Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: 9E9IwQ8paB5uHdvN4R4/xeYtUThvu9cdoZjhbDOs0+o=
Subject key identifier: ED:DD:84:74:CF:78:BE:9D:72:3F:9E:8E:D9:00:B2:AC:0C:81:3C:44
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 019EC1495D33B28DE5E18FE29F01F1A95A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 14:01:11 +0000
Manifest this update: Sat 13 Jun 2026 14:01:11 +0000
Manifest next update: Sun 14 Jun 2026 14:01:11 +0000
Files and hashes: 1: 1LWZZOwIVksOEqA3t1p1E5yKrbk.roa (hash: OwPK45NthsXIz7j/9BbdI2UVojWHpISnd2scPcpKEVU=)
2: BU1_bDFU6vflOkzUwIXSHb0FY3g.roa (hash: Cc5Z9uPct4eSTXCrQaUv8nKSh9r+kgrw5uVAV3eQfow=)
3: RR77_TZWFm2zN09tkZTb-aJWQ-g.roa (hash: cAzRaMhGElLRCS7w5moSCJqvr37/rS0oJQ36ENwyvTc=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: EQea0jicI1PcPLb9SbpZt4ZSpuatjThj5kU6J/GCGB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:5d:33:b2:8d:e5:e1:8f:e2:9f:01:f1:a9:5a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Jun 13 14:01:11 2026 GMT
Not After : Jun 14 14:01:11 2026 GMT
Subject: CN=eddd8474cf78be9d723f9e8ed900b2ac0c813c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:59:09:67:c9:33:95:28:3c:64:81:17:2d:
bc:c5:ee:f7:a3:a0:8f:f6:f8:31:93:c1:08:ac:5a:
6e:e0:f7:10:93:12:40:f8:4d:d7:2a:91:00:bc:77:
15:4f:7f:a0:57:c8:67:8f:82:49:13:d9:c6:9b:5a:
5f:64:e9:2f:0f:26:50:14:79:d3:93:87:74:07:75:
4b:b8:22:3c:bf:06:2e:36:1c:45:c2:15:2e:66:b1:
e2:a3:2d:20:d6:56:fe:5f:20:b2:8e:2a:fc:78:55:
8a:bc:49:dc:6e:63:f2:d9:82:ce:b6:b3:a9:76:f5:
db:2b:e9:5a:43:b8:b4:97:c9:8f:cf:1c:9e:e8:db:
4d:0f:69:e8:18:66:37:a1:a5:29:7c:81:fa:03:82:
9d:fd:88:a9:cb:28:c3:b6:72:69:4a:d3:4c:ab:d3:
69:dd:66:d3:0d:9c:29:21:da:29:60:6c:19:1e:45:
c0:61:e1:98:20:ee:e3:ec:e5:53:49:18:91:d2:f4:
21:76:b7:92:16:a6:d2:7d:4a:81:e0:76:5e:e5:e1:
5e:c7:52:94:0d:ef:3b:e4:9b:2c:08:c3:18:03:97:
24:6e:07:d3:9c:f4:e1:97:63:18:62:37:9b:13:4f:
5a:9a:48:36:1d:e1:c9:b8:a5:ac:95:10:e9:ee:52:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:84:74:CF:78:BE:9D:72:3F:9E:8E:D9:00:B2:AC:0C:81:3C:44
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:91:76:d3:20:68:47:50:73:8c:20:1c:f8:8b:10:6b:64:50:
27:5e:99:fd:31:08:31:38:02:67:36:21:51:25:cb:9d:19:3e:
4c:d1:c0:cc:e7:d7:97:32:17:dc:04:11:9f:81:f4:3b:a1:f4:
3b:3c:10:bc:95:33:1b:23:78:c7:7c:38:f4:26:19:a7:36:87:
77:a7:22:c8:22:9e:38:85:a9:46:26:48:a2:77:bc:d3:2e:77:
8d:64:3e:1a:ad:11:15:8f:a6:c0:5f:5c:b6:7f:9e:75:73:3c:
55:73:a5:bc:6b:a6:f7:3e:33:28:b0:1b:13:d8:ce:90:bf:ed:
95:70:6f:d7:5d:ad:a4:06:fa:46:ee:dc:49:82:03:d5:1b:e7:
35:cd:10:00:0d:78:bd:ca:7e:0f:47:fd:08:11:f6:74:12:6d:
ff:10:98:d5:8b:55:a9:6d:cb:ed:ec:57:1b:1a:94:82:11:47:
62:53:bc:36:53:65:3c:9b:a0:ad:ad:d6:6f:77:cd:14:24:00:
29:0f:b7:15:6c:6b:b1:5f:12:aa:83:35:c4:70:45:5a:8a:75:
40:c5:75:d1:e8:02:9b:9b:d2:f2:af:92:69:bc:70:fd:59:6d:
66:bd:a1:4d:7f:b1:35:2f:66:ef:b4:de:f9:42:3a:c2:6d:96:
27:b7:5d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:35 2026 by rpki-client