Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier: eP3LnRULEb/skE+dt/YFqVAfbeYJc6zqqhcy3qbKHt4=
Subject key identifier: D3:44:B7:1B:79:28:F6:E1:5A:D0:1E:DC:75:93:9A:EF:43:74:11:BB
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 019F92B5DAEE4EE0BBFF4456F030016F6589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 06:00:19 +0000
Manifest this update: Fri 24 Jul 2026 06:00:19 +0000
Manifest next update: Sat 25 Jul 2026 06:00:19 +0000
Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: 1Nwf02xONr2XrxPchheuD3dhfSx9B3zky6+cdBYbtRY=)
2: TF0dSC0QLLTkTEwt9luFemTVApI.roa (hash: diyfKwUJkYthuVIKND7w8w0AKfmlP8CVwmqLuMhQpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:da:ee:4e:e0:bb:ff:44:56:f0:30:01:6f:65:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Jul 24 06:00:19 2026 GMT
Not After : Jul 25 06:00:19 2026 GMT
Subject: CN=d344b71b7928f6e15ad01edc75939aef437411bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:98:7a:00:07:39:a4:3d:79:7e:2f:a8:e7:
4f:2d:a1:07:08:48:3a:c0:dc:7d:4a:e5:cb:54:f1:
fe:62:41:0e:75:e9:07:ef:f5:43:22:b1:82:e9:6b:
47:5e:84:d3:71:25:7e:3b:3d:a1:15:ec:27:d9:51:
18:94:07:bd:14:cb:78:f2:b8:43:46:d4:24:f8:a0:
61:1e:8e:9b:a9:8b:5d:3d:bc:73:05:68:a8:9a:a8:
e0:87:e1:14:e0:50:16:05:f1:90:ce:4e:a9:e5:47:
5b:79:16:bf:7a:7d:e6:61:88:57:16:55:20:d1:9b:
3b:cc:8f:e0:8d:c8:47:f9:b8:ab:63:26:ed:89:45:
dc:37:33:06:d8:f2:df:c1:0f:2b:39:f1:a1:b8:07:
85:fc:4a:18:a6:54:8b:9f:9d:e2:60:c3:d0:11:64:
ab:6b:aa:d1:ce:b9:a8:ae:c2:c3:be:40:49:01:d9:
99:e2:4b:45:e4:8f:f8:c6:5a:b5:9a:01:a9:40:f1:
a1:c0:d5:0f:f4:2f:3c:41:4e:76:3a:f1:78:84:07:
dd:f5:af:ac:ed:78:d7:e9:b7:f0:7d:df:a7:bb:e4:
47:2b:91:46:c7:67:78:31:70:13:0e:ff:2b:57:89:
a3:b7:de:83:3c:6b:2a:17:71:07:1a:6d:fe:28:bc:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:44:B7:1B:79:28:F6:E1:5A:D0:1E:DC:75:93:9A:EF:43:74:11:BB
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:18:f7:fe:f6:c3:48:25:fe:c4:4e:10:d3:03:1b:de:5e:33:
fe:43:9a:72:c5:7c:6a:d0:9c:6a:15:ba:3a:62:65:5f:be:d6:
85:b4:ca:d9:89:b7:32:1b:40:3d:d8:23:47:cd:11:e1:67:b9:
d0:97:77:51:39:14:ae:a1:4e:18:6f:77:98:54:62:36:26:a0:
64:0c:68:7b:cb:da:8c:e5:67:1c:1e:fa:cd:c6:28:5b:e7:4c:
63:7e:d0:ef:b9:6d:85:64:51:05:e8:e2:a7:01:ae:6d:21:f3:
af:da:e2:38:42:6f:d0:74:2a:c8:67:5f:ca:54:05:1c:4c:50:
6c:03:0f:17:34:44:fa:cf:99:77:70:36:07:9e:aa:9f:af:eb:
58:a1:cf:84:15:f2:bc:d0:f3:e7:71:de:25:9a:ce:4f:28:53:
10:b0:e4:75:06:dd:c5:6f:79:19:36:4e:b5:f6:73:bb:16:76:
25:7b:0b:54:68:b6:fd:b8:e2:eb:8e:4f:5a:2b:e9:61:c3:9b:
eb:62:01:42:de:a0:62:fb:a0:e4:9d:ee:0d:6c:06:80:93:70:
60:1d:ff:12:a6:28:de:dc:16:b3:da:6a:33:a0:e7:98:03:49:
b6:69:e9:03:b5:9f:82:3c:5c:d7:2a:3d:f2:65:4b:d9:e1:7d:
15:77:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:42:13 2026 by rpki-client