Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: 4DFtWx2RZyDyqf73q4IkQU5k4IxCXAEYnVhCoypFLRk=
Subject key identifier: 21:4C:3A:E0:6E:75:87:7E:B5:FF:48:5F:F0:02:10:F8:7B:8F:99:B4
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 019F9059DF3D8A2AB82638FE46DB41A02D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 03E7
Signing time: Thu 23 Jul 2026 19:00:36 +0000
Manifest this update: Thu 23 Jul 2026 19:00:36 +0000
Manifest next update: Fri 24 Jul 2026 19:00:36 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: 38V3W+93eQpW/iZBjtH4xBS0LNch5nIVntovZwH4bns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:df:3d:8a:2a:b8:26:38:fe:46:db:41:a0:2d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Jul 23 19:00:36 2026 GMT
Not After : Jul 24 19:00:36 2026 GMT
Subject: CN=214c3ae06e75877eb5ff485ff00210f87b8f99b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:14:95:fc:45:05:78:5a:34:16:60:f2:aa:54:
32:92:9d:ed:f0:ac:36:cd:16:ab:14:f7:cb:19:e7:
46:32:73:6b:32:2e:be:da:3d:e4:42:ee:55:d8:df:
ed:7c:39:9a:b8:c8:d8:71:45:fa:9b:8e:84:b7:16:
45:3b:46:6b:65:e4:62:21:ac:d9:1d:0f:0e:b6:05:
14:9d:07:93:49:1d:65:6f:d4:2f:ed:1c:c2:37:56:
59:e3:77:c5:77:99:90:bd:19:4a:61:94:c5:c7:bd:
08:e8:5d:19:1a:ef:5c:3c:5c:72:7d:7c:48:bf:13:
75:3c:71:41:37:6f:25:19:56:0e:b2:eb:2d:de:c0:
4b:d8:c0:b6:6b:3e:fa:f1:83:bd:e9:25:1a:9d:14:
40:3d:99:d1:49:4a:c5:54:f8:3c:d0:35:ce:04:d5:
d2:3a:8d:3e:42:17:e4:6d:3e:2e:aa:bf:ed:3f:61:
86:18:5a:54:85:b6:ad:7c:39:0e:37:95:e8:35:74:
60:ba:73:15:44:17:a0:61:a3:2b:48:9f:ac:4b:7e:
ca:e9:a8:56:01:e2:0c:94:79:81:6e:6d:76:51:b5:
0c:75:64:39:ef:5d:0a:f7:0c:f4:c9:4b:f8:b6:4e:
30:4a:36:a4:e9:69:c5:2c:d3:aa:d7:90:67:c8:ae:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:3A:E0:6E:75:87:7E:B5:FF:48:5F:F0:02:10:F8:7B:8F:99:B4
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e1:89:78:ab:97:30:aa:7f:cb:96:c6:c4:f1:81:15:e6:6e:
76:f7:d3:f7:44:cd:49:ae:93:e8:65:fe:ec:73:7f:09:fd:fd:
6c:75:db:b5:cd:49:1d:14:9e:e1:d5:97:35:ed:fe:ee:0b:08:
18:bf:2f:1e:c5:47:25:95:ed:2e:e8:75:f3:02:0b:86:bc:2c:
02:25:65:70:7d:c3:74:76:61:1c:44:24:70:84:74:d5:f8:6d:
88:b4:f6:31:e5:ee:30:de:d2:96:c7:ab:c2:73:9e:f9:03:cf:
cc:49:ba:d3:a1:d9:7b:82:9f:b4:30:62:2c:da:99:db:1a:3f:
f5:1a:1b:a7:dd:d5:ae:a4:10:1f:e8:05:7f:df:60:ed:51:ca:
0d:8b:e5:92:51:7e:dc:3b:ae:64:02:5c:b1:49:eb:18:8c:ef:
6e:a4:df:f4:c4:ea:bc:58:99:4c:64:43:b6:15:f7:9f:b4:86:
d9:4f:9f:ad:2b:32:fd:49:bd:f3:60:c2:da:79:ca:84:45:6b:
63:ed:ff:e6:1e:50:c4:4f:4d:65:9f:16:71:4f:4a:6e:e5:00:
0f:86:74:96:2a:0a:aa:5b:81:e2:fd:46:28:61:79:f8:ba:1d:
ec:6a:88:e5:f0:23:6d:c5:f7:3a:12:1c:e5:8c:e2:40:27:f8:
5a:a0:cc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:21 2026 by rpki-client