Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: GTr4m9kLvy30xHim8KngxwRvsTKa8cFGxVPXwOlXOrQ=
Subject key identifier: 32:29:B6:99:C6:C9:31:8E:AE:07:C6:F6:5F:39:F5:4B:4C:F0:47:0D
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 019F92B5D3881056E5D4979EE07774980EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 06:00:17 +0000
Manifest this update: Fri 24 Jul 2026 06:00:17 +0000
Manifest next update: Sat 25 Jul 2026 06:00:17 +0000
Files and hashes: 1: Cms4_2kxSzeRcRSIA9wB43-LvT4.roa (hash: NlxgHVdUZqUs6S+kYTnLVRbbSz1aQACOBdzclkEtqQE=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: zPKN8TmwhzGRmC/qrKZe5QpS3IRiWR8CsvaptkezOyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:d3:88:10:56:e5:d4:97:9e:e0:77:74:98:0e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Jul 24 06:00:17 2026 GMT
Not After : Jul 25 06:00:17 2026 GMT
Subject: CN=3229b699c6c9318eae07c6f65f39f54b4cf0470d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:65:42:96:fd:04:85:3f:09:9f:d9:4d:64:56:
12:d2:1a:97:b8:83:d8:a0:33:01:00:83:2c:ec:00:
95:42:aa:28:c9:f7:21:e0:da:d4:af:00:b1:d7:ce:
30:c6:b0:b3:76:b7:0b:6c:c2:54:0e:b4:68:0c:7d:
50:0e:fe:10:45:ea:37:0c:0e:17:fa:0e:b4:db:c5:
18:08:f2:40:77:14:c1:fa:fd:ae:00:6f:6f:c2:a7:
15:8f:89:3f:7b:5d:37:c9:72:6d:09:6b:4b:ed:85:
e8:a5:d1:3f:e7:fe:01:55:17:93:ad:1c:a2:2f:48:
9e:7e:3b:17:aa:1f:10:4f:60:e2:16:61:38:7f:63:
c0:db:53:19:6c:d3:9b:a4:e8:41:cb:20:a2:d9:72:
cd:82:80:e3:5b:81:78:2b:91:e7:6d:94:dd:c4:72:
e6:ed:cf:8d:e1:97:be:ec:36:5e:ba:24:ba:3e:37:
0c:f9:10:b0:d9:58:bb:8f:66:5a:4f:ba:49:a4:c4:
1b:9d:c4:93:9b:41:c4:f4:5b:de:18:26:cc:1d:a8:
56:29:35:c5:d7:5b:5f:70:de:c5:43:0f:20:94:cc:
52:35:4e:e0:4e:b2:ee:ef:d8:86:82:14:08:b1:48:
8d:d2:fd:7f:a0:2a:f2:32:b4:d6:04:d8:fb:01:39:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:29:B6:99:C6:C9:31:8E:AE:07:C6:F6:5F:39:F5:4B:4C:F0:47:0D
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:e1:dc:50:8d:ca:91:94:c1:1d:ef:ba:ae:8c:99:93:5c:98:
6b:f3:d8:54:82:2d:83:c6:6d:ec:19:a3:c1:c4:7f:a6:af:f0:
6c:7c:58:4a:fe:09:dc:8f:b6:1d:fb:8e:b6:99:ee:27:6b:29:
a8:c1:df:e2:f6:5f:62:7c:82:db:9d:18:bb:62:2a:c6:43:d2:
72:39:11:59:e1:ac:bd:5e:5f:e4:6a:c6:bb:04:e6:08:f3:f8:
ac:55:19:6e:c4:bf:24:35:0e:e5:7d:e8:58:95:1a:44:79:2e:
6f:ad:b9:08:73:49:19:19:ff:6d:be:b7:fa:cd:4b:f1:78:89:
c6:25:bd:31:0c:d4:95:d4:28:9d:76:ee:ba:75:50:78:db:a0:
27:80:e7:4a:77:ec:b8:c9:7c:35:75:7d:66:90:76:85:16:ae:
e2:3d:71:01:a0:d0:89:8a:9a:f3:b2:61:f1:53:87:8b:b2:ef:
62:f6:ca:c2:3b:a7:26:17:75:d0:72:94:bb:32:05:65:a7:09:
29:24:7a:f4:c3:dd:5b:c0:26:dd:69:21:e1:c7:b7:fc:ba:64:
65:7b:f1:37:90:9a:e3:cc:5c:58:e7:f1:b0:dc:31:7b:22:f7:
44:c3:56:7b:18:3a:40:52:99:ac:48:99:ce:de:3d:3b:5f:bf:
08:2d:a8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:58 2026 by rpki-client