Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
File: gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json)
Hash identifier: U+cXPQa8iZ016qMZj/A96sNQt6CcjBooKcYpmXmRSSc=
Subject key identifier: 06:CC:67:3D:7B:3E:8A:1E:A8:7D:9D:76:76:DE:E6:5F:A4:B9:BC:93
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 019F935C00FA57269496B8942751BA1960F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 09:01:47 +0000
Manifest this update: Fri 24 Jul 2026 09:01:47 +0000
Manifest next update: Sat 25 Jul 2026 09:01:47 +0000
Files and hashes: 1: bCfnN8Cs-rhA4Q1_kWGUzS2fAKc.roa (hash: KNO75JkgNbMb91A1hmTO0xTL3a65pxvLADRxVDguCYw=)
2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: /xvn+sWcDQEtqVBz5+a4Qr/ZH3WVnXahl4ZQDRkKJ08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:00:fa:57:26:94:96:b8:94:27:51:ba:19:60:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Jul 24 09:01:47 2026 GMT
Not After : Jul 25 09:01:47 2026 GMT
Subject: CN=06cc673d7b3e8a1ea87d9d7676dee65fa4b9bc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:b4:0b:cf:60:cc:d1:91:91:87:71:d9:12:
48:71:15:e5:a3:d9:ae:42:65:96:08:56:b8:05:5d:
9a:5c:8e:43:1a:fd:53:7b:2a:02:44:90:c5:c0:88:
46:e2:8b:19:09:58:83:ad:26:dd:c9:7b:58:c3:98:
1e:a7:42:76:35:08:cd:f7:18:dd:9d:73:ab:ad:97:
3a:3e:a4:4a:3e:eb:f1:be:62:a2:da:ca:7e:ec:87:
e3:52:f7:70:6f:84:03:79:8b:ca:0e:9a:77:f1:b2:
39:94:64:ff:06:44:bc:c3:4d:d7:6d:bc:32:9a:4e:
b9:40:a4:2a:af:d4:83:e7:b1:84:e3:70:34:60:80:
78:79:1c:d5:0c:21:8e:9b:ca:84:3a:f0:4c:25:e6:
36:6f:6f:30:46:35:71:d4:b2:c3:99:9e:d0:08:57:
f0:d5:9a:60:43:71:41:08:fb:0f:cb:06:0d:4a:89:
66:9d:18:92:5e:92:39:f6:f0:76:ba:fd:5e:85:1c:
a5:7a:0c:78:af:d3:cc:0e:20:79:d0:74:27:4c:9a:
f4:f1:ac:e3:5e:52:e6:24:61:b6:48:59:25:2d:34:
5a:64:f3:73:81:ab:9b:9b:43:e6:b8:dc:c9:21:c2:
e6:af:01:fc:90:95:eb:b1:1d:b5:f1:99:62:63:9b:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CC:67:3D:7B:3E:8A:1E:A8:7D:9D:76:76:DE:E6:5F:A4:B9:BC:93
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cc:d4:5a:a1:d8:df:b0:c6:d9:eb:5c:22:a7:3e:ec:e8:69:
3c:10:2b:96:9f:ca:be:55:6c:40:fe:f5:18:ab:be:e9:5b:61:
1c:92:f9:d8:88:8f:7b:3c:ac:d3:15:b0:0a:ca:19:44:fa:26:
e0:44:fc:28:3e:9c:e3:88:1a:96:50:1a:ad:59:cf:7c:aa:12:
ad:1e:7e:32:fa:cc:c0:4d:d3:6e:b6:6b:9b:80:fc:15:57:4f:
63:8e:19:93:ff:63:97:55:45:6b:46:de:a2:7f:ed:2b:59:e9:
cc:93:e9:94:63:94:8b:d9:0d:85:01:6f:61:3a:13:0f:d5:77:
cd:82:43:ee:df:93:72:66:0a:2d:3d:cb:3a:8c:d4:e0:85:71:
68:97:79:45:07:77:01:0b:6d:5c:00:8b:a9:da:23:95:d7:83:
2c:da:05:ef:f1:f2:2d:ae:8f:49:03:e0:4b:17:30:34:31:5c:
99:31:f0:9d:d4:63:4d:1a:1a:da:79:00:12:3f:9c:b2:bb:a8:
d7:e0:58:28:1a:3c:95:f3:e6:06:8d:b7:a2:8a:e7:b3:08:c2:
fd:e9:70:95:d3:e6:45:a9:c2:07:a0:a4:51:ce:1b:32:9c:f3:
a1:ab:50:49:2b:8c:00:20:85:c0:bf:2d:e7:53:38:36:fa:ce:
00:3f:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:07 2026 by rpki-client