Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: Kh2wnQszafCanTQ2/xxStlXd5ODLIeHlccINV4eG5Ic=
Subject key identifier: 3B:C5:26:BA:B8:3F:EF:85:22:D5:CB:AE:B2:3E:A1:FB:F2:2C:66:09
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 019EC0DBC248885EF601CD6AA535763A6494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 12:01:27 +0000
Manifest this update: Sat 13 Jun 2026 12:01:27 +0000
Manifest next update: Sun 14 Jun 2026 12:01:27 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: COa/9EvqEI/WYrF+0fTiePs8AI+6mhCAPymtC6tL1sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:c2:48:88:5e:f6:01:cd:6a:a5:35:76:3a:64:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Jun 13 12:01:27 2026 GMT
Not After : Jun 14 12:01:27 2026 GMT
Subject: CN=3bc526bab83fef8522d5cbaeb23ea1fbf22c6609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:f2:ce:84:a2:7b:dc:52:cb:0a:7f:5d:ff:
7a:1c:c6:b9:4f:ee:d7:59:9a:cb:03:64:aa:aa:63:
34:96:0f:24:c8:3e:f3:f3:11:24:a6:3f:4c:e8:0b:
4a:61:63:c4:bc:57:f7:c5:11:cf:8c:fa:f9:99:3d:
1e:c7:07:d2:52:2a:06:ef:3b:fc:9f:c8:1d:80:35:
e9:fc:c1:0d:eb:7d:7f:de:3e:84:12:b6:1c:52:c3:
15:8d:50:87:65:58:95:5d:fe:11:08:a8:6a:3d:94:
32:72:af:5b:9d:07:78:f3:90:e0:02:51:21:43:4e:
ef:b2:d1:29:42:cc:98:74:b3:c9:c8:cc:6a:d9:6c:
ba:98:06:37:21:a2:f9:67:4b:0f:bc:96:f0:9a:28:
00:cd:09:81:40:ef:0a:96:97:9c:b7:2d:7e:20:88:
02:84:43:25:f0:a4:5e:43:45:ea:9a:28:ee:2c:d5:
d7:32:5d:97:95:6c:6d:ba:e2:46:af:4f:a5:29:a8:
1c:af:bd:bd:5b:f3:46:83:d6:4c:c2:5e:82:a5:06:
47:b7:60:3f:ce:85:97:c2:41:93:d1:e9:d7:8f:09:
a1:c6:4e:8a:5a:16:a1:1d:ed:4f:29:1f:81:f0:51:
2b:c3:55:9f:94:d7:70:f0:d8:05:b3:21:e6:3c:40:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C5:26:BA:B8:3F:EF:85:22:D5:CB:AE:B2:3E:A1:FB:F2:2C:66:09
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:62:98:5c:8a:a5:9b:3f:18:62:c8:ce:61:25:f3:3e:44:f4:
3e:6f:80:98:62:26:a3:ba:51:11:a1:62:f2:28:f1:50:c5:30:
a6:b1:98:9b:3e:49:aa:d3:ff:67:83:df:3a:4c:0a:99:03:52:
a1:40:25:2e:f3:7f:37:7c:f7:6b:56:c8:ba:d4:02:a0:0b:19:
10:c9:74:35:6a:f4:5d:f4:5f:db:3f:4a:a6:a4:3c:b3:5c:3c:
c6:43:e7:07:01:31:01:da:78:fd:ca:d1:c2:95:c7:10:c8:09:
16:93:41:12:21:29:f2:eb:92:18:98:75:00:19:8d:62:13:eb:
bf:d6:dc:eb:67:57:67:46:5d:eb:9a:f2:e9:5d:6e:d4:97:53:
b2:31:c6:df:39:71:48:15:51:b3:8b:72:1b:13:f8:ac:82:7c:
51:dc:a6:07:d5:a3:54:12:03:88:38:ad:88:4f:27:9e:c3:07:
e3:d4:97:b8:7d:56:08:2a:ce:26:59:b2:52:d2:6f:58:67:84:
51:af:1c:e3:c0:23:c1:4d:e7:a0:5c:f7:19:da:9b:92:8b:81:
ba:f7:bb:4c:ce:77:93:35:2b:77:5f:f2:44:75:23:74:15:8e:
da:52:1a:e2:bc:a3:f4:e8:31:98:d7:8d:b6:bc:d5:42:94:84:
f9:3f:4d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:05:46 2026 by rpki-client