Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: mMxAmNSJTXKP/F4iKtEnMcc3iGw0+vm6rDE5KOmA1Rw=
Subject key identifier: D6:1D:C8:9F:78:BA:BC:0B:F1:54:F0:70:F6:33:12:6C:D4:BF:E2:F1
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 019D99997CEC2AB64D0E7768181D9A6B10E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 05EA
Signing time: Fri 17 Apr 2026 04:01:06 +0000
Manifest this update: Fri 17 Apr 2026 04:01:06 +0000
Manifest next update: Sat 18 Apr 2026 04:01:06 +0000
Files and hashes: 1: GHSDF2JPEye0O4AWUxBCYSEkaAI.roa (hash: 0lOTIXpj+IiF+Cvw2ZPIma45JyDvj6gDTakt2B0h2bc=)
2: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: ViDuXcGmRvY6ImZB9lDflx/+HJrRUUJ0hm3xsqQnJuE=)
3: zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa (hash: 3m9rp/jqInhSmfaVC+tbC+fcAxs/SBMNeqBaNmCor5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7c:ec:2a:b6:4d:0e:77:68:18:1d:9a:6b:10:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Apr 17 04:01:06 2026 GMT
Not After : Apr 18 04:01:06 2026 GMT
Subject: CN=d61dc89f78babc0bf154f070f633126cd4bfe2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:8f:53:f2:86:01:2e:ac:bd:57:6a:6a:08:
f7:91:9a:b2:97:d9:8c:2f:9e:58:55:25:5e:2b:10:
41:47:ea:ac:3c:9f:e4:e9:4d:49:87:62:46:97:72:
a6:23:f0:3f:07:ef:5d:8f:c3:b4:8e:63:35:29:2c:
c0:0d:86:e2:08:af:d0:dd:c5:cd:c0:64:8f:3f:6d:
ef:dd:e0:97:6a:53:30:f5:00:a8:b9:d8:b5:7d:a5:
ca:7a:71:e0:08:0d:38:79:48:9c:85:f1:c2:3a:3d:
2f:00:a3:cf:06:70:1e:e0:58:0e:b5:eb:a8:63:f6:
5a:43:aa:99:ab:ce:c0:f4:f7:c5:96:98:4a:5f:93:
c2:36:47:35:92:f5:3b:98:a1:4a:a7:9c:6c:a4:de:
06:38:4f:46:de:e1:27:8c:55:57:fc:8c:56:9d:4d:
8d:ec:7a:5d:3c:28:c6:6b:7f:42:2b:3d:a1:93:66:
b2:f3:af:50:06:46:a3:67:c5:7f:c8:5d:51:41:e1:
ba:96:c5:da:a2:cc:a0:e3:b0:6d:55:a6:88:45:6a:
d3:65:87:ae:2e:05:e6:32:24:e7:22:90:dd:46:f8:
28:fe:53:21:46:ac:3e:ec:62:bc:22:be:18:54:21:
17:63:e7:4c:77:b9:c3:1a:9f:b2:50:4d:4c:39:60:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:C8:9F:78:BA:BC:0B:F1:54:F0:70:F6:33:12:6C:D4:BF:E2:F1
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2a:29:29:76:6e:f0:66:cd:55:b6:d4:70:c2:f5:3f:51:72:
e2:bd:93:89:ec:9f:2e:ee:4e:c2:43:86:ca:cf:13:b8:1b:3f:
3f:b0:3e:44:37:bb:fe:eb:e5:a9:bb:e6:27:10:ef:59:62:b6:
35:68:32:6c:fc:53:77:5f:74:39:34:41:db:e1:40:19:02:26:
bf:2f:0e:1c:54:7a:ee:a1:7e:d2:2a:13:38:ff:a0:dd:c8:7b:
60:ed:28:42:ff:81:ff:c4:58:52:5b:2b:e4:c1:5d:28:53:56:
0e:be:57:90:4a:10:6c:e1:2a:b2:91:bb:31:56:03:03:fa:2e:
6b:33:47:34:bc:13:f4:a3:81:e9:c6:e0:50:74:40:c5:5a:80:
af:80:e9:8c:60:3b:f8:1c:5c:12:25:36:da:ce:99:38:17:81:
3d:6f:27:4f:8d:db:54:18:86:ad:91:c5:7f:2b:a2:9b:d9:58:
a1:ca:03:df:ea:bc:07:3d:26:7c:b7:2a:96:1b:a4:66:ae:bb:
5d:23:96:7b:a8:8a:d0:0b:f9:7a:0b:b8:19:65:73:8e:8a:c6:
78:a8:f3:91:55:28:7f:b5:74:9f:26:4f:61:58:02:7c:8f:f2:
88:25:24:52:41:83:56:92:72:a3:1c:e6:fd:96:00:61:5f:b2:
7c:f3:18:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:57 2026 by rpki-client