Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: UGnxItyWHICk+dunSmrUv24MKhmJwyUnBNSAgpd2OiQ=
Subject key identifier: 44:76:AD:A6:9D:92:56:73:DA:12:8D:A6:6B:11:12:D5:04:91:F0:20
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 019EC148AAE0780EA8F681E42C6920D13649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 0AEF
Signing time: Sat 13 Jun 2026 14:00:25 +0000
Manifest this update: Sat 13 Jun 2026 14:00:25 +0000
Manifest next update: Sun 14 Jun 2026 14:00:25 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: thEEQIMY/czLrRAn2pcAB8Hy+0rniEsL2Mfa8Tp2tX8=)
2: oeqcCmqzmosVxM-WY8lmXD_44Ic.roa (hash: QSB9wBcelhQw6T6s+EAUaG07z6Fs95UlwbhmHAqSneQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:aa:e0:78:0e:a8:f6:81:e4:2c:69:20:d1:36:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Jun 13 14:00:25 2026 GMT
Not After : Jun 14 14:00:25 2026 GMT
Subject: CN=4476ada69d925673da128da66b1112d50491f020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:6b:a5:d3:77:02:36:c7:bc:ce:f4:0c:ab:
05:7f:18:81:ca:3e:9d:0f:d9:56:0c:8a:ff:e7:d0:
12:58:50:30:56:6c:0a:fd:bd:ba:14:47:2d:c2:74:
d8:f2:a8:0d:a1:52:a0:f6:c0:08:d1:d1:e5:6f:26:
d4:77:df:a7:93:70:ae:9e:e6:d3:fc:5d:5c:c2:7b:
1a:7f:a4:43:d9:9e:b2:05:05:3e:c4:9d:b3:0b:27:
20:62:97:76:23:cb:31:41:46:2b:82:9b:ff:24:2b:
46:8a:54:b7:f1:41:d3:d6:9e:88:d8:8c:29:13:e0:
1d:5f:8e:da:82:6e:05:75:70:ad:83:c3:05:5d:de:
a4:82:88:5b:3f:55:c2:90:e0:dd:60:a6:07:fb:6e:
8a:ec:a7:5a:b3:8a:6c:c0:5c:88:c8:8f:5b:96:5f:
08:f3:4f:6c:87:c7:c2:c9:de:d4:3c:c9:56:f3:70:
88:1c:5c:d2:ff:7b:7e:2f:1a:41:ed:1d:14:e7:3b:
3c:98:27:ef:e5:20:31:c7:7b:3a:cf:8f:c1:e4:c5:
30:0e:dd:ab:cd:f1:08:b3:39:95:0c:1f:78:eb:b7:
17:a5:1f:8e:a6:e4:cb:0c:66:ce:1a:35:93:13:fb:
bf:6a:ed:24:0c:0e:1a:bb:ff:44:e3:32:b0:8a:01:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:76:AD:A6:9D:92:56:73:DA:12:8D:A6:6B:11:12:D5:04:91:F0:20
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8e:2f:ad:4d:c4:ed:4f:04:8a:83:55:ce:ed:63:ac:d5:36:
e2:74:ec:98:be:00:8c:36:70:ba:9b:3f:9e:65:fb:ce:ae:5b:
0c:69:97:55:09:8e:3d:4c:24:05:9a:57:51:d8:d4:88:27:47:
e3:3b:44:35:9a:45:3b:d3:e0:57:06:15:49:5e:01:03:f5:1f:
6b:a3:82:fb:cd:63:55:5f:fa:ef:be:f4:46:41:3b:64:5a:bf:
b2:e9:09:85:60:9a:73:e5:36:1c:a6:2f:e3:2f:db:27:5a:d8:
c8:d0:ec:77:51:b0:87:b9:60:ba:51:b1:d2:78:f2:df:20:96:
36:6c:98:93:f2:68:72:4c:0d:06:83:52:9e:c7:fb:c5:74:be:
1b:51:8e:14:13:d3:f9:ae:37:69:fb:19:7d:94:39:bf:be:07:
06:cd:79:f9:97:f4:ce:c2:96:a8:f2:16:86:3c:ad:a8:bf:49:
a7:0c:ce:c5:2e:d9:99:fd:0c:49:3a:59:dd:35:3f:c2:a8:a0:
a9:c9:81:dc:f8:a4:e4:48:eb:a9:f6:8e:c2:bd:d0:20:4b:b0:
8b:c1:95:3e:c8:a2:e1:eb:5b:c8:c6:81:fa:7d:cc:96:a5:90:
21:2d:03:7f:09:0d:61:eb:15:7e:34:5c:05:e6:08:66:64:79:
ef:c2:98:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:07 2026 by rpki-client