFip0aXxrIpZsc3X5SZNpQoM+5LiqBwlQOgqU=)
3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:b1:0e:92:fa:d8:ce:1e:ed:f6:c7:d5:d8:1e:ae:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Jun 20 11:01:09 2026 GMT
Not After : Jun 21 11:01:09 2026 GMT
Subject: CN=8e2c523abff9688a5b2481dd24834039de52c55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:6c:d7:24:96:5b:56:34:16:4f:e2:33:14:
5d:7c:9f:19:a6:d0:96:00:e1:e0:47:08:38:60:2f:
57:a3:18:13:13:6d:8d:18:78:40:ac:62:f0:bf:64:
29:d3:7e:97:12:35:9c:e6:c7:50:7e:85:ae:65:43:
d8:60:30:4e:da:20:fa:21:17:88:b9:a9:98:27:a2:
83:a3:0f:ae:59:fb:ed:6f:dc:0d:33:07:fc:88:7f:
26:75:3b:3c:fd:44:84:48:60:6b:ca:4c:70:bb:15:
7a:24:b9:5e:68:1f:aa:b6:01:e4:d8:90:47:e9:16:
bd:f9:7b:fb:23:76:2f:aa:97:56:fa:3f:4e:dd:ce:
3e:79:e4:e6:81:2c:f5:8e:26:a5:77:12:d7:65:15:
ba:1a:56:47:7d:66:a5:00:09:f0:42:2c:b4:4d:81:
6a:c5:bf:8b:a7:c4:68:e0:04:c2:54:5a:62:e8:7e:
24:3c:61:01:ba:f6:2e:46:22:6d:a2:ff:26:9e:e0:
2c:e8:cc:27:8f:63:16:57:cc:a8:18:08:0d:64:cd:
51:f5:78:2d:79:3c:a1:b2:01:30:d0:7d:ae:69:27:
e9:ae:8c:5d:e3:a8:6a:55:02:89:3a:b9:ac:c3:2f:
b2:dc:b3:22:1f:d3:aa:cf:b1:71:96:0b:80:fa:c7:
eb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2C:52:3A:BF:F9:68:8A:5B:24:81:DD:24:83:40:39:DE:52:C5:5A
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f9:55:45:02:69:51:b6:bd:6f:4e:8f:36:73:bc:b3:03:64:
fb:ad:fd:b4:6b:fa:bd:e4:fd:13:c9:67:40:94:04:41:ab:ec:
85:9b:09:f4:b0:36:33:43:14:0f:18:6c:4a:7a:5b:d9:44:66:
d1:e4:24:ad:9d:17:1d:70:f8:0b:bc:10:c0:e5:f8:71:fa:ae:
31:2d:35:b5:20:38:76:f3:0d:fd:df:3d:93:fc:3c:9c:71:33:
72:84:33:9b:3c:a6:4f:04:70:bf:58:4d:2e:6d:6b:32:a6:ab:
e0:22:32:ef:11:07:8c:13:43:af:31:4f:6b:56:d4:a5:fa:f6:
3d:83:b4:00:63:73:20:28:df:ca:c0:78:41:24:76:01:32:bd:
e2:4e:fd:90:df:10:f3:64:cc:b5:89:08:59:f7:0b:14:52:02:
7d:55:5b:9f:9a:c0:72:c3:52:26:85:6c:03:f5:35:54:d5:9d:
b2:7b:29:72:ea:43:a6:9c:20:f2:44:40:9e:7e:af:cd:e4:1a:
65:df:22:12:0d:5b:ea:03:10:0e:f9:13:70:f0:24:b9:08:52:
b4:5b:43:e9:59:ad:3c:f9:30:7c:8b:bc:c7:3e:b3:c8:be:5e:
28:3e:49:24:04:9f:e0:60:9e:43:bc:35:ad:3c:b0:e6:ef:57:
d5:92:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 13:13:08 2026 by rpki-client