
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: 7dpx8d0cCB5Wnsl4T6o93rrZsrkTDMPiOUzKwCqlgRE=
Subject key identifier: 7C:58:FF:A8:28:82:54:2B:DC:CE:8E:D8:1F:E6:C4:75:D6:F4:76:CA
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 019F93C9785A106A11830669EACC016AB056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 0B5C
Signing time: Fri 24 Jul 2026 11:01:21 +0000
Manifest this update: Fri 24 Jul 2026 11:01:21 +0000
Manifest next update: Sat 25 Jul 2026 11:01:21 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: U43z6nLUnX64HmiRc/q+G34CtiSZVPcH8gf+6oBLta4=)
2: oeqcCmqzmosVxM-WY8lmXD_44Ic.roa (hash: QSB9wBcelhQw6T6s+EAUaG07z6Fs95UlwbhmHAqSneQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:78:5a:10:6a:11:83:06:69:ea:cc:01:6a:b0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Jul 24 11:01:21 2026 GMT
Not After : Jul 25 11:01:21 2026 GMT
Subject: CN=7c58ffa82882542bdcce8ed81fe6c475d6f476ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:d0:54:c8:03:ab:ee:d8:66:9b:aa:1d:12:
bb:11:0f:8c:41:31:df:22:35:9e:d8:66:a1:12:7d:
fd:65:97:0b:49:aa:5e:b8:cc:5f:cf:81:ab:94:af:
d9:12:c9:d9:af:be:f2:62:2c:07:11:55:0e:91:d4:
2f:cd:2a:06:e6:25:9f:6f:83:7b:af:c3:0d:9b:4f:
96:02:c1:4a:c1:d9:85:34:ce:67:76:3e:a9:09:23:
f7:28:31:eb:fb:55:ac:d3:36:50:d8:d9:99:60:3e:
34:55:b8:3e:f6:06:ed:e3:3c:79:e2:2b:94:d1:97:
df:93:60:58:b5:1a:1c:83:43:65:52:81:99:9d:e7:
ff:37:39:a9:29:ac:8e:1b:89:a3:9a:b7:eb:a0:f3:
36:f1:3e:d9:b6:33:9d:fc:c4:e3:24:3e:87:a3:80:
47:47:f8:3d:d9:cc:9b:6d:f9:7e:72:40:00:f3:d6:
a5:d2:e8:e3:b3:56:36:f4:08:f3:ee:5c:78:76:5d:
48:32:84:c8:b0:81:7b:04:5f:83:1c:39:7b:0d:81:
cf:36:3f:8c:be:76:76:39:0e:3e:e5:db:67:35:d6:
75:d0:a9:69:3f:de:50:d2:0e:8f:ed:3a:34:f9:60:
ea:ca:5a:10:41:dc:1c:3d:87:a5:1c:b9:9b:71:1c:
32:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:58:FF:A8:28:82:54:2B:DC:CE:8E:D8:1F:E6:C4:75:D6:F4:76:CA
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d3:bf:e1:2c:ff:de:be:36:53:d0:bc:bf:b6:a9:ec:9f:52:
09:23:45:4e:9e:9e:f6:c0:a8:6a:7f:fe:26:7d:94:ba:36:91:
66:13:e1:6e:46:13:66:5c:f9:f9:d7:91:23:ee:83:1b:c1:6b:
65:28:9f:94:9c:3a:bf:e1:de:d6:0b:64:ed:15:e9:c5:5b:f3:
9d:d1:15:38:8f:86:7d:15:f0:69:bc:b2:a4:8f:ad:38:93:b7:
49:48:04:c9:01:30:e6:ee:5b:3a:b2:48:0b:ce:bd:12:a1:ba:
76:06:5e:5b:a9:b3:96:94:2c:6f:51:77:df:7a:5f:3f:b7:56:
0e:22:34:26:b3:a1:9c:1c:49:f2:35:21:db:1c:35:bf:d4:05:
a9:eb:16:fd:85:12:d8:f3:f7:a8:11:b1:3d:5c:95:61:6f:db:
c6:18:f0:be:15:ec:37:eb:73:a0:8e:63:d5:32:72:29:aa:30:
00:23:f1:2f:66:37:74:be:dd:06:fc:9b:d9:53:e7:b3:51:3f:
1b:c5:27:4b:7e:e3:7c:69:92:35:b5:39:09:b4:69:5b:a5:41:
a6:31:b0:10:84:67:c4:c4:fc:97:8f:c6:4b:73:68:be:d1:d1:
06:b2:91:58:38:62:d7:7a:7a:e8:dd:9f:82:9f:a2:b3:19:7e:
52:1c:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:23 2026 by rpki-client