Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: rQKocLiQXw/7PYp+582cLDsTn1OkwL8Pgo6qjUUDfIw=
Subject key identifier: BF:BC:CF:AC:66:D1:C6:AA:CC:1A:86:B1:8A:59:C7:E8:B7:AD:2A:6D
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 019EC36E493F14C8AE31A60DC7654D6E6963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 195F
Signing time: Sun 14 Jun 2026 00:00:45 +0000
Manifest this update: Sun 14 Jun 2026 00:00:45 +0000
Manifest next update: Mon 15 Jun 2026 00:00:45 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: vZGHB8tmW8e9W9Vi6+CR1HWszTiphPi7CiGAGWWM0wI=)
2: _LIMNGBB_bM1l_RNh7Jn1ke8Z1Q.roa (hash: Y1Vdc4Bk2253+dyiXjTYX2rbKWMSURyUVb6exyc6X4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:49:3f:14:c8:ae:31:a6:0d:c7:65:4d:6e:69:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Jun 14 00:00:45 2026 GMT
Not After : Jun 15 00:00:45 2026 GMT
Subject: CN=bfbccfac66d1c6aacc1a86b18a59c7e8b7ad2a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:92:0c:ab:cd:03:68:6b:3c:e2:85:ee:f3:
58:6e:62:02:18:d5:b6:81:12:ce:ab:64:71:7a:48:
61:a1:9e:23:c2:d5:57:47:06:a7:c1:27:8a:06:4f:
fe:19:15:39:7e:18:1e:df:a0:b4:72:bf:e4:00:98:
46:34:c1:6c:37:ed:b3:d4:e1:87:3b:71:37:d2:fb:
c5:61:f9:f0:dc:b5:2a:74:8b:ad:56:e7:6c:7d:e6:
12:31:1b:0e:93:27:f9:39:5e:ea:10:51:b5:cd:8b:
97:8d:5a:a6:a4:ee:e5:ce:37:e5:2c:bd:07:61:4d:
03:4b:ca:17:f4:16:f2:29:1a:a7:9b:8c:fb:89:93:
d0:73:8d:f0:b3:7f:8e:6c:db:8a:6c:de:5f:c2:0b:
45:0c:80:25:03:e4:09:76:d8:47:40:61:ff:5e:a7:
44:9d:92:35:56:74:de:91:53:1e:34:13:03:e5:5e:
c6:8d:99:00:f7:5c:91:4c:af:ad:a8:db:4f:c3:a4:
11:c6:4a:84:4b:2e:f8:29:5e:29:9c:45:bf:25:ed:
33:85:13:53:39:5b:e8:22:dc:86:8f:d3:3c:e2:a9:
93:94:a5:ed:72:59:90:61:03:14:18:33:6d:ab:db:
07:a9:6d:e2:c8:f1:d1:6c:74:0d:1f:0f:61:62:6d:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BC:CF:AC:66:D1:C6:AA:CC:1A:86:B1:8A:59:C7:E8:B7:AD:2A:6D
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8b:14:f9:e7:9a:cc:44:8d:c9:32:4e:84:59:f0:aa:dc:61:
c3:2e:fe:96:f6:af:75:fc:57:ea:25:af:51:7c:0d:9a:46:c4:
c6:c9:85:be:0a:ba:fa:f7:22:e8:e7:96:27:aa:4d:fe:ca:47:
71:64:71:f4:37:b8:96:78:ab:d9:2e:15:a6:de:ba:b7:33:03:
67:68:d4:e5:ba:8b:c1:d7:24:84:49:5d:68:17:d1:20:02:41:
67:f9:09:b6:93:09:36:78:ae:78:79:6f:20:a9:fa:68:12:bc:
f2:57:53:ab:3d:16:bf:fd:89:4d:c2:22:cd:b5:27:ef:36:02:
26:e5:c0:b1:a0:12:ac:9f:b3:4d:17:ab:2b:19:c0:3e:64:c9:
18:04:cf:35:dc:ad:f3:c2:c3:b8:77:77:39:cb:7d:1b:5d:a9:
d2:74:76:e1:83:4b:86:3b:17:e9:c6:46:4c:4f:4d:ed:58:ec:
66:ab:87:06:85:68:56:29:40:9e:23:ba:19:59:46:57:2c:2e:
9f:11:d0:43:4d:53:67:67:80:38:6d:81:ce:90:10:81:04:01:
0a:f5:f8:f5:ee:51:a0:31:57:a7:91:01:9f:9f:fa:f0:00:36:
47:a8:5c:93:be:9c:16:74:05:d5:4c:66:24:3c:08:29:e4:06:
7c:4c:d3:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Dbkk/FMiuMaYNx2VNbmljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMjliMmE0NWRlMDEzNmZlYWJiZmFlNGJhYTcwMTcyYWE4
NjYxOWIwHhcNMjYwNjE0MDAwMDQ1WhcNMjYwNjE1MDAwMDQ1WjAzMTEwLwYDVQQD
EyhiZmJjY2ZhYzY2ZDFjNmFhY2MxYTg2YjE4YTU5YzdlOGI3YWQyYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYmSDKvNA2hrPOKF7vNYbmICGNW2
gRLOq2RxekhhoZ4jwtVXRwanwSeKBk/+GRU5fhge36C0cr/kAJhGNMFsN+2z1OGH
O3E30vvFYfnw3LUqdIutVudsfeYSMRsOkyf5OV7qEFG1zYuXjVqmpO7lzjflLL0H
YU0DS8oX9BbyKRqnm4z7iZPQc43ws3+ObNuKbN5fwgtFDIAlA+QJdthHQGH/XqdE
nZI1VnTekVMeNBMD5V7GjZkA91yRTK+tqNtPw6QRxkqESy74KV4pnEW/Je0zhRNT
OVvoItyGj9M84qmTlKXtclmQYQMUGDNtq9sHqW3iyPHRbHQNHw9hYm3lYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+8z6xm0caqzBqGsYpZx+i3rSptMB8GA1UdIwQY
MBaAFBopsqRd4BNv6rv65LqnAXKqhmGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1Mzgt
YTk1MWYyMDBmNjUyLzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1MzgtYTk1MWYyMDBmNjUy
LzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIsU+eea
zESNyTJOhFnwqtxhwy7+lvavdfxX6iWvUXwNmkbExsmFvgq6+vci6OeWJ6pN/spH
cWRx9De4lnir2S4Vpt66tzMDZ2jU5bqLwdckhEldaBfRIAJBZ/kJtpMJNniueHlv
IKn6aBK88ldTqz0Wv/2JTcIizbUn7zYCJuXAsaASrJ+zTRerKxnAPmTJGATPNdyt
88LDuHd3Oct9G12p0nR24YNLhjsX6cZGTE9N7VjsZquHBoVoVilAniO6GVlGVywu
nxHQQ01TZ2eAOG2BzpAQgQQBCvX49e5RoDFXp5EBn5/68AA2R6hck76cFnQF1Uxm
JDwIKeQGfEzT2w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:20:40 2026 by rpki-client