Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: Ym6ltt8KimEHEyrRfflQPMnwtbRUjRTG27a2LzqpU2U=
Subject key identifier: 65:1E:42:99:DD:9C:E1:7F:2B:0E:C2:BB:C1:34:C0:C5:4D:C1:F5:44
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 019F91A45C44FA005AD0E9DDABF6A9118260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 16F6
Signing time: Fri 24 Jul 2026 01:01:35 +0000
Manifest this update: Fri 24 Jul 2026 01:01:35 +0000
Manifest next update: Sat 25 Jul 2026 01:01:35 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: ashMZYN/h5ptZtCdrrg++Vo04KamuwjTHLMGfgi3IfI=)
2: HdVf15BxvaUoRmDkU2WAnUzqeEI.roa (hash: E8gc8EoEirC9y0HgRWdI29lZIe/DH5y9+MNG4gOoc34=)
3: UoTm2cjOxeWwzsTm_tIMM9wPv40.roa (hash: adnzRNtY+kmU7Hbc2Pe9kRN3c/i17qsS4UkPfFW6Zac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:5c:44:fa:00:5a:d0:e9:dd:ab:f6:a9:11:82:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Jul 24 01:01:35 2026 GMT
Not After : Jul 25 01:01:35 2026 GMT
Subject: CN=651e4299dd9ce17f2b0ec2bbc134c0c54dc1f544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:d4:3c:ac:57:b6:b0:8c:8c:38:1c:ef:c4:
1d:83:d2:0a:5c:dc:4d:18:df:36:28:51:f8:84:5a:
d3:7e:c4:9c:4a:17:58:85:14:23:28:d7:7c:d4:5f:
36:01:a0:60:d7:7f:98:79:f7:88:6c:fe:39:aa:fc:
73:89:bb:40:1b:14:8e:e3:1f:26:1b:5e:bb:ee:b7:
cf:b3:26:f6:27:b2:4e:0c:f3:ad:a9:a4:ca:ff:da:
44:18:56:23:9f:67:47:53:ce:91:74:38:b3:ab:93:
0a:3c:52:8c:a8:b9:58:8a:a3:5a:2a:db:2c:36:e1:
ed:13:1b:5b:c4:23:08:68:3e:76:b4:0a:70:ea:c6:
9e:9b:33:b9:55:5f:d4:6a:71:b3:e1:65:a5:d2:88:
b5:1a:74:29:2c:13:da:a2:76:7d:be:1a:28:d4:2c:
1b:24:94:0e:98:57:6c:fe:7e:8c:44:63:d9:4d:ca:
47:c2:fd:f5:e7:fb:ca:6d:da:16:ea:06:a5:9d:2b:
6b:e5:1b:95:19:e6:bd:14:9d:d5:4b:5f:9b:62:bd:
4a:c2:75:31:84:74:3e:62:83:0c:bd:fd:c8:33:97:
2d:98:16:3c:62:c1:e5:66:02:47:02:df:8d:47:8b:
46:d1:4f:e2:db:bb:28:06:06:0e:aa:a7:da:bc:c8:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1E:42:99:DD:9C:E1:7F:2B:0E:C2:BB:C1:34:C0:C5:4D:C1:F5:44
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:99:d1:cd:f6:4c:54:83:90:58:14:36:29:10:e6:a8:40:dc:
2d:fc:55:36:a4:8b:87:b3:2e:92:9e:c3:0a:d7:d2:fc:26:2a:
4f:40:8b:71:ce:82:8b:e0:b2:24:1c:b3:b5:ff:e9:4f:03:2d:
b3:19:e5:5c:f2:0d:ba:5d:00:03:f8:42:ce:b4:cb:00:fa:67:
6e:43:d9:30:a6:76:c4:31:1a:75:b5:c2:f4:27:d2:33:39:62:
3d:dd:75:b1:64:d2:d6:61:fe:94:9c:89:f9:35:38:b4:a1:8a:
cc:1a:ab:5d:88:4e:cb:5e:ab:83:38:9b:f5:fe:f4:de:25:b0:
47:24:fc:f8:9b:96:6b:f7:ff:a6:73:97:38:71:90:e9:24:1e:
a0:62:9a:57:77:cc:9b:a4:f4:10:d0:c6:be:95:90:68:7a:6e:
28:2d:b3:24:f7:f0:c1:ba:ad:6f:93:f4:cf:dc:23:d4:78:9b:
7a:02:1f:29:15:38:da:8d:13:95:7c:32:b3:e2:d1:0b:b7:8a:
f2:98:a3:55:da:09:43:a6:ad:db:12:75:59:f8:f6:b4:79:a6:
69:83:1c:d7:b9:f2:6a:26:90:b4:a8:83:70:c8:5a:74:a0:1c:
bc:d7:63:4c:b7:3e:43:ae:2a:a1:47:5a:c5:5c:c6:bc:71:69:
65:a5:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:04 2026 by rpki-client