Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: 2U9wrHEOET12Uus7q8VbX/tFR3cPlYaBEkCO4+YjEEc=
Subject key identifier: 14:D7:1E:D4:4F:3C:5E:F0:79:7C:14:63:35:BB:C7:8E:AB:15:09:F3
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 019F946E0AE403372C9C1823E94078641C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 091A
Signing time: Fri 24 Jul 2026 14:01:07 +0000
Manifest this update: Fri 24 Jul 2026 14:01:07 +0000
Manifest next update: Sat 25 Jul 2026 14:01:07 +0000
Files and hashes: 1: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: HccMDrMW3y2rROaah5VPHAnw9ncCOcAlOshi0jblOrs=)
2: zD728h1UCihkQAXpX92CPXnx1Gs.roa (hash: jxmfADV7fNflCtFxiDKR6culeD+Aw9hg4Dg9BnOAg8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:0a:e4:03:37:2c:9c:18:23:e9:40:78:64:1c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Jul 24 14:01:07 2026 GMT
Not After : Jul 25 14:01:07 2026 GMT
Subject: CN=14d71ed44f3c5ef0797c146335bbc78eab1509f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:5e:fd:e6:6d:fc:3d:25:11:76:69:3a:57:
57:13:0a:65:29:34:b2:87:b5:3d:93:a1:52:03:33:
bd:43:2b:61:f2:57:50:cd:7e:b9:12:3e:b4:d2:af:
8f:81:a9:a5:b9:9c:4c:da:9a:74:74:da:1c:9d:c4:
b0:4f:95:69:af:ad:b4:c1:3c:13:b0:8f:da:98:26:
b9:e5:b8:48:f7:a6:10:4f:1a:8a:92:b8:9a:5b:9f:
c5:12:33:fe:97:0b:76:36:2b:25:a5:25:30:9e:ad:
c7:42:cc:5a:bf:41:6e:de:72:1d:a9:b7:7c:70:bc:
8f:2f:83:1d:b8:e4:79:ec:b1:8e:22:c4:87:3b:20:
c8:5e:ab:eb:be:74:88:da:91:5e:d3:d0:ce:c0:df:
4b:1f:16:4a:fe:8e:e2:b6:23:6d:cd:df:bd:0f:2f:
0e:79:0b:59:85:6a:e7:d2:90:df:8b:9e:53:93:ea:
45:da:2a:1a:75:2c:17:c1:06:bb:32:f0:8c:41:fc:
55:cc:b6:d2:f6:e5:d2:c4:39:97:c8:8a:ed:1a:c7:
dc:ad:22:7f:71:42:c8:ff:ea:4c:4d:92:f0:c7:85:
18:51:24:34:8c:da:ce:6f:e2:f1:8f:7f:00:21:53:
aa:e2:c6:aa:ce:90:3b:3b:64:f2:72:3e:8f:d5:64:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D7:1E:D4:4F:3C:5E:F0:79:7C:14:63:35:BB:C7:8E:AB:15:09:F3
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bc:f2:54:aa:93:64:56:0f:7e:6e:90:b5:1c:77:42:60:1a:
42:40:21:06:4b:1e:8d:6c:84:bc:9c:9c:fc:db:97:51:08:b8:
99:68:f8:7c:99:d2:5c:87:53:87:18:82:27:b9:c2:c0:4a:29:
81:47:36:d5:6d:73:ce:fa:d3:43:cd:37:56:69:c3:02:13:c5:
be:28:75:97:34:10:69:6f:f4:14:46:98:68:21:3e:92:f6:6a:
87:20:35:29:91:17:53:b7:a0:b5:0c:b4:cd:5c:d6:bc:98:86:
8c:aa:31:61:11:12:c5:69:38:a1:9e:bf:98:dd:7d:83:b4:cf:
67:49:3b:fc:95:54:2a:84:a1:94:5b:fa:cf:14:b1:7e:be:f8:
ad:98:10:77:a1:f8:52:e6:e6:8b:8d:a1:78:9d:2f:25:5a:94:
25:f3:a3:91:81:a2:a9:0b:91:b1:9b:e6:25:62:d3:5a:cf:8b:
49:1d:6b:e2:b1:b8:56:3d:47:d2:76:c7:20:76:74:d9:91:9f:
e2:33:3c:29:ee:ee:0f:a7:aa:32:aa:4e:80:a0:38:e0:cd:55:
e1:12:31:f1:34:4b:51:6e:67:08:7a:d7:7a:e3:ca:2a:4b:2d:
10:1b:8d:67:b6:5f:94:68:2a:ee:23:e3:bb:9c:3e:f4:58:94:
a0:b6:57:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:17 2026 by rpki-client