Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier: KPsW94lMj1erd4GQuoIqncU2srOMP9VpmNcKtjp9KTA=
Subject key identifier: FB:99:40:09:E9:6A:76:0C:03:8A:9B:B0:4D:64:58:FA:E5:59:B6:3E
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 019F9436E36FA0CF2CCFEE57A4923B646EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 13:00:52 +0000
Manifest this update: Fri 24 Jul 2026 13:00:52 +0000
Manifest next update: Sat 25 Jul 2026 13:00:52 +0000
Files and hashes: 1: Qy5yKoxjLWJA1uRpC0vjfkx5IHQ.roa (hash: y7SNkohtjGeeXJKm5Co5EsY36dtQ+/7kfkwvtYcQU4g=)
2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: R1wgQbREqf8CztsJJj9lPDz8u3e5qA0wduBC21e2788=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:e3:6f:a0:cf:2c:cf:ee:57:a4:92:3b:64:6e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Jul 24 13:00:52 2026 GMT
Not After : Jul 25 13:00:52 2026 GMT
Subject: CN=fb994009e96a760c038a9bb04d6458fae559b63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:17:4d:ec:1b:a2:fd:e5:59:95:1d:2f:de:
9e:85:60:e4:dd:c9:29:c3:96:da:e1:d8:72:94:82:
f9:2d:5d:31:8c:d8:a6:fd:6d:bb:05:36:bd:95:36:
69:b3:53:46:0f:a0:75:db:5d:a2:56:eb:2f:06:bc:
c3:71:72:95:a0:6f:99:3c:32:b0:dc:53:57:64:76:
2d:e0:8f:d7:bd:96:f9:60:05:87:dc:86:bc:46:7e:
96:e3:74:78:2d:ae:ca:ef:f9:89:f7:2f:bc:af:c4:
e5:60:ce:3a:eb:cb:0c:64:fd:0b:fa:0b:10:6d:01:
b3:da:b1:1e:6d:a2:f5:6b:15:54:1b:fa:ec:c7:f3:
fd:b1:ce:4d:cc:63:d6:75:c9:c2:00:ba:e0:9b:75:
6c:00:2d:d1:7c:53:1a:ea:0e:d9:90:5b:dc:a0:f0:
60:36:45:95:fc:f7:f6:a3:e3:03:0b:b8:45:04:d3:
5b:c6:15:d4:ac:e2:8c:16:7c:8a:ac:2f:14:cd:bb:
d7:10:94:9c:7e:33:75:bc:6b:a1:16:19:55:20:28:
bc:15:00:bf:e5:47:9e:14:4f:2b:e5:39:19:6a:cc:
67:3a:a0:3b:41:1b:ea:8c:e6:87:35:11:52:8c:09:
f6:ae:12:2e:12:7b:95:7d:33:92:c4:12:b5:52:5d:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:40:09:E9:6A:76:0C:03:8A:9B:B0:4D:64:58:FA:E5:59:B6:3E
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:36:6a:b5:f2:7e:08:dd:6c:82:00:38:1a:01:7a:a3:3f:ce:
18:da:8a:1a:7c:3d:91:66:e3:29:36:c7:ec:6d:88:7f:78:78:
c6:6e:ee:a8:a2:eb:1e:d5:eb:f9:7a:34:4e:10:83:10:65:94:
da:9c:7e:d9:f8:a2:61:bf:be:da:66:7e:95:76:a8:e1:1d:7d:
3a:d3:a0:18:05:a4:68:2e:e9:d5:8a:b3:7a:c8:2b:c2:97:b1:
d5:33:3d:d0:72:aa:ae:89:9f:5e:5f:15:d3:6a:26:b8:98:6b:
dc:21:f6:17:d3:62:bb:2e:48:3a:0a:88:82:ca:b2:b2:2d:72:
1f:b7:e6:2e:ab:da:22:09:51:04:75:fa:0f:7d:54:1e:1b:03:
a7:21:78:c0:e8:99:46:a1:27:e6:cf:14:e7:36:77:db:fa:81:
c9:87:95:59:2c:a5:8c:8f:b8:64:9a:79:e5:eb:da:82:4a:ea:
cf:a3:80:cb:ec:9f:b1:38:80:e0:bd:2d:85:6d:14:8b:4c:c9:
36:59:42:17:85:76:d4:35:4e:81:5c:b4:2c:9f:7c:a3:95:2a:
24:28:02:31:b2:70:7d:de:9f:21:b4:42:14:1e:9c:50:46:ec:
93:bf:29:8a:3c:c8:16:78:40:d6:e7:93:ab:eb:79:71:4f:38:
12:24:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:13 2026 by rpki-client