
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier: KXTOpu2/IRs28QLAbxdpo2CkaRqugpkoEZbVTDt7sKw=
Subject key identifier: 07:4D:8C:CF:10:8A:3C:C6:37:FB:EF:D2:ED:81:9A:59:A0:30:7B:9F
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial: 019F9580A3ADAFE6D70FD6B960E4A58F7137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 19:01:03 +0000
Manifest this update: Fri 24 Jul 2026 19:01:03 +0000
Manifest next update: Sat 25 Jul 2026 19:01:03 +0000
Files and hashes: 1: 4yhn0zab6G9Xm_NjzDhDVFNViNU.roa (hash: A7LqIa0Mp3Sp/NDA4NIu51kIjL901Apj0xVFgoij29k=)
2: 7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa (hash: x7mGZCpmu0SwOVi3OquDRZc+flnwWQDFf3B9ZxRJHaY=)
3: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: OrGGEzaAMT2SsLO2FyDEX8j21q3ntr3L39y4F3iwIT8=)
4: r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa (hash: BZ2IDfhsgXSEeuZ1ehS1OEbZfErOlb6+IBt9JMlf/C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:a3:ad:af:e6:d7:0f:d6:b9:60:e4:a5:8f:71:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Validity
Not Before: Jul 24 19:01:03 2026 GMT
Not After : Jul 25 19:01:03 2026 GMT
Subject: CN=074d8ccf108a3cc637fbefd2ed819a59a0307b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:55:61:64:8d:2b:a1:fe:56:bc:34:e6:c5:b1:
04:3e:b2:43:c1:b5:c5:d0:d8:cc:c8:40:7d:b1:32:
d5:07:29:ad:4f:35:50:dd:b2:d6:c5:09:b9:02:f1:
ec:79:70:13:66:28:4d:3d:8b:23:0f:f7:d5:5c:9f:
66:b9:9d:fa:aa:c5:43:f7:33:3a:2a:e4:36:bf:53:
5c:7b:a7:8c:5e:6a:43:2d:38:13:d0:50:c5:9a:67:
f0:37:3b:6d:93:b4:01:99:7d:87:a9:91:4c:51:ff:
34:17:3d:07:12:ae:6d:43:eb:a8:56:96:51:5e:c9:
8c:37:c2:dd:da:e1:f4:ac:bd:36:26:68:04:43:f5:
e9:ea:b7:33:ba:6c:d1:01:66:eb:03:94:7c:0a:68:
d0:50:b8:38:1e:9e:f8:f9:5f:fa:e3:98:26:2a:9b:
c8:47:dd:88:72:a3:a9:a2:85:38:4e:38:6b:9b:92:
f4:d5:c6:2b:20:7d:9d:05:39:b4:de:63:cf:9f:0e:
0b:e5:26:11:16:46:c4:2b:02:4f:a3:ca:8f:73:a3:
ca:0a:0a:6b:0e:1b:ec:53:9f:e8:ce:a2:df:ba:e4:
a2:13:ca:5b:d8:c9:59:c4:28:2c:7b:41:da:59:13:
a6:45:4b:62:2a:29:de:c1:96:ca:4e:47:27:47:85:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:8C:CF:10:8A:3C:C6:37:FB:EF:D2:ED:81:9A:59:A0:30:7B:9F
X509v3 Authority Key Identifier:
keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e2:f0:0a:76:a6:05:ee:02:96:92:5e:40:fb:62:36:e8:db:
0d:1f:1a:0d:df:05:4d:c9:8c:2d:29:37:9a:7c:e9:32:02:2f:
d2:c0:8c:99:a0:96:32:cd:8e:a8:b5:69:de:83:76:85:19:ac:
51:9c:50:5d:13:21:1f:ab:a8:e6:a5:47:b4:20:91:8a:4d:e1:
c5:a2:4a:3e:65:b5:cf:2c:73:f8:35:4c:c9:80:40:c4:65:f3:
77:ad:55:71:84:8a:fc:87:94:f1:ee:b1:50:c5:c4:48:f9:c1:
0f:11:c3:8d:9c:c8:2c:c5:31:07:60:d8:c5:ff:75:3b:09:d8:
cf:3c:70:c9:42:15:24:2a:64:0f:11:6c:3c:5c:a0:3f:e9:96:
02:af:78:17:e7:2b:4b:af:fd:0a:11:3c:b6:9f:ab:3c:c7:72:
95:55:bc:31:cb:2a:c0:eb:49:d6:48:84:c7:67:2d:e3:5d:83:
3f:bb:19:b4:9c:fd:22:db:2c:5f:86:b8:cf:a4:31:38:c7:ae:
b8:bd:14:12:84:dd:54:08:b3:97:1f:38:c4:6b:5a:1f:72:ff:
2f:2f:e3:c6:dd:99:fd:6d:e5:e7:13:0f:84:b4:90:11:bd:4b:
c6:f7:56:e8:a0:51:fd:cb:07:74:1c:a0:69:38:17:8f:cc:da:
fb:8b:a3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:14:12 2026 by rpki-client