Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File: GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier: vJhd6OlEpiiU5xqiHWOKP0m2P6V68EkZnNno65CAwGw=
Subject key identifier: 80:C5:80:A4:4A:54:03:86:EA:58:1C:01:23:0D:A0:D3:83:F2:7C:50
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial: 019F94DBEF1238C5507AE8411326B03966B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 16:01:09 +0000
Manifest this update: Fri 24 Jul 2026 16:01:09 +0000
Manifest next update: Sat 25 Jul 2026 16:01:09 +0000
Files and hashes: 1: 9PJJMzY2oUycU8l8cSSelJBMcWc.roa (hash: oL+z5SaUyU8viR3KBSssNRDGEAldy3Dx3YEcED4SCvw=)
2: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: VGLGQzdDH8VtusAvJ0IVV7z6F0FGr8HPmuM+NiMSmdY=)
3: sPW3SqhXQFkvyEdUczVqCrMoZZM.roa (hash: PP/JgUlM59r8wR9R5R4QZCwoOfZzBFE/FyC4nN3GGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:ef:12:38:c5:50:7a:e8:41:13:26:b0:39:66:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Validity
Not Before: Jul 24 16:01:09 2026 GMT
Not After : Jul 25 16:01:09 2026 GMT
Subject: CN=80c580a44a540386ea581c01230da0d383f27c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:15:da:85:ad:b0:65:86:39:a7:25:51:58:
92:81:59:73:cc:f1:de:44:5e:75:36:9c:86:b3:d1:
bd:a3:7f:c4:f5:3b:ce:a6:c3:b3:2c:02:bb:92:57:
f3:01:e8:20:e3:74:a0:6f:b5:48:1f:43:eb:77:ea:
70:8a:38:86:3e:06:a7:40:e8:73:4c:35:eb:7f:68:
6b:0f:e3:5c:24:00:d7:13:06:13:a4:13:57:95:ea:
da:ba:3b:55:b2:b9:25:72:b5:18:d7:cc:c8:0a:0c:
b9:e6:ab:63:8e:7d:5c:94:ab:dd:53:2a:cc:fe:19:
0d:45:02:31:a2:21:10:62:a6:1f:78:97:a6:76:ed:
95:f7:d9:dc:cb:18:a3:8b:64:0b:01:92:9c:e9:98:
93:41:ac:28:92:b4:75:7d:74:18:a0:91:42:25:b6:
16:f4:08:4d:24:c1:81:cd:f6:6b:3b:66:33:23:d9:
16:65:0b:1e:dd:86:54:ab:64:90:3b:2b:d0:ae:9d:
e1:ce:a1:8f:9c:78:39:d3:61:a1:8c:7c:7d:34:4d:
28:50:3e:c0:9b:2d:a9:71:09:f2:9e:3b:66:b0:08:
1f:1c:c3:f3:0a:03:a4:88:c2:a0:e8:d6:64:78:e4:
92:54:fd:ce:ff:33:b6:60:e5:34:3d:6b:42:69:c7:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C5:80:A4:4A:54:03:86:EA:58:1C:01:23:0D:A0:D3:83:F2:7C:50
X509v3 Authority Key Identifier:
keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:49:7c:0d:e1:3d:df:31:77:ae:e5:f6:ec:5c:44:78:18:f4:
c4:48:2e:cb:da:f2:4a:ea:af:b5:04:5f:2b:26:b9:e2:ae:94:
a0:88:ab:2e:38:a3:f9:25:5e:61:fe:0e:e4:a1:e5:05:de:bf:
a7:a8:04:a9:d3:94:ca:ac:d0:9c:62:fc:28:a8:ec:5b:d0:9c:
19:98:0c:49:3d:1d:53:17:80:9f:70:ee:c3:37:0e:d2:69:84:
fc:e7:6a:5d:93:17:cf:71:ea:47:21:53:8c:82:a5:d0:4d:2b:
e9:e1:dc:41:8e:a2:44:4b:23:da:b1:06:b2:ab:77:82:37:13:
45:0d:ee:71:57:20:36:69:ec:ae:3b:10:03:c9:22:1d:55:67:
5a:2c:38:76:0c:77:1f:81:07:a0:5a:e0:a1:00:9b:e0:0a:1a:
be:91:57:32:18:36:21:8b:da:50:d1:b1:1e:3a:d5:8a:31:2b:
2b:89:64:e1:c7:48:fd:c2:64:ee:42:dc:96:0a:e6:45:95:78:
74:ef:5e:1b:07:9d:91:95:3f:91:40:09:03:e4:a4:fb:f1:5f:
02:48:b7:50:a2:d3:47:64:22:0c:81:60:2c:d1:d8:3f:89:e0:
c0:bf:9e:34:b1:cb:ad:fc:1f:31:bb:fc:36:0b:9c:59:95:af:
03:cd:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:52 2026 by rpki-client