Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: zuLOYdfMdYvrnircT8/0rvkEbrUXrpeaf44DtCVk17I=
Subject key identifier: F6:E1:74:3E:F1:A8:40:42:1E:CB:C8:66:82:5B:49:97:6E:B9:4B:BF
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 019EBFC7FB0783FAE038F2B68B658555ECDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 037B
Signing time: Sat 13 Jun 2026 07:00:14 +0000
Manifest this update: Sat 13 Jun 2026 07:00:14 +0000
Manifest next update: Sun 14 Jun 2026 07:00:14 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: ee19iEI7xE76uLOsoeX8HWlaL3Y3MzXeN3JDoYUCTXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c7:fb:07:83:fa:e0:38:f2:b6:8b:65:85:55:ec:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Jun 13 07:00:14 2026 GMT
Not After : Jun 14 07:00:14 2026 GMT
Subject: CN=f6e1743ef1a840421ecbc866825b49976eb94bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:f1:19:9c:8f:ea:1c:1e:78:09:e3:a8:b2:
89:b5:de:9e:72:0c:42:b0:b2:5a:de:76:c2:e3:5e:
71:12:6d:8b:b6:5b:1d:ab:95:e0:99:cb:d7:ab:9d:
cb:1d:4e:c8:c7:96:58:2f:e3:cc:4d:9a:d0:12:db:
76:de:26:aa:ff:48:71:67:6a:f9:88:e2:1c:5e:a2:
92:ad:fa:ca:4e:35:c5:67:96:8f:ea:35:b4:3e:58:
e0:b3:75:ae:63:e8:a6:bf:ed:19:99:b0:89:16:eb:
2a:ce:b2:07:af:f7:92:07:d7:88:ac:07:39:63:41:
5f:d6:54:02:21:d2:1e:1a:dc:91:b5:ac:0a:4a:ab:
18:8d:87:25:ad:08:3b:07:fb:01:e7:fd:10:d9:f4:
14:32:eb:97:61:81:31:e1:ce:4a:da:0f:20:2e:c2:
d4:32:52:5b:3d:63:25:a5:2d:11:55:de:a4:73:86:
cc:af:a2:37:4e:f5:1b:36:b3:e6:3d:60:f0:a3:fa:
88:60:cc:21:36:b8:3a:4c:b4:dd:00:2d:95:f0:47:
b5:66:36:58:45:45:c4:8b:f9:6c:51:c9:fd:c1:47:
ec:0e:ce:d6:19:37:8f:db:6f:10:02:38:67:84:7a:
b2:27:75:e1:9b:78:96:94:60:6d:29:8d:f6:e2:ac:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E1:74:3E:F1:A8:40:42:1E:CB:C8:66:82:5B:49:97:6E:B9:4B:BF
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7e:de:ef:1a:66:af:2a:b4:a2:c1:7f:fb:27:78:10:16:25:
2d:a3:09:9f:d0:89:d2:54:8d:4a:6c:50:ef:a2:28:01:48:6c:
0c:a9:9b:1b:59:9b:eb:70:97:93:95:2d:fd:ca:7c:20:0e:66:
fc:b9:59:8d:ed:fb:02:30:ea:8d:43:9d:9d:0d:53:b9:05:9d:
9a:7a:4a:61:32:b0:2b:43:48:95:65:5d:7d:f2:fb:30:97:be:
5a:74:71:16:b5:27:c0:ef:60:d5:31:e0:c4:58:2c:e4:ed:11:
2f:95:6a:7d:cb:e6:89:95:eb:ff:7f:e0:f8:f5:83:91:9c:b6:
27:3e:9c:e3:ac:6f:51:d7:4c:be:bd:f3:c7:60:1c:0b:7e:43:
f3:5a:b0:50:66:0a:9d:14:6d:bf:30:3b:35:1e:8f:c6:40:2c:
55:07:bb:14:ec:8f:0b:ca:3f:01:59:cf:6d:72:e6:36:69:bc:
2a:e3:7b:7c:0c:fe:9b:08:dd:ad:4f:66:1c:f2:cc:9b:b8:7a:
c3:b9:a3:9a:8d:6b:aa:fe:fa:8d:7c:1a:0a:93:3e:41:ff:38:
1a:5f:fa:6c:85:2f:88:e9:dd:81:74:ce:0b:d8:91:34:e3:3a:
05:42:42:fa:44:80:46:00:38:cb:82:cd:68:55:93:f7:b5:c0:
04:21:6d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:00:39 2026 by rpki-client