Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: ZtyuFuiQJOHc1scNQBocT3IpqkGBvs7NasN9Kq4pv4Y=
Subject key identifier: 97:BC:1C:D9:49:43:B4:19:CB:3D:4A:20:5F:50:92:16:E9:68:EE:E3
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 019F9580A03BA5C12B5F3CEA81416941945A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 19:01:02 +0000
Manifest this update: Fri 24 Jul 2026 19:01:02 +0000
Manifest next update: Sat 25 Jul 2026 19:01:02 +0000
Files and hashes: 1: 5gSf1-VDKOYVBkqkgnQrEMypzTg.roa (hash: z6ZcdBsDa7Hg3rkYAPzvBooMd+rknZS/02yCZUcFlGI=)
2: CmZeg0QZClyASLrlfEFcbEqzniE.roa (hash: hxAFIZw4RCC07UgvikV6JR0Y6MOvZuFKg3XrUhhJ604=)
3: Ih_bDVPWPg40meMVUQH52Q_SiqE.roa (hash: WQr9CRYz6MHyRZSZGa17nV7pgtE8mhzsKExO1LfYlFY=)
4: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: Gy4Y4G4Z7zYRIbDRiiLR4fK+5PaZFOI+qMOYzUIIOIw=)
5: yhvjZUqxn_FUY-Mlri4ogZjyLBM.roa (hash: L0ywjyagm2bruEE3Ewodq3fXEbUNJSk+4fnvkwsHn6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:a0:3b:a5:c1:2b:5f:3c:ea:81:41:69:41:94:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Jul 24 19:01:02 2026 GMT
Not After : Jul 25 19:01:02 2026 GMT
Subject: CN=97bc1cd94943b419cb3d4a205f509216e968eee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:00:e6:4f:42:e1:ba:77:b0:e4:cd:dd:79:
54:7a:b7:69:1f:9b:7c:e8:78:88:41:e9:d4:f2:2d:
1d:e2:50:01:db:9a:ec:d8:e6:1e:ee:93:6e:f9:9d:
5d:12:3b:4d:d3:24:c8:f3:da:92:9a:dc:08:04:f7:
74:d3:06:43:54:22:46:62:71:9b:05:ea:3d:12:34:
eb:10:c7:30:27:b3:57:e1:7b:f7:d4:8c:d0:1a:ca:
26:4d:ed:fc:86:82:61:c5:29:7a:63:72:16:18:a7:
cf:ab:83:16:6d:44:a1:6a:46:3c:95:77:6e:db:f8:
51:84:63:fb:f9:3a:24:8e:6c:90:3b:44:21:33:e2:
e5:ff:4d:df:dd:3f:5f:3f:15:20:60:21:f9:b7:94:
be:36:64:34:10:55:1c:2a:f6:bc:6e:87:ec:89:4f:
ba:f7:d9:24:3b:a5:f8:e6:73:03:de:2f:9b:a0:80:
2d:4e:7a:a1:ea:e3:26:bc:e6:92:7e:66:72:18:3e:
da:7b:c1:fd:91:97:e0:d0:c2:76:9b:9d:64:79:1e:
28:85:e3:f8:ba:c1:03:5b:90:25:ec:4e:a5:cc:a0:
2f:8d:3e:03:41:85:2a:48:ca:fb:3c:e7:70:f0:c8:
4e:a3:fe:15:e4:96:27:81:30:c9:6c:23:df:60:bb:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BC:1C:D9:49:43:B4:19:CB:3D:4A:20:5F:50:92:16:E9:68:EE:E3
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:04:83:a8:86:78:25:3b:a4:4d:d1:c6:c5:72:cd:5e:f0:17:
ff:4b:c9:1b:5c:78:c1:0c:42:56:01:71:b0:b2:98:55:0d:d4:
78:53:df:3e:81:45:3a:cc:13:e4:b3:f7:70:da:4f:4f:17:02:
49:33:ad:9f:06:3a:a4:b9:01:17:2f:e9:d2:a7:1e:76:8d:bb:
3d:86:1a:f9:9b:a9:64:d9:76:87:5d:d2:8c:e2:e7:78:3f:3f:
8e:c3:01:20:63:de:dc:1f:b0:15:92:be:de:f0:82:92:19:18:
60:54:e4:74:14:95:88:0a:35:f6:36:8e:15:34:96:75:c7:dc:
68:2f:d0:3e:09:a3:ca:d3:3e:76:59:81:95:46:95:d0:b7:3f:
f8:28:53:ab:ce:e5:28:6c:b1:81:c5:6f:fb:e8:56:7f:19:6a:
6a:8c:b6:b9:bc:4f:5b:38:36:1a:f0:f6:2c:b8:f7:22:06:1c:
5a:3f:cb:46:8c:8b:4e:f6:dd:35:3c:17:99:0d:96:5e:ed:67:
ac:69:cb:aa:99:05:ff:74:04:40:32:61:19:6a:15:28:d8:54:
9a:91:4a:8e:5e:80:57:21:c9:c3:d0:0a:fe:8f:19:34:ea:e3:
d8:ba:15:f5:83:8c:7e:b6:57:b6:2f:e2:05:bd:fb:44:ed:a4:
94:8b:8a:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VgKA7pcErXzzqgUFpQZRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UwZTQ4MDQxMWI5Yzg4ZTkxNmRlZjkwZmMzYTkwMTAy
NjM5NGEwHhcNMjYwNzI0MTkwMTAyWhcNMjYwNzI1MTkwMTAyWjAzMTEwLwYDVQQD
Eyg5N2JjMWNkOTQ5NDNiNDE5Y2IzZDRhMjA1ZjUwOTIxNmU5NjhlZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYQA5k9C4bp3sOTN3XlUerdpH5t8
6HiIQenU8i0d4lAB25rs2OYe7pNu+Z1dEjtN0yTI89qSmtwIBPd00wZDVCJGYnGb
Beo9EjTrEMcwJ7NX4Xv31IzQGsomTe38hoJhxSl6Y3IWGKfPq4MWbUShakY8lXdu
2/hRhGP7+TokjmyQO0QhM+Ll/03f3T9fPxUgYCH5t5S+NmQ0EFUcKva8bofsiU+6
99kkO6X45nMD3i+boIAtTnqh6uMmvOaSfmZyGD7ae8H9kZfg0MJ2m51keR4oheP4
usEDW5Al7E6lzKAvjT4DQYUqSMr7POdw8MhOo/4V5JYngTDJbCPfYLtVoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJe8HNlJQ7QZyz1KIF9QkhbpaO7jMB8GA1UdIwQY
MBaAFIM+DkgEEbnIjpFt75D8OpAQJjlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMt
NmMyMGViYWYzMGE5LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMtNmMyMGViYWYzMGE5
LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwSDqIZ4
JTukTdHGxXLNXvAX/0vJG1x4wQxCVgFxsLKYVQ3UeFPfPoFFOswT5LP3cNpPTxcC
STOtnwY6pLkBFy/p0qcedo27PYYa+ZupZNl2h13SjOLneD8/jsMBIGPe3B+wFZK+
3vCCkhkYYFTkdBSViAo19jaOFTSWdcfcaC/QPgmjytM+dlmBlUaV0Lc/+ChTq87l
KGyxgcVv++hWfxlqaoy2ubxPWzg2GvD2LLj3IgYcWj/LRoyLTvbdNTwXmQ2WXu1n
rGnLqpkF/3QEQDJhGWoVKNhUmpFKjl6AVyHJw9AK/o8ZNOrj2LoV9YOMfrZXti/i
Bb37RO2klIuKBQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:03:13 2026 by rpki-client