Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: 4FCzVP4BPInbN3BnO74HQDOqodzNpg6UxIXlFwEFTJQ=
Subject key identifier: 08:EF:56:B3:56:6F:BE:FF:A2:1B:DE:A9:D9:04:5E:D2:EA:7F:9B:EF
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 019F93C882F43FF6F97CE2A787FF0A3537B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 11:00:19 +0000
Manifest this update: Fri 24 Jul 2026 11:00:19 +0000
Manifest next update: Sat 25 Jul 2026 11:00:19 +0000
Files and hashes: 1: 1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa (hash: riRb4iPkDBtyw2U0WQzBeSsFtt3y8g90iqUigaVwK4I=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: trY7BV/SP+O0uUYC9nABmbatBiOhULZmDEXN0wGkdXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:82:f4:3f:f6:f9:7c:e2:a7:87:ff:0a:35:37:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Jul 24 11:00:19 2026 GMT
Not After : Jul 25 11:00:19 2026 GMT
Subject: CN=08ef56b3566fbeffa21bdea9d9045ed2ea7f9bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:e5:ba:9e:30:ab:20:68:48:13:d0:4f:02:
75:3b:a8:a5:b7:7a:a6:5e:41:e9:23:4e:6b:05:a5:
80:c9:ef:bb:9e:a2:ab:c3:75:f8:fa:aa:7d:19:85:
4b:0b:ba:8b:ac:8a:9a:ce:b4:94:7e:6f:18:e3:4d:
db:6f:a6:ad:4b:ca:ed:1f:96:86:ca:8d:db:f7:91:
fa:10:56:de:bb:9f:0f:2f:9f:05:2a:24:ff:b3:20:
12:8b:8b:93:f6:0f:ef:6b:7b:0e:5b:50:5b:2d:95:
e1:e6:60:87:87:d2:89:d2:21:fd:22:6a:b9:23:d4:
5f:3a:c0:b4:42:88:b2:c3:73:06:97:35:46:91:50:
22:c8:86:c4:0c:22:64:b3:86:f3:a7:d0:1f:d4:c1:
c0:81:bf:05:b6:b2:44:2a:60:01:e5:13:59:28:f4:
05:26:f9:98:30:c7:c1:0e:69:88:03:1a:93:49:5f:
db:84:f6:17:76:6e:a0:eb:f6:d2:c6:9a:06:03:9d:
5e:17:25:d7:f4:61:5d:18:be:2c:59:58:f3:7f:34:
32:e0:bc:57:4e:60:64:bb:cf:34:ab:b5:2f:21:a7:
03:d4:dc:6f:6c:bf:13:5a:c3:75:55:01:51:52:32:
e9:d2:71:40:52:84:71:db:0e:e0:aa:ff:22:d6:be:
1c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EF:56:B3:56:6F:BE:FF:A2:1B:DE:A9:D9:04:5E:D2:EA:7F:9B:EF
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:75:fb:ed:41:ee:57:65:e6:be:98:7f:a6:6a:ab:ba:e8:fd:
50:5d:0c:bd:d4:59:f2:85:d1:b4:22:33:b4:31:2d:12:96:4e:
22:78:7d:25:2b:e5:3c:0f:9f:25:52:eb:f6:96:14:22:2b:ff:
1f:fb:72:8a:cd:fd:1d:c7:00:cf:06:38:af:ff:e3:c8:8a:49:
95:b1:b5:d1:38:79:1b:69:0b:47:9c:4e:14:f4:83:8a:61:95:
64:e0:ba:99:1a:da:e5:ef:61:2a:7f:bd:a8:62:d5:b3:7f:33:
26:6a:6e:c7:14:95:54:49:1f:ee:fe:9e:1a:23:a0:b8:53:9c:
12:7e:00:9c:41:a3:70:2f:62:8f:f1:71:7e:f2:82:ef:b6:84:
38:5b:49:61:ca:55:6a:8a:60:12:d6:eb:2f:dd:a1:41:f5:48:
d5:66:36:df:65:72:06:ef:ff:1b:b1:c5:4e:62:4d:ad:93:a4:
26:a4:c2:ef:d9:89:ac:96:be:24:c3:13:82:eb:49:9e:51:b4:
09:a1:7f:59:de:f9:03:36:2e:e4:78:9c:3b:1a:3b:91:90:cd:
28:1e:20:2e:42:2e:ba:9f:12:3f:91:05:fb:94:45:e6:95:0d:
58:78:7b:b9:32:e5:d0:d1:ea:ce:85:3d:89:cb:5a:e7:7b:f0:
ed:d4:0e:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyIL0P/b5fOKnh/8KNTe5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNWMwYzlmMjM3NjNjMDM3YmQ2ODg0NzQ1Y2Y4NDY0ZDJk
YjY2M2UwHhcNMjYwNzI0MTEwMDE5WhcNMjYwNzI1MTEwMDE5WjAzMTEwLwYDVQQD
EygwOGVmNTZiMzU2NmZiZWZmYTIxYmRlYTlkOTA0NWVkMmVhN2Y5YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKzlup4wqyBoSBPQTwJ1O6ilt3qm
XkHpI05rBaWAye+7nqKrw3X4+qp9GYVLC7qLrIqazrSUfm8Y403bb6atS8rtH5aG
yo3b95H6EFbeu58PL58FKiT/syASi4uT9g/va3sOW1BbLZXh5mCHh9KJ0iH9Imq5
I9RfOsC0Qoiyw3MGlzVGkVAiyIbEDCJks4bzp9Af1MHAgb8FtrJEKmAB5RNZKPQF
JvmYMMfBDmmIAxqTSV/bhPYXdm6g6/bSxpoGA51eFyXX9GFdGL4sWVjzfzQy4LxX
TmBku880q7UvIacD1NxvbL8TWsN1VQFRUjLp0nFAUoRx2w7gqv8i1r4cIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjvVrNWb77/ohveqdkEXtLqf5vvMB8GA1UdIwQY
MBaAFIBcDJ8jdjwDe9aIR0XPhGTS22Y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQt
ODJlMWUyMDA1MDRlLzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQtODJlMWUyMDA1MDRl
LzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHX77UHu
V2Xmvph/pmqruuj9UF0MvdRZ8oXRtCIztDEtEpZOInh9JSvlPA+fJVLr9pYUIiv/
H/tyis39HccAzwY4r//jyIpJlbG10Th5G2kLR5xOFPSDimGVZOC6mRra5e9hKn+9
qGLVs38zJmpuxxSVVEkf7v6eGiOguFOcEn4AnEGjcC9ij/FxfvKC77aEOFtJYcpV
aopgEtbrL92hQfVI1WY232VyBu//G7HFTmJNrZOkJqTC79mJrJa+JMMTgutJnlG0
CaF/Wd75AzYu5HicOxo7kZDNKB4gLkIuup8SP5EF+5RF5pUNWHh7uTLl0NHqzoU9
icta53vw7dQOhw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:46 2026 by rpki-client