Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: SXFGtZMfCsINq9IRHduBtkOiydcVhD39ucEtruE+oaQ=
Subject key identifier: 66:B2:D8:B0:64:62:D6:9E:76:5B:B7:2C:9A:D9:8F:51:7B:54:B9:40
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 019F935BC3CD768B5C4E3FBC729821C121B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0BEB
Signing time: Fri 24 Jul 2026 09:01:32 +0000
Manifest this update: Fri 24 Jul 2026 09:01:32 +0000
Manifest next update: Sat 25 Jul 2026 09:01:32 +0000
Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=)
2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: KLwzqrc8w/TFjxc4YE81fgIEEg2IjqRV4noq8UsodMs=)
3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:c3:cd:76:8b:5c:4e:3f:bc:72:98:21:c1:21:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Jul 24 09:01:32 2026 GMT
Not After : Jul 25 09:01:32 2026 GMT
Subject: CN=66b2d8b06462d69e765bb72c9ad98f517b54b940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:2b:af:07:85:63:e5:ee:c6:f6:40:11:ca:
53:42:8c:02:90:89:7d:81:76:65:a3:95:c7:00:74:
35:bd:5a:59:0b:e4:73:9c:65:48:11:34:86:05:4b:
5f:61:ce:5a:02:81:4d:12:66:89:78:de:27:a8:14:
62:11:3e:e6:01:c5:53:83:bb:bf:0b:4a:79:5a:96:
e4:e3:ee:59:25:22:5e:2b:5b:d4:0d:bf:33:4f:33:
79:e7:21:29:36:3b:e8:90:6b:cb:8b:23:17:7e:0d:
87:74:6a:91:e1:07:9b:c7:22:a8:03:4a:9b:6b:bd:
e0:a1:7a:c6:10:d0:cf:17:14:65:ec:7d:2e:b7:29:
07:84:64:93:db:4d:30:75:d9:fa:5a:e1:53:88:f9:
e0:c9:67:0f:69:19:75:53:89:38:20:a5:ef:e3:2b:
87:af:28:42:40:b4:47:13:5b:e7:0d:63:73:0a:18:
9d:2f:24:ed:d8:d7:35:06:a9:60:39:f2:ca:15:db:
70:05:f1:a1:18:d2:9a:19:0f:6c:88:cf:17:ea:23:
e9:fa:80:ec:ba:39:27:78:c7:e0:b4:88:54:02:02:
88:e2:e1:f3:0e:57:4e:ec:30:61:a6:00:fc:58:15:
e7:9d:4c:3e:15:11:20:b3:1d:5e:35:d8:c9:c2:1c:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B2:D8:B0:64:62:D6:9E:76:5B:B7:2C:9A:D9:8F:51:7B:54:B9:40
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:97:d9:ee:07:35:0b:de:2b:05:cd:84:7a:fe:a0:04:23:22:
c4:28:ae:53:13:66:5d:88:e6:2b:47:90:d6:bd:be:e4:49:80:
08:e9:3b:4c:c7:a6:73:89:1d:76:a0:2e:84:05:b0:4a:5a:84:
69:5d:8e:37:0c:ad:33:08:e9:42:65:56:71:16:66:b8:6b:80:
ce:72:c7:32:d0:70:1d:4b:b0:52:f6:bc:11:e7:d3:3f:b4:43:
c5:0a:98:14:f4:3b:ea:db:ed:1b:88:81:b8:09:84:3f:7c:ef:
35:77:fe:36:c5:bb:00:98:97:84:30:86:ed:f7:8f:b5:96:e9:
50:31:44:4b:da:c0:a0:41:75:a2:ba:73:94:19:10:7a:31:7e:
89:11:24:86:66:70:04:82:6c:61:5b:86:5b:c3:eb:b4:aa:7e:
cf:8f:e3:eb:cc:a2:ea:1e:18:a3:a4:5c:b3:18:97:0c:76:62:
d3:6f:be:95:c8:51:ab:15:dd:65:71:b7:68:14:1d:ef:43:b2:
81:07:c6:3b:d9:7c:e9:2e:8c:cf:ed:83:8f:ad:b9:eb:d0:ac:
b0:a1:bc:89:e0:ce:af:5f:ef:91:3b:c4:f2:ac:05:bb:19:a5:
da:a3:c3:a1:a3:69:9a:7c:c0:96:0d:4b:2c:e4:6c:e7:97:f3:
ab:2f:49:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:21 2026 by rpki-client