Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: OVlXZRhYLtRBAmMS4avbLmeMJIoGW4/wkoPX5kpknrQ=
Subject key identifier: 17:44:B0:33:DF:B7:62:1C:A0:E4:A0:06:F3:2F:0F:02:5E:A9:DB:E2
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 019F8F7F063781F0B0ED315FC793B1AEFD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0DDE
Signing time: Thu 23 Jul 2026 15:01:34 +0000
Manifest this update: Thu 23 Jul 2026 15:01:34 +0000
Manifest next update: Fri 24 Jul 2026 15:01:34 +0000
Files and hashes: 1: TtXo5-QRvXwKIgknKnZ4_4t2vL8.roa (hash: mXHeMxujxsacK8/QlflktbO+DxAXX0UCko2MtIwDM0I=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: aQRh7UqgEXrQEQHKM93RNNqnf0VgBKyAfppGTXb4pcw=)
3: pbTK5peLIyvXvbiyDRGHdQgVdNA.asa (hash: Wtfdhvq2K7gS1UXNM4URBttcFhHoJO+q7bKyWG4w/Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:06:37:81:f0:b0:ed:31:5f:c7:93:b1:ae:fd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Jul 23 15:01:34 2026 GMT
Not After : Jul 24 15:01:34 2026 GMT
Subject: CN=1744b033dfb7621ca0e4a006f32f0f025ea9dbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:1c:ca:fc:72:28:7d:76:c1:2b:09:a7:65:
2e:33:4f:4e:58:15:cc:0b:f7:c9:d1:95:87:a4:23:
ac:17:5c:81:dc:df:03:48:e2:24:12:ef:e5:fc:2d:
f9:c2:af:40:87:e2:88:91:ea:6d:6c:28:0b:60:6a:
06:83:74:16:4e:76:d5:c7:50:23:d1:2c:d2:b1:c8:
09:46:29:71:c8:a7:fa:41:7b:fb:0d:71:1c:62:a3:
90:29:85:b8:c2:a8:33:4f:80:cd:b6:36:70:0b:56:
b4:67:d0:96:ab:bc:03:e2:90:dd:31:9a:5b:bc:c2:
c3:e2:bf:59:93:d1:0b:e5:ba:7e:91:f3:f7:ca:77:
46:d8:1f:51:64:f4:d0:b1:65:03:09:c1:04:2d:99:
20:31:8d:ec:71:7d:5b:e2:9f:78:8d:c6:ad:4b:b4:
8d:32:4d:d7:60:8f:73:16:cf:b8:c3:ba:a4:f7:1d:
f2:9b:2d:e8:ab:7f:be:2e:46:6a:f9:71:38:64:49:
4b:0b:7e:1a:4b:55:7c:60:04:8c:a6:1c:24:53:67:
82:8d:84:b7:83:70:93:9c:05:00:0c:38:a0:8e:bb:
99:2a:29:54:96:6a:51:52:79:8f:1d:85:0a:f1:d2:
31:13:82:21:67:84:1f:6f:17:73:f2:07:d5:a1:79:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:44:B0:33:DF:B7:62:1C:A0:E4:A0:06:F3:2F:0F:02:5E:A9:DB:E2
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:64:db:bb:96:b6:f1:3d:ce:a8:79:2c:22:fd:5f:5f:8a:92:
32:8e:5b:d5:6e:a0:c1:97:f3:5c:28:41:98:dc:44:6e:50:21:
38:15:61:48:08:3f:07:2e:9d:f8:06:7b:7f:52:3d:fd:50:d4:
da:24:43:c2:23:0b:ad:fa:9b:a4:f0:8c:02:b2:da:46:95:36:
aa:83:7e:ed:69:5e:99:d7:7a:d9:72:7b:91:07:b7:27:04:47:
b2:3e:d5:8a:0c:5d:52:01:d7:f5:67:b0:d7:4e:b3:c1:45:41:
f1:d0:ac:23:09:9b:09:1f:a6:34:a2:d0:15:18:8d:69:35:d2:
6e:7b:e9:4e:6b:16:83:91:5e:04:ef:4f:40:fe:3b:b1:93:74:
df:7a:eb:8e:dd:1a:9a:28:5a:20:7b:d9:fd:dc:3f:ba:7e:96:
7f:42:da:a5:9a:67:81:a0:7c:88:92:86:c6:0c:b1:5a:6c:4a:
c9:6d:48:cb:46:12:82:d1:5c:66:07:98:2c:e3:b4:d4:82:fc:
c6:38:ea:c5:14:f6:3d:3c:8b:df:76:08:5f:29:a7:1c:75:7c:
fa:d8:93:18:fb:03:b8:09:19:99:4a:ab:f1:63:92:fa:30:a4:
69:9c:e6:0f:6e:f6:9d:2c:38:5c:2e:ac:03:cd:97:e0:9d:59:
7e:3c:47:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:40 2026 by rpki-client