Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier: 9gWe5kJeiUx5zn7lkLnj9jS1ay+xiQxP24NBD9veG/E=
Subject key identifier: 85:3E:6C:81:79:E5:8E:BA:FA:F4:26:8A:E2:EE:37:EC:C4:37:01:64
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 019EC0DAF79ED232E6F82B0B42411A807547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 12:00:36 +0000
Manifest this update: Sat 13 Jun 2026 12:00:36 +0000
Manifest next update: Sun 14 Jun 2026 12:00:36 +0000
Files and hashes: 1: 75SRw9aNyewbtPYAMH8et8hfSr4.roa (hash: Ef79opNAcjrl49Rm2x5OxhpX27NyaA68e2jdXKrtpHA=)
2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: FopR5xJZ3yrpbjkdH3DJbMKn6eLKUrFFAV2WtFOUvUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:f7:9e:d2:32:e6:f8:2b:0b:42:41:1a:80:75:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: Jun 13 12:00:36 2026 GMT
Not After : Jun 14 12:00:36 2026 GMT
Subject: CN=853e6c8179e58ebafaf4268ae2ee37ecc4370164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:4a:0d:5e:af:b6:2e:95:f4:7a:38:a5:96:
7a:ec:0c:5b:72:77:d7:59:9a:c6:cc:1d:74:db:f5:
f7:88:06:6c:54:17:b2:a3:37:81:a7:f8:96:ec:48:
1f:93:46:80:86:cf:59:96:88:cf:a5:41:67:42:42:
6e:7b:04:d1:69:f5:e7:34:a3:16:66:07:31:5b:57:
70:84:3c:af:c2:da:65:cc:ee:ca:f2:e6:61:fe:01:
c8:c5:20:d5:1b:e9:06:8d:c7:b5:36:33:10:db:ac:
db:e5:02:5a:30:6e:ef:c2:73:ab:6e:8b:22:60:69:
40:a8:c7:fd:36:ad:b6:b3:92:a1:9a:43:77:4a:8e:
95:86:6b:ec:a5:c5:75:d7:9a:98:90:e4:94:6c:ab:
f4:a1:a4:3b:33:a7:ed:48:3c:24:8d:e1:fc:93:ed:
db:7c:a9:d3:01:be:f1:85:78:98:04:0c:e2:30:06:
c0:61:73:18:d1:0f:7c:ec:5a:f6:4d:4a:f7:ef:38:
da:5c:cc:06:7e:82:e5:6a:ef:50:a3:90:90:78:88:
5e:6f:ee:24:a5:99:96:1e:ee:29:ca:46:ba:42:df:
fe:61:ae:69:0f:04:00:87:e0:35:33:2f:6e:fe:bc:
c7:12:7c:44:90:89:29:c3:6f:ff:5b:fa:47:a6:ed:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3E:6C:81:79:E5:8E:BA:FA:F4:26:8A:E2:EE:37:EC:C4:37:01:64
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0f:d0:a7:71:5f:38:01:8f:eb:87:18:01:d2:11:ce:28:59:
8d:f4:6f:46:b0:7a:2b:98:d5:fa:fe:4f:f3:fe:ee:a8:44:f8:
43:3e:9d:fb:74:4b:65:ca:19:68:2d:0f:aa:62:84:fc:ca:9e:
6d:aa:b0:c0:9b:26:0c:8c:10:54:a2:13:5a:fe:e8:31:ac:89:
dc:2c:12:7f:f1:3a:93:4d:e5:7e:ac:d8:40:cb:d6:63:76:8e:
34:c6:b1:69:05:eb:b7:ba:5f:40:67:e8:15:54:e6:aa:e6:ab:
3d:d3:c5:64:37:f3:54:0a:f2:41:0e:a7:dc:50:7b:49:6d:7f:
8a:e7:2f:0d:bf:ed:a7:c6:82:e2:ae:30:aa:e5:6a:25:cf:49:
33:d3:28:c8:c6:4d:ab:d5:d9:24:64:b8:cd:b9:25:1f:1e:90:
1d:2e:76:26:fd:58:9a:83:81:cc:a9:d9:5e:0a:b2:ac:b9:5b:
27:d2:26:6e:1b:ca:21:06:33:c0:63:37:34:1c:9f:34:9d:1b:
57:1e:24:c4:b6:fb:a8:31:4a:ef:d5:af:07:5e:c9:21:06:9b:
f6:b0:e4:a2:9c:64:d6:ac:2d:2e:8c:c9:e0:2e:a5:63:89:1c:
57:bb:06:7a:19:eb:83:0b:fe:10:2f:05:5e:1c:38:a8:e7:d0:
17:94:ef:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:05 2026 by rpki-client