Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
File: gP-4grVdAkWUCj414a3dU6esf-Y.mft (raw, json)
Hash identifier: gy50BTaWNGwSCJYKem2mROUEyZQi5jgA1we++0yTmB4=
Subject key identifier: 66:DB:94:F9:BC:A1:B7:51:2E:EF:0A:4C:03:CC:11:3C:1A:49:41:4E
Authority key identifier: 80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
Certificate issuer: /CN=80ffb882b55d0245940a3e35e1addd53a7ac7fe6
Certificate serial: 019EC17F9744E8F9C0E1B7385598DBB4AC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
Manifest number: 01AA
Signing time: Sat 13 Jun 2026 15:00:24 +0000
Manifest this update: Sat 13 Jun 2026 15:00:24 +0000
Manifest next update: Sun 14 Jun 2026 15:00:24 +0000
Files and hashes: 1: gP-4grVdAkWUCj414a3dU6esf-Y.crl (hash: lDT0LuaabalicCRXMHoc5vzSv8Hrt1U1mmGJeEQXXcI=)
2: ghkZqiRBYP7F8aWdqRde-YlWVwI.roa (hash: D1th9djUsHfufM7g4Iy1vOHC4rWVpb4G82R0TUpgdcQ=)
3: uwzrkDAt1bWbxPHQL77n6ueMwTQ.roa (hash: v6tCrn+4VuGO560AfCeDjuj3YGlPBrSypyg+OiqsxoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:97:44:e8:f9:c0:e1:b7:38:55:98:db:b4:ac:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffb882b55d0245940a3e35e1addd53a7ac7fe6
Validity
Not Before: Jun 13 15:00:24 2026 GMT
Not After : Jun 14 15:00:24 2026 GMT
Subject: CN=66db94f9bca1b7512eef0a4c03cc113c1a49414e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:9e:2a:f8:7e:77:54:b2:0e:81:39:bd:14:
e4:18:ae:87:7f:42:77:05:ac:ca:e5:a9:be:ad:2f:
3d:a8:f4:c6:82:b9:42:34:b4:f4:af:a9:7a:ca:d2:
42:34:4c:b1:3f:10:6d:dd:56:f0:54:a3:d7:a0:51:
22:43:2a:09:bb:ab:3a:35:ab:f5:52:47:fb:1e:f7:
97:71:cd:4c:36:fa:49:07:23:5d:d6:4e:ca:66:f9:
ee:86:80:34:f3:ef:f4:ac:f6:f9:45:43:55:c6:74:
11:98:b2:d0:1c:a1:06:81:6c:43:89:5e:de:3e:12:
21:b6:88:29:09:7d:10:20:b3:f7:eb:b9:64:ab:f4:
ec:13:cb:77:a7:a5:6d:d4:9c:97:db:a8:eb:65:d6:
5d:f6:55:25:69:86:3e:a2:ab:13:d6:2e:20:d6:d2:
94:6a:91:17:83:c1:14:d5:fc:b3:fa:db:98:6f:22:
ff:de:0d:8a:75:89:bb:10:fe:31:02:05:b9:54:21:
37:64:86:2e:10:10:3e:9c:5a:35:a8:1a:cb:6f:9d:
9d:40:c2:77:77:41:18:50:94:13:10:64:23:98:12:
b0:84:fe:bf:d5:27:53:a7:48:bb:25:3b:b5:1a:38:
85:e1:87:d0:c4:8d:26:c9:9a:32:02:34:c0:a3:09:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DB:94:F9:BC:A1:B7:51:2E:EF:0A:4C:03:CC:11:3C:1A:49:41:4E
X509v3 Authority Key Identifier:
keyid:80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c3:3d:a2:1b:ac:b2:e7:1c:a3:cc:d1:01:14:2e:30:c7:fa:
0f:e5:fd:0a:5f:6a:61:b6:47:6d:b4:4a:e1:cd:40:23:ca:27:
5b:5a:8a:9d:ea:3b:50:f0:e6:d5:39:c5:b6:dc:e5:d0:50:71:
67:a8:44:4c:cf:b3:36:da:9e:a3:53:4d:b8:d8:1e:18:27:f2:
0f:7b:f9:67:62:58:88:59:0b:a0:52:71:01:d7:26:bb:f6:ce:
16:71:26:1c:bf:7f:4a:5c:3f:1b:1f:70:95:e2:10:f6:a2:4d:
7b:98:2e:e2:e5:70:c3:95:a5:e6:ac:f1:44:2d:0b:27:c2:cf:
0c:05:87:f3:4b:53:09:a6:56:06:0e:b2:80:a5:4a:99:cc:28:
cc:f2:35:d4:25:e8:25:99:af:be:8f:92:86:3a:eb:64:cd:06:
bf:8c:ed:a3:0e:a3:ff:5e:bc:78:5a:38:67:c9:0d:0c:e9:4d:
40:bc:29:5e:53:3c:86:ce:41:be:b6:61:10:3f:11:47:19:f0:
6b:e3:45:af:2c:bf:e1:d9:af:48:68:e4:8f:92:2d:a4:3f:3e:
c5:e4:70:3d:2f:9b:3a:15:1c:d5:36:94:c0:bc:9b:88:a6:06:
74:76:3c:d8:c8:43:b0:d4:19:d6:1e:ca:7b:41:b1:c8:36:ce:
1f:a3:50:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:15:55 2026 by rpki-client