Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: bV3I8yCOkWI5hqwIOjKOadTKwwiYjF7zo6CwGoVl2/Y=
Subject key identifier: D8:3C:0A:43:F0:45:34:8C:37:95:E9:6D:99:E7:A7:5C:27:B5:33:97
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 019F9391CE8764143D532980CBC74DFB5B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 125E
Signing time: Fri 24 Jul 2026 10:00:33 +0000
Manifest this update: Fri 24 Jul 2026 10:00:33 +0000
Manifest next update: Sat 25 Jul 2026 10:00:33 +0000
Files and hashes: 1: ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa (hash: DP27/a5o1Ym+vesDLFqV0Tua4ny+ds0/pH34jhmErS8=)
2: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: gTf/zgju8maVPpRQ8PttOSqX/hHKcSkPKWSUfUCq67s=)
3: Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa (hash: KqQ8TKxBYl3JumzrSj+0qt5zeDJPsxKpAnGsc38qwpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:ce:87:64:14:3d:53:29:80:cb:c7:4d:fb:5b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Jul 24 10:00:33 2026 GMT
Not After : Jul 25 10:00:33 2026 GMT
Subject: CN=d83c0a43f045348c3795e96d99e7a75c27b53397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:38:a9:23:5e:0a:a5:71:81:6a:59:73:89:
8b:8d:24:1d:20:55:d1:c9:b8:76:79:2c:0c:21:a0:
d7:82:9f:50:a5:ba:18:88:06:3c:8d:7d:f5:81:d9:
af:25:a2:98:39:00:6a:8f:41:6c:d6:db:cc:9b:0a:
82:80:10:6a:2c:0d:e9:ce:97:3f:f7:dc:09:f5:fd:
22:2c:d5:e6:e2:6a:80:08:81:34:1b:ef:5e:5f:6d:
45:f5:8b:b5:12:ed:00:f1:06:6b:c9:b0:7a:97:9c:
89:2d:dd:06:dc:ed:52:4f:5c:80:0f:df:ab:8a:6c:
f9:26:fa:44:65:a3:13:88:a8:9e:23:ff:36:46:a0:
07:28:cb:97:9a:97:9f:5f:75:dc:cf:e5:29:9c:2d:
fc:a9:39:81:c3:4c:da:38:62:64:c1:6e:51:36:19:
1a:c4:5c:1c:88:b5:f7:7f:42:8a:9c:ea:21:87:25:
50:c9:ef:5f:bc:b3:c4:6c:64:c6:38:8f:6f:ee:20:
5c:3e:df:2b:45:8d:e0:86:4b:1c:e9:ce:90:58:17:
98:2e:ff:46:2a:ff:53:e3:e9:83:70:01:ac:90:58:
24:70:14:6b:40:f9:31:09:c1:15:58:1b:fe:99:dd:
28:37:6a:ac:c6:63:19:e8:86:15:c5:4d:57:e7:2f:
74:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3C:0A:43:F0:45:34:8C:37:95:E9:6D:99:E7:A7:5C:27:B5:33:97
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ee:20:27:31:cf:88:b9:58:ae:4d:ae:71:16:c3:5b:9c:59:
a9:cb:83:7a:77:53:89:97:71:dd:74:1d:ec:bb:bb:72:30:62:
20:76:fc:79:1d:8a:60:e9:6a:66:6b:c5:f9:a7:49:03:15:4a:
24:2a:93:db:2d:e6:2e:0a:81:76:c4:25:cc:ff:b0:a7:db:dd:
77:df:29:af:4a:bb:b6:7f:33:4e:81:60:87:ca:a0:38:ee:42:
96:ed:31:b8:02:9b:75:3d:cf:32:18:64:51:a7:41:53:b2:bb:
f7:b0:94:17:2d:ac:7d:0b:3f:37:64:fb:14:a7:42:0f:cc:c4:
f3:46:75:de:cb:e4:31:ce:b1:e1:c9:1a:6f:b3:3d:38:43:85:
f7:da:34:55:30:30:34:e7:79:15:f3:fe:df:e2:38:95:69:49:
c0:23:a8:b0:d7:cf:7f:2a:c7:3f:92:2c:7b:d2:a3:4c:ec:33:
2c:ff:76:38:e0:3d:f0:6a:fd:30:f1:3e:86:f6:a7:1e:2d:e6:
98:dc:3a:24:4f:b5:1a:86:9a:61:1e:5d:20:aa:4e:51:98:c3:
97:c6:f7:90:20:34:8a:d6:e2:6b:3f:95:e9:06:a5:be:9b:6e:
0c:52:dd:d0:22:3f:6f:6e:c2:cb:83:89:0b:dd:dc:f5:02:7d:
ce:7f:43:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:56:22 2026 by rpki-client