
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: 3pmP6U6iap7u9ErU4+LcpjYQouWEAxBqfdEOa8G7mXE=
Subject key identifier: 52:B2:B6:F3:B0:4D:06:BC:40:BF:77:33:8B:33:83:38:68:56:4B:ED
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 019F93241BEB4A9A518561D3A7973DD1F266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 08:00:44 +0000
Manifest this update: Fri 24 Jul 2026 08:00:44 +0000
Manifest next update: Sat 25 Jul 2026 08:00:44 +0000
Files and hashes: 1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: g88/rqhADxUUZUUW+WIfACzKH3Eznl90WCYbLeMU3rU=)
3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:1b:eb:4a:9a:51:85:61:d3:a7:97:3d:d1:f2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Jul 24 08:00:44 2026 GMT
Not After : Jul 25 08:00:44 2026 GMT
Subject: CN=52b2b6f3b04d06bc40bf77338b33833868564bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:de:10:d6:3e:95:85:a0:74:8c:cf:42:3f:
47:94:5c:07:87:3c:de:09:5e:b7:2e:56:b4:63:d3:
4f:c9:5a:20:08:f0:5f:bb:a5:00:a5:1f:bb:e0:15:
bb:b8:58:c7:39:1b:0f:f6:59:27:34:11:2a:77:8c:
66:e0:f3:a5:53:f9:ca:87:24:29:fb:bb:e6:31:8c:
72:7b:a8:9c:f2:f0:8e:1a:19:5d:86:c6:ac:56:41:
76:a9:a7:a9:5b:a8:3e:83:3f:8a:9e:bc:00:9f:9e:
bb:ba:92:f3:36:ed:60:85:0c:ad:6b:8b:54:a4:5d:
27:8a:93:64:8a:61:9f:81:48:15:9f:3b:eb:ed:ec:
e6:bb:c8:d3:0e:46:19:9a:2a:f4:42:7b:79:82:c9:
7b:e6:a0:cd:0e:46:8d:69:15:52:23:57:55:6c:2b:
72:07:a9:98:d3:e1:c7:d7:0c:19:4a:a7:1b:35:bf:
e9:1e:6d:01:ad:07:01:ed:49:c0:c5:0f:80:2c:45:
3f:93:80:56:65:df:fc:a5:f1:72:17:32:c0:c4:69:
b9:0e:f7:f5:64:a3:be:e4:43:de:16:e8:02:56:b4:
a3:65:21:df:3d:d9:ce:7f:fa:71:49:a6:fb:25:cd:
33:5d:5e:97:5c:1c:5f:61:bf:1c:34:66:e8:cf:1e:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B2:B6:F3:B0:4D:06:BC:40:BF:77:33:8B:33:83:38:68:56:4B:ED
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:08:55:c7:ee:a7:8d:8b:79:da:21:28:1c:15:1f:d2:ff:15:
79:74:56:df:9f:9c:77:b0:de:b9:74:ca:8c:79:27:2d:16:70:
2f:9f:1c:eb:5e:67:e0:2a:8a:3f:39:70:f5:8b:cd:bf:cc:79:
69:3e:76:98:ea:4f:2d:2a:15:a0:37:5b:a0:6a:c6:fd:9e:2a:
71:aa:78:c2:51:67:87:de:fc:72:96:32:23:09:3d:62:ae:12:
e4:3d:f4:84:2f:ca:32:08:96:5f:8d:ee:a8:bc:c8:b1:d1:8c:
cc:b0:9a:6c:df:90:d2:b4:84:2e:1e:f4:24:d6:f9:73:16:d1:
b2:17:34:45:c7:e3:e2:7a:59:9a:62:e6:9b:62:4d:1f:f6:98:
64:63:5c:78:bf:91:cd:34:c7:3a:e1:44:6d:2d:e6:cf:5c:43:
99:66:21:a9:ef:45:79:0f:bb:54:1a:b0:f0:1c:91:c4:78:20:
6c:1f:ff:45:5e:1c:01:42:2f:cf:9c:04:8a:d9:98:a3:4c:9c:
45:1c:05:5f:23:86:52:43:73:db:d4:db:90:c7:29:c1:7f:8a:
6f:12:00:03:45:b5:76:c7:d2:f3:40:94:3b:5f:04:56:e8:8c:
fd:58:21:48:f1:dd:93:6c:96:c8:e9:a3:59:2c:0b:d6:1a:2b:
a3:b8:11:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:07 2026 by rpki-client