Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json)
Hash identifier: CLtqmJq3Jk+aLsGZB790U3uXpfsDgSFb63d1e/eBuvI=
Subject key identifier: AA:45:5F:61:5F:5D:1A:9A:52:FC:4C:55:76:81:06:35:A7:43:F8:31
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial: 019F935B8CAAF809D5DE0D8C9AD84A800F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
Manifest number: 0D3B
Signing time: Fri 24 Jul 2026 09:01:18 +0000
Manifest this update: Fri 24 Jul 2026 09:01:18 +0000
Manifest next update: Sat 25 Jul 2026 09:01:18 +0000
Files and hashes: 1: IVL7dLrg6wGDU1LsfYsBBP5fLww.roa (hash: nXXz2gE0BqsxA3+AlASgnT6agymsn4mqf9G776nMdI8=)
2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: UDPsD0sU2NJUpXztMmNThlF7JRfzK3jTcxcpggiFk7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:8c:aa:f8:09:d5:de:0d:8c:9a:d8:4a:80:0f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Validity
Not Before: Jul 24 09:01:18 2026 GMT
Not After : Jul 25 09:01:18 2026 GMT
Subject: CN=aa455f615f5d1a9a52fc4c5576810635a743f831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:68:af:65:a6:5c:45:6a:00:1c:e3:63:6b:
ff:a6:84:4f:e2:e9:6e:6c:d0:ff:8d:27:1b:c9:9e:
62:66:b8:a4:a5:12:a5:96:b0:92:9d:46:fe:f4:44:
ed:1c:99:56:16:e9:1a:89:6b:61:f6:49:96:85:20:
c7:f5:3a:37:d5:a9:e9:5e:56:78:a4:af:92:74:47:
f8:18:12:40:79:c9:79:12:ee:e2:a5:60:b2:76:3a:
33:3f:c8:81:07:72:18:00:ac:9b:22:3b:a5:47:b0:
38:e4:63:d9:9e:ae:39:a5:d6:3b:82:c6:ef:dd:69:
84:44:f2:b5:9b:68:1e:ef:e8:ca:9b:30:96:e8:f0:
87:fd:a1:5c:a0:16:58:ca:79:d0:0b:fe:78:51:5a:
cc:ce:02:66:d7:88:af:83:19:18:e5:d6:42:63:ec:
6a:1b:09:3e:55:06:11:f1:6c:ee:86:40:9f:27:91:
dc:19:b7:1a:58:24:ea:bf:e1:da:b7:aa:2a:d8:95:
6b:63:34:ed:47:46:8c:82:b8:06:72:f9:b8:ec:ce:
94:c4:f3:40:d6:c5:59:90:f1:73:3f:c9:02:65:c8:
48:3f:bf:73:e1:9f:36:b8:48:5d:17:20:9e:2d:59:
88:c8:57:60:12:c2:51:1c:2e:1c:11:bc:57:0f:60:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:45:5F:61:5F:5D:1A:9A:52:FC:4C:55:76:81:06:35:A7:43:F8:31
X509v3 Authority Key Identifier:
keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cc:c8:57:90:3c:36:ab:e8:92:65:aa:73:18:bf:e8:3f:2e:
16:25:76:eb:bd:cc:fe:1f:0e:17:2d:e2:d6:1f:42:d2:22:dd:
95:91:13:05:6e:da:00:2a:53:46:b8:1d:64:54:78:0b:3a:85:
85:ec:4d:b5:f3:8c:7a:a0:17:c2:94:c1:bb:5c:ed:fa:43:41:
2b:3c:10:a0:e8:17:bb:4d:fa:2d:a1:5a:07:40:f7:66:b6:3b:
2d:2b:08:72:09:a8:35:65:af:4e:ca:96:d9:04:61:0f:72:a4:
75:e6:e5:af:3d:de:5e:b2:b6:68:dc:d1:0f:42:17:a0:8b:ba:
33:42:c6:d5:5c:a6:c9:96:ee:75:78:a8:bd:91:d7:f2:36:e9:
11:ca:9e:05:7a:55:de:2a:f3:e1:2f:56:a8:9c:4d:34:ca:55:
94:b6:29:9a:14:65:8d:b1:8e:89:4d:c6:b7:49:92:22:7b:70:
1d:c1:23:66:8d:30:f5:d3:ca:7f:67:16:49:e9:e5:97:35:8a:
91:58:1b:78:a3:9a:24:b0:5e:c5:cb:1a:b1:39:9e:e9:94:98:
72:5a:fc:94:52:b7:90:ec:2e:eb:38:22:d8:d2:da:2d:c9:79:
ce:7d:26:8e:db:b4:35:1d:ce:17:43:d2:d2:4b:b1:cd:87:0d:
f5:34:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:46:58 2026 by rpki-client