Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
File: GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft (raw, json)
Hash identifier: Ox2tEHn/3DgPQwKdyws4Ey4cW3R+QtW3QMxyXWcbwNs=
Subject key identifier: 68:AD:4C:74:B2:D5:7A:2C:26:F4:AA:2C:8D:BC:55:22:7A:D8:2B:D2
Authority key identifier: 1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
Certificate issuer: /CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Certificate serial: 019F92EDEB2D925DA9C497F9CF5BFA3C87A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
Manifest number: AF
Signing time: Fri 24 Jul 2026 07:01:33 +0000
Manifest this update: Fri 24 Jul 2026 07:01:33 +0000
Manifest next update: Sat 25 Jul 2026 07:01:33 +0000
Files and hashes: 1: GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl (hash: raOUFbj165Jl8+BN+orJfWQTa/7C0/CKr91eaP3WEgY=)
2: zr6qOC2iZhYMAkfVEjFaWAW3Gdg.roa (hash: rfGt0EQo3cdc8IHh8jz9o2EgRv1qNBw2XAoGV+8jWOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:eb:2d:92:5d:a9:c4:97:f9:cf:5b:fa:3c:87:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Validity
Not Before: Jul 24 07:01:33 2026 GMT
Not After : Jul 25 07:01:33 2026 GMT
Subject: CN=68ad4c74b2d57a2c26f4aa2c8dbc55227ad82bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:61:c7:d6:45:69:71:b4:7e:13:e5:39:7a:
31:2f:fa:09:4c:9f:74:ee:a2:02:af:ba:8c:da:6e:
b6:e8:cf:d0:13:b7:31:6c:cc:df:03:3f:84:8d:73:
f0:4f:c4:27:1b:2b:a4:e1:b2:9c:a0:61:09:cf:be:
f0:9a:f1:a0:a3:0e:a0:b7:36:bc:3a:00:e0:d4:b2:
06:9d:03:4e:23:47:20:a2:44:0a:32:97:4c:4b:26:
6d:7f:53:82:ed:fa:a8:5a:bc:f3:8f:a9:cc:83:09:
04:a7:92:5c:22:17:00:b4:41:8f:46:aa:53:13:a9:
6c:96:e6:c9:ed:7a:66:0a:25:13:ed:37:bb:52:13:
7a:f4:58:d3:b4:d8:50:6e:0a:7b:9e:5f:97:d9:d8:
ed:63:1f:6b:12:e4:76:03:6f:c6:bc:42:81:a8:b6:
84:63:bf:c3:27:4f:d2:e1:75:85:58:b9:0c:7b:bb:
2e:b3:06:c6:bd:ed:ad:9d:24:72:d1:ee:08:c1:ff:
a5:5b:d3:c0:47:1c:96:af:1b:76:a0:0c:4f:6e:88:
ce:6c:b3:c7:12:a1:26:69:55:7a:5e:ce:8e:c2:0e:
bf:46:46:22:27:15:d8:43:3c:45:13:42:2a:5c:b7:
f8:6e:fd:5a:cb:f6:65:ca:ee:29:6e:b9:2e:03:64:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AD:4C:74:B2:D5:7A:2C:26:F4:AA:2C:8D:BC:55:22:7A:D8:2B:D2
X509v3 Authority Key Identifier:
keyid:1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:19:1a:cb:9a:60:09:d9:36:78:1a:79:94:28:e6:89:2b:31:
1b:18:a6:f4:80:67:a9:1a:1c:8d:e7:f7:86:99:5f:06:bd:a2:
7d:a3:a2:15:21:65:a6:a4:47:44:ed:c4:09:87:0f:39:f3:a8:
5f:02:7b:df:d7:cf:28:43:53:06:05:03:07:35:b2:78:29:4e:
81:6d:63:0f:13:b9:33:23:49:b2:c8:74:0f:e4:9f:84:d2:4e:
7c:bf:c4:69:86:16:ed:28:96:a4:59:08:35:9a:f1:54:36:db:
4a:c9:b6:ae:33:fd:4c:29:51:e2:3b:3b:06:61:09:9d:af:3e:
89:20:05:1b:94:63:e4:70:08:62:13:61:b7:37:b3:1d:3d:90:
9b:a8:45:6a:03:52:73:41:04:cd:19:9c:ba:7e:04:5b:97:b6:
bc:44:f0:dd:8a:00:06:ec:c7:94:a4:6f:58:61:43:e2:55:50:
fd:95:2f:89:fc:8b:9c:96:0f:4c:80:62:f4:35:d4:0f:e6:05:
77:1b:ef:43:54:4f:a9:3b:12:0f:fc:2e:9c:2b:92:a5:12:af:
04:e3:50:50:5b:0d:b5:68:75:c1:0f:1f:fa:97:68:df:fa:f1:
16:17:4c:81:b6:b9:de:f8:5e:c6:f6:20:e9:b7:8b:df:6e:0f:
52:93:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:09 2026 by rpki-client