Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: Uhr+nYb+zM5XjD6KdqW48xRqHMvYS98UnuBVasRU1F0=
Subject key identifier: 2A:00:8B:E8:FF:16:B7:B5:F2:E2:D0:87:53:56:E9:D5:68:CD:7B:71
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019EC22449F63C0631454D97A938DBDEDEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0D18
Signing time: Sat 13 Jun 2026 18:00:18 +0000
Manifest this update: Sat 13 Jun 2026 18:00:18 +0000
Manifest next update: Sun 14 Jun 2026 18:00:18 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: tqpinn2Xn3K0B1nC8nbT/rmTuXKrfXH76fxd9Ei3zHw=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:49:f6:3c:06:31:45:4d:97:a9:38:db:de:de:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Jun 13 18:00:18 2026 GMT
Not After : Jun 14 18:00:18 2026 GMT
Subject: CN=2a008be8ff16b7b5f2e2d0875356e9d568cd7b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:99:06:8e:82:98:4a:f3:42:c2:1f:5b:2c:
b8:94:b4:85:b9:15:de:33:7b:94:57:1a:59:89:fb:
3e:db:56:80:27:c8:3d:46:cf:60:4b:99:5d:b5:ea:
59:bf:43:df:ae:93:9f:a5:3b:37:fb:a6:70:e1:49:
71:17:08:3a:9c:3f:55:f8:40:d2:cf:a3:08:64:72:
28:5f:54:c5:f3:ca:67:13:31:e2:6a:17:d1:30:f1:
1d:3c:b8:54:2d:40:3b:cb:35:6d:38:2a:93:b9:85:
71:58:61:3a:ec:f9:51:d2:3d:27:e9:29:d3:bb:cc:
7c:3f:33:01:7a:df:c1:9d:6a:53:d6:c4:c3:c6:36:
7a:1a:af:63:3f:55:9a:59:fa:57:e1:83:e0:2d:67:
01:92:1a:cb:25:02:fa:66:29:18:47:49:6e:32:95:
b8:63:63:48:b2:52:b5:ca:08:a9:1c:8d:38:68:6a:
b7:9c:32:ca:ac:db:79:d3:27:a8:60:e8:79:19:37:
c4:38:10:23:49:42:11:fe:f9:e8:69:fa:1f:4e:5a:
64:82:90:f7:52:bc:ba:a8:e5:49:61:93:02:91:5b:
07:eb:b4:8a:4d:9a:cf:27:aa:35:bc:8d:54:34:68:
11:db:c2:eb:6d:47:d4:0a:d5:f8:10:31:75:e2:41:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:00:8B:E8:FF:16:B7:B5:F2:E2:D0:87:53:56:E9:D5:68:CD:7B:71
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c7:19:4e:5e:7d:55:7c:f2:dd:81:07:d3:d9:a2:1b:bf:9b:
8c:01:1d:42:7b:42:07:c4:ff:03:b2:c9:71:74:ac:a1:6d:32:
48:d0:c3:e2:f1:0f:4d:0c:26:d1:f6:f7:75:0b:2f:2e:e8:da:
bb:25:12:66:44:57:16:2b:3e:a9:d1:42:96:5e:60:73:11:fd:
66:c8:00:0f:c6:39:b5:fa:f9:60:a7:66:71:83:aa:e5:0d:63:
31:ce:12:ca:38:52:94:33:31:e5:a9:64:3c:24:d3:68:80:e0:
6e:cc:4e:d8:2f:d4:78:83:9c:50:24:75:f3:e3:cd:55:73:4a:
b9:e7:e3:c6:ff:66:e4:e4:89:82:9a:5f:19:04:c2:7d:d4:b2:
0d:6b:9e:9c:73:de:a3:9d:52:57:83:56:46:79:c6:f8:8f:ce:
8f:b7:31:b3:5c:65:df:b1:16:17:0a:8c:8a:75:fe:b0:22:b9:
76:84:2e:53:39:33:ef:28:54:71:1d:32:ae:48:40:d6:61:15:
fe:a7:bd:25:4d:6c:74:1e:e0:c5:82:96:a8:98:6f:59:26:96:
9b:af:15:10:a3:94:7b:c9:f5:3a:b9:92:3d:b8:6d:11:0f:a8:
e6:0f:b5:35:88:b3:49:83:d9:eb:c6:01:81:0d:33:72:d3:10:
b6:bd:d3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:03:08 2026 by rpki-client