Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: bWB8QfoIIhIv8ZN47GofYB6y3VvqZOZ2d6f7q1hFKuA=
Subject key identifier: 60:8A:64:0D:39:82:98:04:65:88:42:D5:05:63:92:5E:4A:3B:FE:C2
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 019EC0DB4E82031CDB64C6411D45DE9C9B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0D73
Signing time: Sat 13 Jun 2026 12:00:58 +0000
Manifest this update: Sat 13 Jun 2026 12:00:58 +0000
Manifest next update: Sun 14 Jun 2026 12:00:58 +0000
Files and hashes: 1: TtXo5-QRvXwKIgknKnZ4_4t2vL8.roa (hash: mXHeMxujxsacK8/QlflktbO+DxAXX0UCko2MtIwDM0I=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: WIYrhCUF3sb2RQXXsldTGTfUiYtJU/8d/3oL+HR2QDA=)
3: pbTK5peLIyvXvbiyDRGHdQgVdNA.asa (hash: Wtfdhvq2K7gS1UXNM4URBttcFhHoJO+q7bKyWG4w/Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:4e:82:03:1c:db:64:c6:41:1d:45:de:9c:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Jun 13 12:00:58 2026 GMT
Not After : Jun 14 12:00:58 2026 GMT
Subject: CN=608a640d39829804658842d50563925e4a3bfec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:1e:e3:03:5d:83:7a:dc:95:5a:3a:87:25:
73:8d:42:dc:79:d6:4c:77:8e:48:d6:b9:11:9b:ef:
86:65:58:67:55:5b:57:77:17:e7:2e:93:44:f1:db:
1a:36:f1:a0:d0:54:46:5c:08:6b:52:ec:01:2f:63:
af:33:e2:0e:64:cd:70:5c:24:56:6e:b3:2f:37:6d:
a3:d3:08:79:81:f0:1f:f6:b0:8b:38:aa:f7:65:92:
d5:2a:e3:c0:df:5f:02:9c:6d:6c:8e:19:5a:95:17:
62:e9:a8:15:68:0d:1f:50:a2:fb:83:c0:09:be:ab:
45:d8:e2:ba:4b:ff:69:99:61:dc:0f:3b:a0:7f:c7:
0f:39:71:11:57:6f:85:fe:25:5c:0d:a3:ef:45:38:
5a:b4:86:c3:cb:73:e9:4a:79:b7:d2:3d:9d:ad:bd:
8b:6d:e4:66:c3:0b:b4:51:72:7e:5a:40:e6:71:f1:
5c:6b:22:cf:73:6e:28:93:8c:df:4c:ae:03:66:70:
aa:e0:d5:a5:ca:6a:69:e8:25:31:79:e0:c0:bd:9e:
b8:40:00:e8:07:1c:a8:02:86:87:53:80:d3:93:66:
af:f0:14:ae:d6:d7:c7:6e:48:d3:7d:18:03:88:09:
72:0c:b2:44:ea:d7:88:f9:ea:e1:5b:dd:06:08:1e:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8A:64:0D:39:82:98:04:65:88:42:D5:05:63:92:5E:4A:3B:FE:C2
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5d:f2:76:30:60:7b:ff:ca:d3:28:02:33:88:f1:b4:77:1b:
c7:99:98:85:51:60:86:53:e1:28:65:02:91:d3:fa:57:64:b3:
a0:ca:12:2f:01:85:c3:f5:e8:d1:d8:a0:bc:96:ce:80:3d:8d:
36:8e:48:02:a6:3d:69:dc:cc:75:ad:61:39:31:e3:82:59:4f:
70:c3:be:73:53:d2:c1:76:f7:dd:3f:40:50:c9:53:bf:0a:a9:
4f:e6:04:fb:c4:1b:cc:3e:1d:63:68:50:41:e3:2a:5b:8b:6f:
27:af:c6:f6:dc:6d:08:cc:32:53:d4:4d:6f:77:66:70:5b:f7:
e5:46:86:d2:d3:38:6f:01:c7:ee:cd:15:76:d8:ef:f6:f4:91:
f8:7a:61:5d:98:db:69:45:6a:33:4c:54:94:68:c6:e2:2b:71:
df:e2:a1:ba:b4:0a:dc:6e:90:6a:af:0f:1d:70:f4:21:00:47:
8c:d8:8b:06:ee:a9:d0:75:ea:f1:be:e3:e0:8a:51:69:a9:42:
fa:58:89:86:6f:b2:aa:49:f5:96:cc:3c:5d:db:62:04:72:2b:
ca:65:26:23:e8:22:89:ba:e3:39:ef:b3:4d:2f:8e:9a:70:0e:
32:e4:12:1d:d1:9e:2a:59:19:8e:f3:db:4f:da:7e:c8:7c:73:
b2:b7:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:59:51 2026 by rpki-client