Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: DGCuL55byHAdz9cUpaO/o9L5BbTtGKCorLZ6KXdDqxc=
Subject key identifier: 3A:A4:82:EA:DB:AF:C4:66:33:B0:4C:20:33:9C:A3:81:56:F7:80:21
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 019F94374A80882DDE2A6A54CA5E93692142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 0B23
Signing time: Fri 24 Jul 2026 13:01:18 +0000
Manifest this update: Fri 24 Jul 2026 13:01:18 +0000
Manifest next update: Sat 25 Jul 2026 13:01:18 +0000
Files and hashes: 1: EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa (hash: CaEBziMi2C6rN6WGf7O34W/+WtB1Ogao7r0fRD3u2XA=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: imFhMgYu+/QH9W6JOOWUxeCNmFf19CRXtHLxtFKCp58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:4a:80:88:2d:de:2a:6a:54:ca:5e:93:69:21:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Jul 24 13:01:18 2026 GMT
Not After : Jul 25 13:01:18 2026 GMT
Subject: CN=3aa482eadbafc46633b04c20339ca38156f78021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:2b:9b:d5:7a:a7:11:9a:70:25:83:28:ad:
06:1a:eb:53:a7:95:9e:24:5d:ac:d7:89:4b:27:b2:
19:ae:cf:43:2a:94:e7:08:a2:9e:7c:3d:a5:3f:aa:
8e:f4:ba:9f:be:f2:20:c8:5d:72:bb:5f:9e:0e:d9:
c0:e4:36:3d:b7:71:2d:dd:f7:f0:8d:97:32:d8:8c:
0b:18:67:ae:80:2f:c5:ee:9a:eb:0c:e5:58:06:2e:
5b:c8:63:11:e7:e1:ef:63:d2:c7:5b:94:5f:e2:6f:
b2:dc:51:15:a6:9c:a7:c2:f3:cc:d0:91:4e:0a:dc:
7a:0a:32:8f:08:8e:c6:99:ef:ba:cc:b9:b5:3c:04:
d9:04:0b:59:4d:54:20:bb:d3:09:3f:07:c0:82:55:
ac:a5:ca:1e:72:e8:54:14:83:68:1e:23:53:fa:b3:
6a:96:8a:8e:03:17:de:bb:fe:ba:35:5d:54:14:cc:
55:27:9c:ac:73:57:f1:a4:42:f0:9f:58:26:ea:d1:
8a:4f:93:e2:10:10:42:39:c1:7e:9a:76:eb:59:79:
cd:2a:0d:f2:bf:d2:f4:69:75:30:c8:c7:bc:32:79:
96:fb:a0:82:81:08:8d:e6:c9:08:a3:07:96:c5:e2:
b8:d6:45:e3:d3:25:e5:34:3c:e5:4c:5c:d8:ef:0f:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:82:EA:DB:AF:C4:66:33:B0:4C:20:33:9C:A3:81:56:F7:80:21
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d1:e6:66:15:71:97:ad:a0:f6:99:42:98:bf:5b:5c:56:c0:
82:95:2d:d0:39:8d:fb:7f:f9:7b:54:98:66:e6:f9:22:fb:e3:
6e:92:34:56:01:0c:b1:b0:22:f0:96:06:06:26:2a:7d:e4:88:
a3:c0:21:f8:3f:59:5a:9a:5e:a2:dc:2a:fe:21:7d:a2:18:61:
e3:9a:30:2a:3b:52:a9:ee:ab:a0:70:53:2d:f9:f6:1b:fc:c2:
31:67:92:9c:49:bd:11:79:90:64:9e:f7:71:ba:b5:ff:75:bd:
33:f9:a4:79:0a:f3:74:2e:06:43:1a:8e:e2:7a:51:e9:6a:86:
a5:1b:65:fd:04:9f:ea:1e:1d:3a:07:c5:d0:84:d6:2e:e5:62:
5f:71:c9:79:ab:fb:70:59:61:aa:4c:7b:8c:4e:be:e6:bb:d0:
8e:d6:b9:bd:68:f3:f6:4b:25:d3:4a:2a:fb:2d:eb:a3:bd:7d:
d9:e9:11:ff:02:de:d3:cf:84:0a:7a:b7:e1:8c:9e:1c:a5:e7:
2b:07:d6:22:53:db:da:91:65:84:c4:41:87:72:90:10:5e:f4:
e0:b1:70:b9:2a:40:ed:6d:7d:1a:3c:c9:2a:8d:f3:a9:52:3a:
22:b4:d1:fd:75:c5:d9:0a:de:5e:92:28:db:b6:2d:62:aa:2c:
d4:9d:47:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:51 2026 by rpki-client