Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
File: gLWnciaEnxty0GO-Y4mX-wnK21E.mft (raw, json)
Hash identifier: BmLWYyjUW5yaIVESE6G/1fFtdwDPSD2RyNHZLVsSE54=
Subject key identifier: 7A:21:40:F4:F4:A2:F7:2F:5B:AD:25:CD:D7:A8:9A:E1:D3:1A:6C:B7
Authority key identifier: 80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
Certificate issuer: /CN=80b5a77226849f1b72d063be638997fb09cadb51
Certificate serial: 019F9059CA741B5B1181E7E6B5BC7B06AADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
Manifest number: D2
Signing time: Thu 23 Jul 2026 19:00:31 +0000
Manifest this update: Thu 23 Jul 2026 19:00:31 +0000
Manifest next update: Fri 24 Jul 2026 19:00:31 +0000
Files and hashes: 1: gLWnciaEnxty0GO-Y4mX-wnK21E.crl (hash: E+6iJZedXPfB1+SVa5nqTIqPcHNW9Imfka1HJ3WCXkc=)
2: nTAeOQ1yfLeE7UobuYd95qQsnDc.roa (hash: MGx/T2ybNPO76ocB/JBxy+Dt6X73selrSnb5nBMcig0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:ca:74:1b:5b:11:81:e7:e6:b5:bc:7b:06:aa:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b5a77226849f1b72d063be638997fb09cadb51
Validity
Not Before: Jul 23 19:00:31 2026 GMT
Not After : Jul 24 19:00:31 2026 GMT
Subject: CN=7a2140f4f4a2f72f5bad25cdd7a89ae1d31a6cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:1e:09:6b:8c:e1:47:a8:a0:bb:8c:f5:4e:
e7:e3:15:4e:d7:fd:3d:64:92:e6:f9:cf:c0:52:90:
38:b0:d1:2d:1b:da:d4:48:97:26:b0:6a:fa:7f:15:
e0:ac:7d:5a:8a:43:3e:bd:cf:df:ef:e2:54:b2:7e:
a9:93:1f:7c:19:b0:e7:07:c3:2d:b6:13:7d:3e:3c:
4b:28:46:26:49:fd:3e:d0:43:04:63:e4:a5:8e:7e:
86:4f:6d:bc:91:c0:48:11:4d:78:9e:10:c1:81:67:
90:f8:6b:b8:42:4c:86:6a:a9:a1:11:b8:c0:df:2c:
ab:f0:81:66:02:3b:b7:2e:fd:89:15:f0:a6:5b:5f:
60:a4:fe:a7:61:f9:69:31:4f:8e:fb:07:d7:1e:d7:
07:13:4d:04:d8:c6:e6:78:7a:f5:22:51:22:33:b6:
c8:57:aa:ef:2a:3b:9c:65:be:27:77:f5:e3:65:45:
ad:6f:ac:03:c5:05:09:1d:65:c8:fa:36:03:10:c4:
0d:e9:31:29:34:7f:21:52:62:fd:c7:ef:19:da:a4:
74:e4:c5:f3:85:8f:9b:1e:f6:21:1f:ee:b7:f5:5a:
cb:52:9e:c3:08:cb:7b:98:f0:26:94:88:56:97:11:
a7:8b:78:fe:5c:25:a9:2c:ba:af:35:8a:52:75:ed:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:21:40:F4:F4:A2:F7:2F:5B:AD:25:CD:D7:A8:9A:E1:D3:1A:6C:B7
X509v3 Authority Key Identifier:
keyid:80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:73:0c:f2:f0:3d:46:2c:e4:9b:40:cf:ba:e6:58:85:69:10:
64:9a:f2:86:ff:f8:04:94:c9:8c:7f:ab:ec:5a:95:21:ec:52:
