Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: usyv04J7j8A5oHcynWnrTmjJ8yAa3WoRlWn3d0DoKl0=
Subject key identifier: 08:CE:57:7F:DF:38:FA:9B:D4:4E:E0:96:59:39:7B:C3:19:95:51:7D
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 019F935B13AF386D2192E4A6FEDBF4B6A480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 0DD6
Signing time: Fri 24 Jul 2026 09:00:47 +0000
Manifest this update: Fri 24 Jul 2026 09:00:47 +0000
Manifest next update: Sat 25 Jul 2026 09:00:47 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: JNwJk3jHCxRf6wn/kT/DRCsuBXjw2KW4G0YNQh0lZ5A=)
2: I5ZIgX6iDK3oX7v-xFIQ7pdLpMo.roa (hash: 6PLpfxFxy8Nk7yedlc7CM9dTIiIgGRRx4WDgW5TY2yA=)
3: bs3te7njxydTnYWSP4ChGEGcJkQ.roa (hash: XPxWLnbyz8Llb8yCU48yi3z2ezc69lq+HL61zB6vbh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:13:af:38:6d:21:92:e4:a6:fe:db:f4:b6:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Jul 24 09:00:47 2026 GMT
Not After : Jul 25 09:00:47 2026 GMT
Subject: CN=08ce577fdf38fa9bd44ee09659397bc31995517d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:b6:d7:6f:3e:30:a1:af:67:1c:10:5b:fa:
6b:fb:b6:15:df:a1:3e:86:40:de:03:43:9a:34:c9:
a8:80:a5:ec:53:98:1a:fa:be:2d:7b:44:48:de:8c:
e3:af:fa:bb:24:7b:47:7f:df:d5:b2:bf:b5:8d:ad:
fa:5c:fc:8d:41:1d:16:3a:a5:85:d1:fa:eb:e7:ce:
1d:34:bf:22:d0:14:e6:63:58:d9:43:95:e1:3d:9c:
56:4e:bb:cc:ee:bd:66:0a:5c:94:9e:2a:17:cb:9d:
ed:78:40:44:3b:0e:9f:6a:b7:67:37:79:1c:f2:e8:
2d:65:7e:f7:f3:76:8d:07:3c:2c:e4:e9:5f:0d:b0:
af:a7:8d:fb:04:9b:c9:70:23:5f:d6:81:d0:a7:22:
f8:97:d2:4d:ae:79:66:1d:d6:af:97:01:4f:56:60:
f1:0c:82:97:1c:23:d0:6f:1b:84:cf:e4:e5:0a:fc:
9e:90:51:ab:c0:26:49:38:6e:e0:56:de:f5:0b:b8:
c4:14:50:1a:2d:04:38:85:da:cf:1c:a9:6c:27:a5:
a8:fd:14:85:1c:c0:15:c8:ab:a6:e3:9c:97:7a:4b:
f4:6f:d0:06:e4:a4:aa:ba:82:d9:ef:e6:3d:a3:c9:
31:b2:bf:04:2f:10:3e:bc:ee:7d:13:a1:0f:da:61:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CE:57:7F:DF:38:FA:9B:D4:4E:E0:96:59:39:7B:C3:19:95:51:7D
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:98:b1:27:cd:f0:e1:d4:74:8d:f9:ae:b9:e3:63:19:87:ee:
dd:73:ae:ce:57:b2:af:4e:c1:0b:1a:78:9d:d9:af:00:0a:27:
48:d2:a4:77:79:df:15:f6:a2:35:aa:ce:9e:f0:fd:6c:3c:06:
e4:cc:12:af:43:ec:ed:f3:62:7d:f5:d1:36:a6:bc:09:bc:7d:
f0:3b:cf:01:9b:98:5b:c8:30:ac:32:c9:65:1f:79:89:a3:0f:
58:d7:57:81:e5:43:82:0c:cd:32:69:83:88:b0:e0:78:16:fa:
ec:a8:82:1b:cb:1d:ac:81:ba:51:08:17:6c:7c:36:da:27:92:
90:12:f0:d9:9f:ba:ef:09:72:ee:32:18:91:1e:a2:cf:48:36:
7c:ba:4f:c4:fd:86:f6:db:d6:4c:b8:06:a8:d9:95:f4:e3:e4:
d4:42:08:64:38:c3:b1:36:e5:d7:d9:e0:d3:ec:f3:fe:00:97:
ec:9a:b3:9c:e2:e2:4e:58:3e:fc:a9:c2:a0:5f:45:ef:ef:53:
ce:bb:30:4f:fc:98:da:67:28:05:1a:e2:d4:8d:4f:ee:1f:2b:
eb:50:e9:98:3f:e0:4c:a6:4b:3a:84:50:07:34:6b:36:e9:2d:
18:9a:05:c3:d6:f1:94:f6:3e:d7:96:8f:da:bb:04:d7:08:b8:
65:ad:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:08 2026 by rpki-client