Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: d5RFp5Sofmcc1A93s6tC+c1kGrTaQrOEW8HG+boNkjo=
Subject key identifier: 75:28:41:8A:1D:2A:52:6E:3B:38:96:35:7C:29:57:C3:5C:6D:ED:93
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 019CAC0F90091F0E33C9F916FBBC45BB1C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 056F
Signing time: Mon 02 Mar 2026 01:00:26 +0000
Manifest this update: Mon 02 Mar 2026 01:00:26 +0000
Manifest next update: Tue 03 Mar 2026 01:00:26 +0000
Files and hashes: 1: GHSDF2JPEye0O4AWUxBCYSEkaAI.roa (hash: 0lOTIXpj+IiF+Cvw2ZPIma45JyDvj6gDTakt2B0h2bc=)
2: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: gNtpGVT+U/bZFkhZMYPWotvz5edmAsyJ4VonAZ/8eWg=)
3: zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa (hash: 3m9rp/jqInhSmfaVC+tbC+fcAxs/SBMNeqBaNmCor5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:90:09:1f:0e:33:c9:f9:16:fb:bc:45:bb:1c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Mar 2 01:00:26 2026 GMT
Not After : Mar 3 01:00:26 2026 GMT
Subject: CN=7528418a1d2a526e3b3896357c2957c35c6ded93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:62:00:4b:71:3a:f1:2b:7e:a0:75:3b:12:
2d:dd:db:19:be:d7:ed:69:ca:62:07:45:ce:d5:cb:
c4:d0:b9:10:d9:95:b7:37:dc:58:76:52:03:b0:c2:
67:63:4d:d2:4a:a9:35:9c:6d:0a:e1:60:f6:c5:e3:
f3:d9:c2:c5:22:8a:70:56:da:0b:a9:fb:73:c1:74:
60:d0:91:22:66:42:88:0a:bd:25:8d:23:45:51:70:
8a:71:68:10:ff:2a:93:0d:ea:7f:d5:51:bf:9c:1e:
09:cf:58:76:a7:c8:16:19:1e:88:8c:0f:5d:d4:52:
96:9b:47:99:46:b9:03:55:47:58:63:da:33:1e:8a:
22:40:30:c8:21:ac:3c:69:13:ee:87:a4:10:89:f5:
a8:90:34:9f:db:cd:2d:9f:1c:6c:70:a3:35:13:b1:
a8:fb:98:7e:87:5e:cf:2c:ed:43:06:8c:e4:62:87:
63:c7:93:1e:b4:db:cd:02:10:66:2b:ab:6e:fa:67:
9c:25:3a:5f:66:a6:70:ce:94:1a:68:7e:97:37:3d:
e4:14:ae:be:1d:22:d0:53:87:8e:b5:da:1c:c4:20:
4a:3a:8f:03:b6:88:60:76:a9:06:d4:3a:b0:14:0a:
61:7b:d3:c2:74:12:3e:14:df:69:a1:7c:af:8b:2c:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:28:41:8A:1D:2A:52:6E:3B:38:96:35:7C:29:57:C3:5C:6D:ED:93
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:54:9e:bd:0b:0a:de:ec:3b:8c:7c:58:63:c9:7d:e7:6d:7c:
5d:77:4b:43:48:e6:18:b9:81:d5:ff:08:e6:58:e8:f4:8a:56:
71:b7:bc:ff:a9:e2:0f:5b:82:c4:dd:51:27:2d:f5:bf:4d:ac:
c7:d5:8d:a9:15:7b:da:8c:16:50:bc:37:b4:c7:1f:a7:32:f7:
db:d6:60:b1:8e:21:01:20:35:71:25:ae:91:52:12:e3:c3:c9:
dc:b7:96:02:48:8b:64:a9:69:cc:53:91:5e:17:02:b7:72:45:
3b:aa:17:7b:d2:0b:21:92:f4:18:1a:66:11:4e:5c:19:bc:fd:
12:c6:f5:5f:03:a8:83:2c:26:07:9f:4b:d0:dc:f3:5f:77:a6:
2e:38:8f:8c:38:6b:4e:d3:94:36:0e:0f:f0:0d:e2:ed:ae:72:
15:b0:12:46:2d:83:8f:0b:52:d4:e1:45:e2:de:eb:5e:eb:cc:
f8:f1:8c:5e:5f:b4:12:92:54:78:d0:63:67:b1:b6:6c:5a:ce:
a3:74:60:d1:8a:5c:ee:f4:df:78:c9:92:00:61:e0:cb:5a:69:
96:ec:dd:dc:72:ee:df:3f:51:ce:fa:44:8e:96:84:af:f1:24:
85:4f:9d:18:e9:3f:da:c0:77:8a:cc:5a:8f:1e:15:d7:93:54:
da:4a:0b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:38 2026 by rpki-client