Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: OempPU6AxlwLBuVRn+OY8dA+1/DrJYmTCQXKl9P8CII=
Subject key identifier: B1:91:8C:8E:E3:AC:33:59:BB:98:44:8A:06:84:7B:4A:2B:92:FC:DE
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 019F9323C360708E16A490A975C917122BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 08:00:22 +0000
Manifest this update: Fri 24 Jul 2026 08:00:22 +0000
Manifest next update: Sat 25 Jul 2026 08:00:22 +0000
Files and hashes: 1: _gHdc_o1Sg4bPmajOZmaGT6ZXNU.roa (hash: fbP0Eisnj7ta1eL91x/ykjZ4/I+oNZYVlLK/j2viYek=)
2: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: ciI2420jNnSqvRkZ6fECnxVF6O90WaLt/7z0pVQvz20=)
3: xfg6ND62VE_NEsRerQpNDEtguWY.roa (hash: jV8up19wMmKrYo3rkVmGEitD0urDFX1Xvcb39PAZzRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:c3:60:70:8e:16:a4:90:a9:75:c9:17:12:2b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Jul 24 08:00:22 2026 GMT
Not After : Jul 25 08:00:22 2026 GMT
Subject: CN=b1918c8ee3ac3359bb98448a06847b4a2b92fcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:0b:d3:c9:0e:3d:ac:b5:6c:1a:bf:75:50:
26:8b:6d:b1:26:29:1a:d5:4d:db:6a:f0:90:5e:97:
99:3b:f9:81:85:bb:21:df:58:4a:d1:1b:97:de:44:
96:ec:0b:df:94:38:41:d7:8a:5f:c4:74:3e:c3:61:
d7:da:64:ae:52:66:88:72:44:2a:34:52:62:20:b6:
00:5c:e6:e5:c1:d3:5a:97:d0:28:68:d8:ae:b3:a6:
cf:85:da:5b:4d:8c:20:97:33:f7:01:7d:31:08:ab:
f2:37:b9:a3:9b:75:2e:78:08:af:8a:30:9e:56:d4:
a9:4a:46:66:84:b0:69:f2:d3:6c:b2:a7:b4:9c:31:
c2:c0:de:9c:d5:d9:28:e8:5e:52:ba:d3:9c:93:58:
96:70:b9:d4:aa:8f:05:c5:19:19:5a:56:d8:87:81:
ea:1d:b6:cb:43:53:17:ed:aa:3c:af:b8:99:ac:c9:
a5:e0:25:29:f0:2a:d5:57:29:1c:83:3d:0b:1d:ca:
55:de:2b:0d:e3:99:2f:32:1c:6e:38:d1:19:78:d4:
a4:bb:5e:e1:5b:27:a3:f4:f0:6b:56:6f:78:0d:fe:
c2:ba:7c:f7:1c:68:2e:69:4a:36:8d:97:aa:cc:db:
6a:e7:da:8a:a6:52:6c:a7:3c:17:38:ff:6e:30:53:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:91:8C:8E:E3:AC:33:59:BB:98:44:8A:06:84:7B:4A:2B:92:FC:DE
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5b:16:2e:ad:ea:5f:b3:15:82:97:19:c9:15:a6:a0:2d:3b:
33:56:5a:34:97:6b:6d:3c:8b:59:81:21:38:46:ac:b0:4a:63:
b1:b5:d7:ab:b6:48:8d:32:e0:5d:12:a9:8e:0a:ec:c0:ce:e9:
fa:47:9a:64:40:01:c7:17:91:92:5c:c8:19:e9:d0:6f:9f:7f:
d0:19:40:c1:05:a2:06:9e:a6:af:2c:ad:a5:1a:ad:66:61:b9:
38:d9:33:ad:16:10:e2:38:db:0c:0e:e9:69:3d:26:63:7a:96:
51:bf:cb:0a:ee:74:84:b5:08:44:98:e3:e3:61:f0:3b:f7:1e:
cb:47:13:8b:e0:ac:d4:25:71:20:e1:d7:4e:b4:56:c5:e3:10:
4c:a9:32:d6:12:35:37:32:66:20:59:10:ce:49:28:73:36:05:
1f:14:cb:d1:5e:19:fa:30:8a:9b:12:68:4b:66:f0:b6:fc:ee:
df:c3:db:30:6b:11:64:80:e6:0d:3d:43:e4:99:9b:44:97:49:
a2:74:8f:94:25:d7:83:b0:75:33:af:92:07:3a:90:e6:86:e1:
08:7b:e3:99:11:43:6e:36:2c:63:10:6f:94:44:9c:59:91:99:
91:62:e0:3a:16:6e:4a:3b:d1:98:c7:14:19:52:e8:46:43:44:
7c:51:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:11 2026 by rpki-client