e7:58:39:92:0e:5e:40:3c:3e:4f:5b:3c:74:8d:89:ce:3c:8f:
e4:47:bf:5c:dd:fd:dd:50:ff:c5:ba:45:ec:b2:96:ad:22:23:
43:01:04:67:f6:b5:3b:d3:51:b0:68:2f:57:9c:f8:eb:56:f6:
8a:dd:1e:96:1b:b3:98:34:fc:bd:3a:38:a4:5d:33:eb:e2:6c:
f2:d7:6e:8e:4e:56:31:1f:52:c4:5a:21:a4:4a:8b:9a:bd:13:
b1:9a:d7:d3:c2:e9:70:53:fa:78:bb:be:fb:02:b8:a0:c9:86:
a2:b7:a8:c7:d3:f5:3a:f3:42:67:82:4d:36:a6:5c:29:eb:b1:
a5:f9:fe:0d:e7:9c:4e:60:97:31:03:ad:ef:7f:0b:c1:55:13:
6d:f4:af:83:eb:aa:2e:cb:67:0b:85:cb:a6:39:a2:d2:ac:36:
e7:c5:2b:9d:23:9d:d1:d5:b1:8c:7b:e7:94:5e:c5:1a:fb:8e:
25:fa:f6:c3:56:46:42:bb:26:9a:f7:26:af:10:98:15:14:24:
15:eb:93:1e:90:46:32:22:b5:71:bc:18:fa:af:a8:66:06:07:
98:03:cd:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWcp0G1sRgefmtbx7BqraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYjVhNzcyMjY4NDlmMWI3MmQwNjNiZTYzODk5N2ZiMDlj
YWRiNTEwHhcNMjYwNzIzMTkwMDMxWhcNMjYwNzI0MTkwMDMxWjAzMTEwLwYDVQQD
Eyg3YTIxNDBmNGY0YTJmNzJmNWJhZDI1Y2RkN2E4OWFlMWQzMWE2Y2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jgeCWuM4UeooLuM9U7n4xVO1/09
ZJLm+c/AUpA4sNEtG9rUSJcmsGr6fxXgrH1aikM+vc/f7+JUsn6pkx98GbDnB8Mt
thN9PjxLKEYmSf0+0EMEY+Sljn6GT228kcBIEU14nhDBgWeQ+Gu4QkyGaqmhEbjA
3yyr8IFmAju3Lv2JFfCmW19gpP6nYflpMU+O+wfXHtcHE00E2MbmeHr1IlEiM7bI
V6rvKjucZb4nd/XjZUWtb6wDxQUJHWXI+jYDEMQN6TEpNH8hUmL9x+8Z2qR05MXz
hY+bHvYhH+639VrLUp7DCMt7mPAmlIhWlxGni3j+XCWpLLqvNYpSde1TTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHohQPT0ovcvW60lzdeomuHTGmy3MB8GA1UdIwQY
MBaAFIC1p3ImhJ8bctBjvmOJl/sJyttRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0xXbmNpYUVueHR5MEdPLVk0bVgtd25LMjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80NjQ0NzMtMzY1OS00MTNkLThlMGEt
NTY5NzBhZGNkMGFmLzEvZ0xXbmNpYUVueHR5MEdPLVk0bVgtd25LMjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80NjQ0NzMtMzY1OS00MTNkLThlMGEtNTY5NzBhZGNkMGFm
LzEvZ0xXbmNpYUVueHR5MEdPLVk0bVgtd25LMjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3MM8vA9
Rizkm0DPuuZYhWkQZJryhv/4BJTJjH+r7FqVIexS51g5kg5eQDw+T1s8dI2JzjyP
5Ee/XN393VD/xbpF7LKWrSIjQwEEZ/a1O9NRsGgvV5z461b2it0elhuzmDT8vTo4
pF0z6+Js8tdujk5WMR9SxFohpEqLmr0TsZrX08LpcFP6eLu++wK4oMmGoreox9P1
OvNCZ4JNNqZcKeuxpfn+DeecTmCXMQOt738LwVUTbfSvg+uqLstnC4XLpjmi0qw2
58UrnSOd0dWxjHvnlF7FGvuOJfr2w1ZGQrsmmvcmrxCYFRQkFeuTHpBGMiK1cbwY
+q+oZgYHmAPNRg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:26 2026 by rpki-client