Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: eedpseJdkmMX6JfTIogku9w1iV4xKGrmhXha6uu0Sps=
Subject key identifier: 18:EB:14:96:F1:17:02:19:CA:4F:31:BC:4D:59:BF:BD:E2:ED:BC:BA
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 019EC1492F592AA8685DCB55FE8155357E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: 04FB
Signing time: Sat 13 Jun 2026 14:00:59 +0000
Manifest this update: Sat 13 Jun 2026 14:00:59 +0000
Manifest next update: Sun 14 Jun 2026 14:00:59 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: fJkrtdt+UMkrpQLBkYGaz5VHqA6BpWnd0B3818Un6Ps=)
2: ps8p5Yxss_yS4gX9BmkqFddX40Q.roa (hash: nYuC3F6vhPJEBCLmfMqrTPfplxmjR9SoiZf1ZnDUcP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:2f:59:2a:a8:68:5d:cb:55:fe:81:55:35:7e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: Jun 13 14:00:59 2026 GMT
Not After : Jun 14 14:00:59 2026 GMT
Subject: CN=18eb1496f1170219ca4f31bc4d59bfbde2edbcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:08:1e:1a:da:b7:ac:a1:f8:db:9f:4f:c5:
3f:ca:f8:19:e0:37:0c:a0:eb:f8:bf:5c:e2:c8:e2:
de:47:9b:6c:2d:9c:32:55:ee:4b:95:b5:04:14:3c:
c1:64:7e:2a:4b:0f:55:c7:46:59:63:ec:2c:11:45:
8c:3c:8d:42:9d:ca:07:a5:ae:0c:9a:2b:a8:89:83:
3a:4a:42:10:5b:15:2a:20:13:b7:82:c9:cd:27:42:
55:8f:39:ff:48:39:8e:b6:68:e3:78:e5:1f:b7:fd:
83:31:57:66:68:1c:54:af:f6:88:4c:86:52:eb:b1:
09:f4:e7:06:a9:0b:f4:d7:93:bf:f6:8d:b2:e3:d5:
dc:cb:dd:0c:19:d5:4c:29:27:a4:69:bf:91:9f:7b:
7a:bf:de:df:64:74:04:43:d2:89:bd:68:8d:44:00:
73:87:80:b0:11:e2:2b:94:2a:0a:e2:54:bb:cb:cc:
67:e9:f2:6e:d6:e5:83:8b:4e:6d:ce:a2:47:d3:5d:
aa:30:49:fa:2e:b3:8e:b3:c0:1e:54:74:3f:30:4b:
fc:ad:d5:f3:49:23:a4:93:96:6f:96:63:06:5b:b2:
63:f0:01:90:51:4c:03:9d:d7:c4:ba:10:f7:94:58:
c5:de:de:77:ef:ab:99:66:58:5b:30:63:cc:5a:bc:
1a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EB:14:96:F1:17:02:19:CA:4F:31:BC:4D:59:BF:BD:E2:ED:BC:BA
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:e9:f1:f6:e6:4e:1d:a9:bf:0a:06:c9:c2:9e:ae:a5:e7:95:
0f:c4:d4:65:95:39:88:b0:b4:8e:bc:80:81:b5:9e:55:23:09:
04:5c:b4:ba:9d:f9:8b:3f:e6:2f:e2:6b:76:97:8c:78:51:09:
0d:97:a5:9e:1b:d6:2f:3e:8b:cc:a7:ec:08:59:f1:9f:c4:93:
8e:a4:87:74:41:5b:8c:58:41:bf:f8:c1:55:86:e7:19:83:0e:
3a:09:f7:ae:71:28:15:23:14:15:33:18:a1:ac:ce:f0:0c:bc:
82:a0:f4:5b:45:e9:a7:95:a4:20:3e:d6:96:81:03:56:a4:ca:
45:45:24:06:bb:43:9a:ee:85:da:26:6b:2d:5a:de:27:b4:3b:
7d:89:af:30:58:62:91:06:26:47:61:6e:43:34:3f:40:a7:7b:
05:e7:1a:72:14:09:ed:4a:28:71:b2:94:6e:09:73:5d:df:86:
0c:7c:a2:19:38:0c:d0:1f:13:8e:dd:8a:56:c1:86:fc:b5:ff:
2e:f2:5c:23:c7:7a:77:ba:41:ba:d2:2d:4a:1b:4e:78:85:b2:
c9:40:3c:03:4b:75:5d:53:54:c4:56:c9:24:85:7b:17:58:79:
82:06:1d:59:d8:43:f1:ff:c9:69:cc:f6:fe:9a:40:ac:df:0a:
67:54:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:50:31 2026 by rpki-client