
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: 1U1MWtdD4O/+IjyOF9ydzUD2nAWlrdIs/AofzqoJA0I=
Subject key identifier: 94:89:DF:24:DE:DF:95:64:D2:8C:ED:19:84:4A:54:B2:60:E7:FA:1E
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 019ED57529D56F772EAAD6233D6FCC5399FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 12:01:25 +0000
Manifest this update: Wed 17 Jun 2026 12:01:25 +0000
Manifest next update: Thu 18 Jun 2026 12:01:25 +0000
Files and hashes: 1: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: pbybaaVx2Sr1aXOxaA1s9FRrKpGpRY2csc9aDRD86Zw=)
2: NYfYWYZMa_439o1QRYF0WdRM5MM.roa (hash: 8UO+Z6kVQhD/teXdacx0W8x4zMZ5SdEkPaLtrfrmHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:75:29:d5:6f:77:2e:aa:d6:23:3d:6f:cc:53:99:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Jun 17 12:01:25 2026 GMT
Not After : Jun 18 12:01:25 2026 GMT
Subject: CN=9489df24dedf9564d28ced19844a54b260e7fa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:cd:f2:46:1b:ba:1b:0a:c5:d1:a5:f2:cb:
20:3f:a1:23:29:e8:c1:83:c5:e7:a0:b0:d2:e7:69:
ec:54:fb:32:bc:02:75:44:69:a8:4d:7a:de:d0:7c:
d0:a8:d7:65:05:f7:58:22:49:ff:61:09:df:99:49:
a2:fb:cf:4d:6e:c9:51:8f:85:26:8a:06:9f:de:ae:
dc:0c:69:36:01:15:21:35:55:9f:5f:a1:a9:d6:e9:
14:2c:69:c0:cc:41:74:6b:c5:60:d5:f1:84:5e:35:
74:1d:29:59:22:10:f9:e4:25:a0:11:39:d3:c6:9a:
ac:a3:cb:ed:a4:da:4c:01:ce:cd:18:30:c3:b1:d1:
95:92:88:10:37:4b:5c:91:2d:a7:ac:2f:a2:a0:0f:
59:13:8d:34:ce:a4:82:c4:23:19:b6:1f:a7:dd:3f:
d7:fe:37:5a:fc:bd:ec:44:3d:13:cd:cd:06:70:4d:
b0:7c:b5:04:c1:ce:62:44:b6:11:3d:6e:45:44:ae:
63:23:d3:93:66:23:dc:2e:02:4a:16:c2:80:b1:4f:
e8:f5:ba:96:f3:2e:dc:db:7e:63:c4:3d:6e:f9:21:
be:b2:4c:78:0b:40:42:fb:8b:1b:70:14:ac:08:ae:
fa:60:c9:3b:1e:13:c8:19:19:26:00:a0:b7:3a:96:
ea:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:89:DF:24:DE:DF:95:64:D2:8C:ED:19:84:4A:54:B2:60:E7:FA:1E
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ab:3e:68:5f:d0:ea:0f:0c:dd:f1:6d:52:f7:80:70:88:45:
2a:38:f4:ef:35:90:5b:d9:8c:7c:31:a2:73:3d:39:d2:29:0c:
4e:fe:68:80:46:bc:ef:d5:a6:c7:49:24:60:d5:73:09:9c:73:
d8:0f:ad:b3:51:a7:60:d0:47:4e:6c:f8:c4:ab:16:06:68:c3:
48:2d:22:56:8b:56:aa:a6:52:95:b4:d4:0c:9b:62:a1:cb:4a:
94:fb:10:56:f6:20:b9:a3:f1:ab:3c:6a:02:c8:9a:c6:b0:c5:
f5:a3:c7:86:8a:90:53:08:23:6b:ed:ef:7e:4d:40:4f:32:f8:
93:75:41:e9:1e:65:c7:b6:73:ff:1f:c8:5d:54:cf:6f:68:bc:
a2:65:48:1b:6c:d2:15:b3:78:b4:d4:10:0b:be:0d:27:61:35:
9e:18:1a:69:53:cf:6a:d6:87:dd:3c:0b:50:7a:48:5f:da:b5:
ab:51:88:1d:4c:9a:63:75:4c:0b:1a:c9:d8:88:52:7b:fb:c8:
6c:32:af:aa:b4:41:2e:63:fc:2c:84:44:34:ca:08:19:fd:43:
5f:c4:c3:cf:46:85:64:60:4a:85:46:92:dc:8e:bd:db:41:50:
f8:3b:c5:75:d2:a6:87:da:31:4a:03:34:4b:ed:c2:e4:da:01:
f3:b9:d4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:10:02 2026 by rpki-client