Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: gU1QZUC2tqS4vISRQlO1sEQoOpOnxvYclVKwq8oF6YM=
Subject key identifier: 9B:9B:A5:0D:7C:82:E9:28:1F:11:E0:57:53:3A:D8:91:1F:6A:8F:2F
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 019F9392834451E3D48A1348B068EA8EAC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 06F0
Signing time: Fri 24 Jul 2026 10:01:20 +0000
Manifest this update: Fri 24 Jul 2026 10:01:20 +0000
Manifest next update: Sat 25 Jul 2026 10:01:20 +0000
Files and hashes: 1: GHSDF2JPEye0O4AWUxBCYSEkaAI.roa (hash: 0lOTIXpj+IiF+Cvw2ZPIma45JyDvj6gDTakt2B0h2bc=)
2: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: e2AV/2p5wXks+FUL9wRvNP8f9XUnkNCDMMktJ5Siej8=)
3: zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa (hash: 3m9rp/jqInhSmfaVC+tbC+fcAxs/SBMNeqBaNmCor5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:83:44:51:e3:d4:8a:13:48:b0:68:ea:8e:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Jul 24 10:01:20 2026 GMT
Not After : Jul 25 10:01:20 2026 GMT
Subject: CN=9b9ba50d7c82e9281f11e057533ad8911f6a8f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:30:8f:56:80:c4:38:22:1b:34:b7:2b:02:
c0:ae:72:7d:1b:ec:3a:f0:7a:b3:9b:d1:80:de:bf:
27:b4:25:3f:0d:40:f3:f5:7b:4b:fe:cd:7e:34:17:
24:96:ad:e4:62:26:ad:af:c6:6d:85:3e:a1:02:b6:
94:78:b4:48:e4:6c:ae:c3:a3:6d:4f:d4:62:28:2a:
4b:5d:a1:1b:97:5d:bd:7b:fa:21:c6:e4:74:b8:a1:
28:02:cd:52:3a:1b:a9:fe:4d:d5:f0:9d:28:1b:4a:
a8:0a:64:c1:87:98:c6:a9:9f:2c:59:db:9b:d1:97:
b6:e0:c8:ec:62:57:30:93:bb:23:19:00:76:18:0d:
a9:97:3a:d4:fb:e5:4b:3d:fb:ad:da:4d:4c:1b:20:
40:05:8c:ec:3d:14:80:46:33:dc:d8:65:3a:18:86:
14:4b:01:05:8c:bd:31:73:12:aa:b6:2c:ad:2f:1d:
36:65:ca:7e:b1:14:f9:74:60:11:85:53:75:52:ff:
0e:95:67:5f:70:d3:ce:1c:bc:67:e0:b1:28:44:ab:
1b:02:2c:f3:2f:12:fc:b1:5c:e1:8b:10:6f:59:1a:
29:66:4b:7e:27:98:dc:1c:ab:2e:55:9e:71:57:77:
44:00:18:aa:fc:86:39:42:45:77:75:a8:c5:5b:37:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9B:A5:0D:7C:82:E9:28:1F:11:E0:57:53:3A:D8:91:1F:6A:8F:2F
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2a:bc:76:38:d3:2d:79:f2:16:0c:fb:ce:bd:96:49:8d:b4:
4b:12:60:cd:a4:50:40:d7:f4:d7:20:2a:9d:58:9b:5c:d5:21:
47:ba:8a:f7:9d:af:46:98:05:6a:b2:e1:28:c3:7f:36:ae:07:
c1:6c:69:37:0d:3c:45:ca:33:51:f8:6b:3c:cd:af:e7:7c:4a:
c0:79:1a:e7:c4:33:b5:b5:45:1c:79:2d:8b:1f:ae:42:e3:6e:
c4:e4:05:49:1a:e4:2d:86:33:3d:43:31:4b:ca:29:a7:06:fd:
e2:d5:bf:6c:a0:55:10:c7:4e:14:0d:78:03:46:49:8a:48:21:
f7:89:b6:dc:6b:11:2f:14:d3:4a:79:dd:2b:fe:11:5d:82:69:
95:ab:81:2a:4c:a5:55:64:6d:6a:19:5b:e4:f0:1e:54:3d:0f:
41:fc:48:5d:4f:5d:8c:fa:3a:d8:db:af:49:b6:81:46:a7:f3:
7b:0b:5d:80:1b:f9:d2:3c:55:d5:59:84:5a:0d:71:a3:22:00:
36:03:10:56:db:1f:88:25:82:6b:01:45:4a:80:33:14:e2:e5:
01:b4:85:d2:c8:97:fe:44:95:28:16:45:32:5d:dc:4d:40:26:
09:0a:48:b5:25:87:e7:6b:66:43:3b:f5:da:5e:02:80:6e:b2:
3d:94:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:20:08 2026 by rpki-client