Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier: uyIPsDiXZJzu8nJRifKQunUpeFaSdNPY9fb3rT2zO0o=
Subject key identifier: 68:03:71:27:E0:C4:88:36:94:51:31:CE:45:4C:EC:99:FF:FB:12:61
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 019F9323C73D6F9A78F359FE2863BD0535C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 08:00:23 +0000
Manifest this update: Fri 24 Jul 2026 08:00:23 +0000
Manifest next update: Sat 25 Jul 2026 08:00:23 +0000
Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: l9ygNen9ULcvlgPqtWkUOsrVqF5kmeDiTgCaMsHdC4Q=)
2: cXNWLJ-fheZVPTHqnxKr5qEyQiI.roa (hash: X4rdPWY18bogslRUxkmtUVkAapWRBduOj/tJgoCH118=)
3: hwehb2jiu3a77T6FcjmviTy6QbQ.roa (hash: /bg0v2TYmrbSPAxogweq6+6+Nt4ijd19YXkzkd2haPo=)
4: i220VObPvHT4HgCF-uOpmI807FY.roa (hash: s9QayADVhAmQKcOJ9dlrMCwrdZV1G0CVNvgi0G197E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:c7:3d:6f:9a:78:f3:59:fe:28:63:bd:05:35:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Jul 24 08:00:23 2026 GMT
Not After : Jul 25 08:00:23 2026 GMT
Subject: CN=68037127e0c48836945131ce454cec99fffb1261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c3:6d:f6:1c:91:66:08:71:c4:ec:3f:29:44:
50:5b:5b:d1:35:bd:86:1a:20:66:ca:28:45:18:89:
64:d2:1c:37:3c:e9:1b:8d:e8:0d:68:ca:48:1b:79:
db:50:0f:ad:03:00:c4:a6:48:9b:72:0d:7a:b0:18:
55:23:c9:3e:9c:df:be:d1:ce:80:d4:d9:fd:a7:64:
09:a8:cd:5d:5b:77:ef:80:7a:ed:c3:84:4f:33:f8:
6f:0a:18:44:cc:a5:33:d8:e3:c6:b9:da:a7:ac:92:
70:40:80:d8:ce:65:03:71:28:5a:24:10:30:d5:c8:
5f:59:56:c9:ac:f4:da:ef:1f:ef:12:0d:ff:44:86:
38:4a:c5:0d:3d:52:3c:c4:d9:f2:c7:0f:6d:e9:a8:
56:e6:e4:63:67:2f:ca:89:0b:20:c3:f1:98:89:57:
5d:e3:57:d3:3d:23:7d:ee:05:f3:d9:1d:08:82:f5:
f9:72:b2:a5:83:7d:37:a6:cf:33:5a:22:70:d3:67:
6f:27:02:13:19:7e:e7:70:93:80:23:64:4f:7c:02:
9c:ce:1d:94:48:1c:a7:dc:69:0c:32:90:01:c1:3b:
7e:96:4c:35:fc:25:29:d8:61:f9:02:29:a8:40:85:
27:4a:52:d7:d0:e8:77:36:5c:c3:0f:54:6b:10:c5:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:03:71:27:E0:C4:88:36:94:51:31:CE:45:4C:EC:99:FF:FB:12:61
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ab:63:10:80:c3:18:ab:20:cd:6a:4d:bc:04:10:44:60:0c:
b8:c0:73:35:6a:a9:8f:bb:ae:f1:9e:4c:b1:cf:b8:6b:29:7b:
23:92:80:a4:a8:1b:57:7b:13:40:7e:70:6d:80:00:6e:27:59:
11:e7:d1:d6:2b:f0:f2:e6:21:99:95:ed:08:ec:08:a2:0d:5e:
ef:27:9b:b8:88:22:bc:b7:07:5f:c6:a0:f9:f6:e2:fa:80:11:
6c:3a:30:ac:48:71:54:fa:ac:3a:bc:1f:55:09:80:5d:f8:cc:
6f:93:49:bf:45:b3:e7:b8:14:83:20:ac:f2:27:f6:80:26:ce:
03:73:02:80:0b:39:23:cc:c7:7c:76:a9:ab:6a:6b:35:61:df:
e1:56:e7:41:ac:22:3d:a4:21:e9:82:79:9c:3b:5f:1b:14:20:
c1:58:f1:e7:84:7c:c8:85:3b:fa:d0:8e:24:2e:cb:7c:4e:b0:
77:8a:3c:e4:03:c4:a7:79:d9:e6:9b:7f:f6:a8:8c:fb:a0:02:
98:cd:d9:4c:df:a1:a1:41:66:cb:86:6c:1a:3c:9f:c6:79:0a:
17:d3:8d:dd:ff:13:10:16:fe:d8:a3:59:06:34:fd:d5:77:de:
9c:63:58:ae:ef:fb:7a:96:33:32:4b:15:e5:97:b6:3e:46:e0:
f1:1c:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:20 2026 by rpki-client