Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: Du9/gFD2cmxvLiNlz9KOSVIpDz/dLBZwWOTOtqWj5hA=
Subject key identifier: 49:DD:83:4D:0D:C8:11:0F:D7:D8:FA:1C:AD:15:DF:03:FC:E7:60:F3
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 019F91A374A3EAD9ABE88D1D43953B76110A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 06EF
Signing time: Fri 24 Jul 2026 01:00:36 +0000
Manifest this update: Fri 24 Jul 2026 01:00:36 +0000
Manifest next update: Sat 25 Jul 2026 01:00:36 +0000
Files and hashes: 1: GHSDF2JPEye0O4AWUxBCYSEkaAI.roa (hash: 0lOTIXpj+IiF+Cvw2ZPIma45JyDvj6gDTakt2B0h2bc=)
2: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: QGX2gyoCJZOuZ9UiqczWwiQiIhRqrEZfHeSF6zJABfs=)
3: zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa (hash: 3m9rp/jqInhSmfaVC+tbC+fcAxs/SBMNeqBaNmCor5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:74:a3:ea:d9:ab:e8:8d:1d:43:95:3b:76:11:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Jul 24 01:00:36 2026 GMT
Not After : Jul 25 01:00:36 2026 GMT
Subject: CN=49dd834d0dc8110fd7d8fa1cad15df03fce760f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f2:1b:e6:4d:fe:38:c1:5f:4c:9a:0c:1d:89:
7a:ad:2f:7f:90:56:7e:99:7c:e2:01:f1:0c:17:2e:
5c:95:2d:bb:4d:b3:62:3c:ad:a9:13:6d:c2:be:78:
89:93:a3:75:cb:ef:79:37:41:49:7a:93:33:ea:d2:
d9:2a:57:4a:65:53:22:b0:30:f8:e7:28:37:bd:42:
84:4f:52:e8:84:7a:4c:57:6e:13:00:e6:13:95:f8:
69:ba:56:02:86:a9:4a:41:a9:1e:6d:bb:f1:9e:55:
28:83:9c:66:35:85:0a:a2:67:48:ab:f1:b8:5b:98:
fe:73:6c:f4:02:54:da:bc:6d:e3:d9:0e:1a:3d:93:
75:f0:0f:e8:ee:ad:96:e5:09:84:54:50:e6:3f:f4:
7c:0a:b3:36:5d:40:e9:8e:8d:8e:1f:5d:40:68:21:
1b:ba:e6:56:a6:1e:9a:e9:9b:9e:59:a3:c8:57:fd:
e1:af:96:a7:e2:86:eb:fe:15:d8:08:ff:b9:5c:a0:
36:69:62:7a:76:07:85:4a:55:a2:d9:e6:d7:92:8a:
f3:22:8b:b1:a5:43:13:92:4b:2d:8b:79:02:99:26:
c6:7e:72:c3:95:9a:a9:aa:fc:d1:1a:0d:06:a2:90:
a1:4e:05:18:39:70:02:6f:9a:7a:16:ae:70:a0:03:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:83:4D:0D:C8:11:0F:D7:D8:FA:1C:AD:15:DF:03:FC:E7:60:F3
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c8:ca:df:82:9b:64:25:f1:a4:94:24:40:15:55:75:d4:0d:
c8:ff:b2:ab:5f:bd:e1:cc:de:25:40:44:36:41:c0:57:d5:22:
90:4f:fd:12:32:0c:4f:d8:f8:53:e3:e5:5d:ff:ad:59:cc:82:
c9:7c:51:b9:e4:73:dc:cd:bf:91:6a:0f:0b:d0:56:ef:e9:58:
d5:a9:b9:aa:a4:f5:1a:72:5c:a5:8f:5f:f9:25:0c:a0:1c:22:
ae:50:17:f1:40:20:85:30:07:63:6f:9d:33:f4:77:f9:2c:7f:
b9:be:0b:cf:4c:92:0e:8b:20:02:1c:ca:68:2b:73:6a:2b:6d:
22:0a:ae:07:87:07:f8:f7:de:33:76:f8:30:44:5c:8d:22:2a:
ad:eb:ff:0a:f0:91:94:9f:be:c9:0f:42:d9:e6:5b:d6:c9:af:
f5:3c:11:da:bf:52:a0:dc:fe:e7:91:eb:39:8a:4f:4f:7f:9f:
b9:16:07:5e:66:0c:6f:84:94:3a:a1:34:fd:34:ed:18:55:07:
d1:78:f8:68:75:82:3f:63:f6:a5:b1:2c:8a:e5:1f:ee:67:ee:
f3:cb:58:eb:20:04:97:30:d1:9a:07:b4:38:52:87:d2:7c:43:
a5:e7:11:ed:eb:d0:45:77:eb:be:8c:80:09:f7:40:5f:0a:fc:
5a:07:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:54 2026 by rpki-client