Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier: WYtOSsg+VmQPMYgB8wSc/vPwtH64nEQMbpistuaKuu0=
Subject key identifier: 21:D1:9A:C7:47:B5:1D:62:A3:EB:48:0F:3F:C7:6B:5B:FE:27:7C:2F
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 019F916D93AF689B26866351B8621620A440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 00:01:45 +0000
Manifest this update: Fri 24 Jul 2026 00:01:45 +0000
Manifest next update: Sat 25 Jul 2026 00:01:45 +0000
Files and hashes: 1: 75SRw9aNyewbtPYAMH8et8hfSr4.roa (hash: Ef79opNAcjrl49Rm2x5OxhpX27NyaA68e2jdXKrtpHA=)
2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: H0U4WU62kZmBFN66MPym2Nfi3J+MDIU8+9tanfIP3Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:93:af:68:9b:26:86:63:51:b8:62:16:20:a4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: Jul 24 00:01:45 2026 GMT
Not After : Jul 25 00:01:45 2026 GMT
Subject: CN=21d19ac747b51d62a3eb480f3fc76b5bfe277c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:e6:5d:eb:c3:78:45:fa:ce:52:de:f6:36:
cc:d5:0e:2d:a0:86:d3:06:1d:58:50:e4:46:6b:64:
43:bd:8a:69:f7:4d:66:b8:4c:a2:a3:13:bd:a9:d8:
fd:b6:06:84:76:b8:e1:39:b8:18:0c:03:2f:d2:8b:
0b:b5:69:4a:51:b8:8c:68:bd:ff:3b:44:22:9f:c3:
50:9d:86:ac:9c:12:1c:9d:18:69:e5:f2:b6:ab:e3:
54:0b:e5:31:bb:ae:b8:02:57:2a:6f:0a:c6:1e:0b:
ba:82:79:24:4c:47:a5:a5:ec:13:24:83:cb:54:5d:
59:85:3c:a2:79:8e:16:eb:ae:d3:6e:4e:cd:70:c3:
7c:6d:09:11:20:a0:00:b3:ae:35:a2:5b:e2:ab:4c:
cd:34:db:13:b1:a6:f0:f3:cd:4e:8c:77:8e:aa:f9:
a2:3d:d9:42:84:4a:bd:3a:4c:35:19:87:25:f3:d2:
57:b8:13:6f:70:0e:7b:07:c8:1f:9d:dd:ea:fc:1e:
3e:44:0e:1b:af:d3:0e:35:16:ab:4b:5d:44:86:0e:
6c:6a:aa:be:8d:f1:e3:d9:b7:11:ae:4d:84:6f:20:
5d:d0:44:df:db:8d:57:31:9e:6b:1c:49:4c:35:9a:
7a:a6:d7:f9:52:d8:69:10:f5:7f:62:53:e5:6e:1d:
14:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D1:9A:C7:47:B5:1D:62:A3:EB:48:0F:3F:C7:6B:5B:FE:27:7C:2F
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:db:72:5c:90:4e:5f:5f:41:87:6e:7f:78:39:fd:3c:3f:d8:
dc:af:26:cd:8c:f1:f6:38:d2:16:05:cf:a6:5e:6d:d5:37:bd:
07:61:46:66:e0:f6:cf:9c:54:85:42:6b:26:d1:30:7f:1f:ae:
37:81:b8:17:a8:e6:b1:b5:86:8f:9b:29:15:90:45:47:9f:fc:
87:39:47:bb:61:18:16:a3:1a:e5:19:aa:38:b8:c7:6f:44:1e:
b2:e3:02:ba:a0:62:5b:de:e1:c7:4d:2d:9d:42:a0:8a:83:7b:
e3:b9:c8:bb:38:62:fe:97:58:58:b5:51:d1:27:25:b5:5d:86:
51:c3:29:4f:3d:7f:74:9a:11:7c:67:e0:a7:35:23:3e:6f:46:
1f:49:f3:c1:57:f3:8e:d8:ee:02:81:0f:f2:da:68:98:7f:8b:
8a:03:ce:17:d0:70:03:38:67:80:96:bd:e0:85:15:ae:32:e7:
78:f4:0f:f9:2a:3e:98:b1:ec:4f:59:8c:f6:e1:55:7b:46:68:
1e:7e:00:31:11:d9:7a:2c:72:35:fe:3b:47:1b:0b:a8:64:ca:
2b:29:fd:b5:cc:39:a5:d7:5b:d0:5f:5b:aa:79:a0:9e:57:3b:
ac:75:c4:98:c3:cf:5f:28:3e:71:d9:86:a7:5d:3f:7c:0f:cf:
cc:20:73:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:55:13 2026 by rpki-client