Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: QxCDp3HBEwFvV8bbk6/ucOrtNP43KdftNIiYtIrEKfo=
Subject key identifier: EE:37:13:46:5A:71:D5:04:07:3B:5F:AB:65:4B:3D:9E:7D:F9:C7:D9
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 019F95B6E64FB12D4D400D328E1AB38F7E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 14EA
Signing time: Fri 24 Jul 2026 20:00:19 +0000
Manifest this update: Fri 24 Jul 2026 20:00:19 +0000
Manifest next update: Sat 25 Jul 2026 20:00:19 +0000
Files and hashes: 1: MKLnBwEoTvJQ6Ll9HAStk_6b-lo.roa (hash: UcMYN8ihICS5eRjwAvcwUGC2jCQeNNKHfqsuNIFnBhE=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: z7hhzM5r7ocTyjd3HEFk9afvuDpOgJJp2cVx3848V6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b6:e6:4f:b1:2d:4d:40:0d:32:8e:1a:b3:8f:7e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Jul 24 20:00:19 2026 GMT
Not After : Jul 25 20:00:19 2026 GMT
Subject: CN=ee3713465a71d504073b5fab654b3d9e7df9c7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:ca:5e:11:2d:19:31:dc:cd:fb:eb:fd:0f:
7e:b7:a6:33:d5:e3:7b:2a:68:8d:23:6d:4e:2c:7a:
b6:0e:4c:ab:7d:9f:81:bb:14:9c:e2:ac:82:c8:8f:
2d:04:23:21:61:94:c3:f3:f1:1c:3d:2b:04:26:04:
62:f3:37:77:0f:a3:8d:ee:21:e3:fc:d8:68:de:b2:
5c:9d:41:00:59:f3:c2:da:72:5c:1b:4f:8b:6b:cf:
c7:03:2c:bf:b3:7e:55:de:19:1b:d5:f3:7b:c7:6b:
9e:3a:57:de:a4:88:ce:f7:10:e5:1e:d9:d2:bf:62:
a7:62:bc:8a:3d:3c:a2:4a:8f:6a:35:7e:1a:1d:36:
48:3a:3f:7d:16:89:16:5b:95:ab:ab:e2:40:d9:d5:
23:72:0b:f1:f8:72:07:51:63:c6:e3:06:e8:fa:f4:
e8:3d:2f:91:59:c6:5b:e3:1f:9d:2a:6a:f6:36:06:
e4:35:3c:5a:6c:d0:5a:ac:2a:8a:6d:b1:38:5f:e6:
2a:1e:0c:5d:8f:5e:52:f5:1a:0a:bf:a1:0c:ba:52:
1f:34:ae:25:59:b0:2f:e2:b8:5f:eb:80:2a:d1:0a:
91:96:6f:37:bd:24:19:be:35:b2:1f:cb:7d:21:94:
c8:4f:aa:e8:4a:04:91:0a:52:6c:74:3e:47:60:49:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:37:13:46:5A:71:D5:04:07:3B:5F:AB:65:4B:3D:9E:7D:F9:C7:D9
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2c:a6:55:7b:ed:bd:f0:7f:e1:b0:08:e7:4a:09:8e:ec:89:
ce:38:d6:61:e9:53:89:57:22:e3:c4:0d:56:d7:ff:ae:33:c5:
0d:3f:2c:8d:4e:09:c6:02:36:a8:97:45:44:33:d8:af:72:33:
d1:ac:66:43:77:8d:1f:65:3a:a5:46:52:5e:fb:d8:0f:ac:a2:
c5:8d:cc:7e:1b:35:1f:3a:c9:da:5d:3a:ef:e9:72:49:3a:48:
11:93:9f:34:f1:fe:e6:18:f4:7c:00:fc:7e:15:b9:85:9d:7e:
c7:a2:36:3f:d8:57:1e:d7:f7:ea:b4:d6:36:1a:19:d4:d7:2b:
84:18:d9:dd:a7:80:33:46:ea:05:d8:5c:e0:73:9a:cb:01:e6:
6f:02:fe:e0:10:0a:d9:6d:93:ec:b8:f3:db:ae:30:71:b6:40:
11:75:07:b8:55:c4:68:c7:22:b5:6e:b0:04:82:81:59:c5:4e:
87:2a:fb:c4:04:13:58:19:16:ec:b9:fa:88:a5:2e:12:58:79:
1e:bd:74:39:8a:60:6f:e7:4c:d2:a0:2c:fa:a9:b2:e9:41:0e:
1d:0a:bd:8a:92:75:bc:fe:ba:43:b2:82:8e:53:37:65:63:60:
ad:c0:0f:56:0b:74:0b:4d:34:6c:b0:af:12:63:78:65:45:42:
e5:e3:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:35 2026 by rpki-client