Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
File: gh8Shdd1qfWJJD6shErcWridl8k.mft (raw, json)
Hash identifier: ZtgXgTAGwjBZV+EFY6mdOebyorql2Jz455wUmmkPHBQ=
Subject key identifier: 39:BE:8E:EB:F7:14:0F:77:D9:46:A5:79:B2:EF:77:4E:27:8B:A9:8A
Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
Certificate issuer: /CN=821f1285d775a9f589243eac844adc5ab89d97c9
Certificate serial: 019F94DB85E964007A55EE19CB1C220524F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
Manifest number: 0E6D
Signing time: Fri 24 Jul 2026 16:00:42 +0000
Manifest this update: Fri 24 Jul 2026 16:00:42 +0000
Manifest next update: Sat 25 Jul 2026 16:00:42 +0000
Files and hashes: 1: Ken1-UyKUV7K-ivTPRx21HrB1go.roa (hash: SzlYiDowE9Ts27wto98BsM6+plGlLtF6xf2nTMUOAKI=)
2: dGmTMuCLcokZ_dpzsnFglotPhbE.roa (hash: xS9B/n1G06zo3aHFhFfNBhI/mXvOeeGrRH7j7PtD+Q0=)
3: gh8Shdd1qfWJJD6shErcWridl8k.crl (hash: 3aokVst/rTtL6IcVSJTGSCwSdBkINOKA5BkVWvmaQec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:85:e9:64:00:7a:55:ee:19:cb:1c:22:05:24:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9
Validity
Not Before: Jul 24 16:00:42 2026 GMT
Not After : Jul 25 16:00:42 2026 GMT
Subject: CN=39be8eebf7140f77d946a579b2ef774e278ba98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:8c:56:89:32:b4:8a:72:47:c5:9f:4b:96:
1c:0d:23:f2:15:31:b3:c8:ef:25:fc:42:d2:41:10:
64:99:ad:a2:da:ee:62:32:be:40:19:8e:e2:f5:02:
61:aa:c8:b4:e5:34:4f:ab:5b:d7:94:5a:5f:62:48:
98:77:ba:e4:72:ad:08:ca:38:f3:79:ab:fc:ad:88:
f1:84:7f:fb:3d:a2:e4:e8:04:cd:56:41:36:4b:b9:
c3:91:ee:a7:30:7d:7f:e0:ab:03:c9:cb:ff:3b:de:
91:87:97:fb:aa:ca:1a:be:ba:29:d0:07:e1:ac:42:
0c:24:c4:3d:13:b8:b2:a1:e9:f3:07:0f:ff:87:92:
98:02:72:e9:3d:d2:85:a5:a7:3f:14:4d:7f:2a:23:
b7:00:c8:5b:ea:9c:9b:92:35:e8:54:32:aa:b0:d9:
84:17:65:a4:15:c7:29:82:dc:51:27:76:29:c7:2e:
57:a7:fa:26:f6:73:8c:9a:c3:fd:10:08:bd:17:79:
ca:31:c1:f4:2d:29:ce:fb:a4:75:f0:56:6d:ec:d7:
2f:1f:5e:4a:83:25:6f:b0:a2:e7:f0:14:fd:90:7c:
db:6b:bd:5a:71:7e:84:5c:7f:cd:48:96:71:2e:ee:
3b:78:34:c3:09:14:ec:c0:e8:e6:3a:a4:e8:02:a0:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BE:8E:EB:F7:14:0F:77:D9:46:A5:79:B2:EF:77:4E:27:8B:A9:8A
X509v3 Authority Key Identifier:
keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:91:69:7e:ab:7a:21:26:02:cb:3a:9e:09:ba:13:1b:d8:8b:
71:1c:2e:3a:34:ec:6a:3b:a5:f5:06:34:cf:24:89:57:3b:c3:
08:1e:f9:ec:8d:e4:be:93:b0:7d:0a:b4:81:2e:1b:95:cb:82:
b7:93:ec:9e:4a:ef:ad:d5:73:9f:90:aa:97:2f:89:31:8e:25:
87:2d:81:d4:76:50:94:23:66:c6:53:88:76:16:6f:2a:ac:e3:
3a:75:d7:2c:40:4e:73:57:ef:b2:7f:8b:aa:29:38:a7:52:b7:
9a:38:38:1f:8a:60:ab:58:ba:55:ed:94:0a:28:7b:af:7a:b8:
80:14:8c:c3:b0:7f:46:12:d0:16:65:d8:9e:6d:12:73:2f:70:
1e:1d:51:d1:38:11:3f:58:d8:1c:c0:5b:61:cb:03:b2:7e:c2:
43:48:88:ab:a3:91:f2:14:7c:f2:f7:78:77:19:bc:07:e9:e7:
43:0a:7e:c0:04:2b:33:a0:0b:06:e3:75:8d:bd:e3:97:2a:27:
cc:65:77:7a:a3:7f:af:1d:d9:1a:4b:6c:2c:3e:11:c7:9e:f4:
4f:ac:2f:cd:f7:17:6d:57:82:d3:d7:f5:20:f0:b3:cf:56:e7:
cf:83:98:59:41:40:15:ba:28:36:12:9d:b5:04:e9:7d:1d:31:
40:a6:12:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:27 2026 by rpki-client