Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
File: GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json)
Hash identifier: JwX96XLTnm7E7POVUjW+udAjbG+nGEeMnTyOvzKwIr0=
Subject key identifier: B3:31:96:4A:BC:9B:CB:8D:41:FD:B5:9D:28:C3:8D:BE:BD:39:58:87
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 019F92ECF52172CDD449CFAEDB7520421070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 07:00:30 +0000
Manifest this update: Fri 24 Jul 2026 07:00:30 +0000
Manifest next update: Sat 25 Jul 2026 07:00:30 +0000
Files and hashes: 1: CX4SjTdi-WVaIel19sRIG6HUUUw.roa (hash: UDsW/lOEequNbC4ieUO0oqmh57jt4K+cQMjTjOFaxBs=)
2: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: Yvw7qtPg4lSChlY9itFksQn9AntUiaK+aC2uzbsOPUs=)
3: Lh8IZMqEqiAwn2VYmeg9sVGCFEo.roa (hash: 3Z8PMQ8sh56/aP3O9W1H0byuePE1WYuRdcvV9nD8Q2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:f5:21:72:cd:d4:49:cf:ae:db:75:20:42:10:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Jul 24 07:00:30 2026 GMT
Not After : Jul 25 07:00:30 2026 GMT
Subject: CN=b331964abc9bcb8d41fdb59d28c38dbebd395887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:d5:68:54:9d:79:81:cc:86:6f:63:23:65:
fd:d4:03:75:97:db:55:f4:09:35:e9:ae:1d:8f:f3:
40:a4:5e:80:bf:d9:7e:4e:77:c7:0f:ed:3c:87:36:
c2:c7:1d:42:79:2b:56:70:dc:2b:56:a6:3c:59:07:
99:4f:af:5d:e3:cb:e6:a3:5d:56:98:6e:5c:09:97:
ad:5c:97:44:92:fa:63:85:ec:6d:b2:54:18:7b:b4:
65:e5:b2:54:ef:b1:7e:78:7d:ef:16:dc:aa:4c:51:
9a:bb:8f:8f:c7:3a:86:6b:c2:36:cc:9f:57:2c:20:
a8:74:55:79:b7:d4:11:6f:06:e1:00:19:31:c8:d4:
2c:d7:17:3e:a8:61:19:48:db:66:59:fa:75:5f:c6:
6a:eb:86:dc:f9:5f:27:c6:ff:83:9a:1f:a0:a0:04:
76:2d:2b:57:e3:b0:0a:d7:21:ee:96:d1:7c:11:30:
ca:1a:8a:87:e4:9f:a3:30:9d:91:51:ad:94:28:23:
29:ba:91:7e:42:65:c2:d7:32:a4:ad:c0:28:74:08:
df:04:15:f7:eb:f6:08:00:79:4c:b9:d2:61:99:64:
3f:20:86:56:54:c5:32:b4:20:28:4f:f5:1c:13:4a:
81:c1:11:ab:3e:93:1b:d4:de:89:4c:2a:bd:e1:9e:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:31:96:4A:BC:9B:CB:8D:41:FD:B5:9D:28:C3:8D:BE:BD:39:58:87
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bc:45:aa:83:84:84:2c:03:3b:cd:3e:0c:3c:b7:bc:37:50:
6f:bb:28:99:75:4a:cf:48:d9:1d:9f:88:6b:14:77:c1:84:07:
69:8c:c6:28:9e:56:19:58:f0:38:47:a0:bb:67:1c:47:26:77:
ba:4e:09:a1:3b:90:a1:88:70:de:e3:82:55:4d:3a:52:0b:52:
ea:86:bb:82:62:78:9e:1c:11:24:ac:de:65:4f:ac:52:35:20:
d1:23:0e:2a:28:f1:91:c4:ae:5d:3d:d4:f5:36:00:86:d1:9d:
f3:56:11:7c:74:16:49:14:38:77:8f:1b:6e:4d:52:b9:bb:74:
49:05:6e:ad:8f:38:72:c0:3e:10:af:40:5c:be:80:95:f2:11:
bc:b1:47:d7:62:29:ca:75:5b:58:ba:89:d2:26:87:df:95:a9:
df:c5:d4:7e:04:5a:1f:92:d1:09:e0:08:64:d8:47:06:6e:ae:
c1:5d:19:42:fc:2a:ea:e4:e9:5c:51:e4:94:80:61:6c:42:ac:
51:0b:1d:6b:9e:d9:f5:13:4e:f4:bc:1c:74:e2:dc:53:2c:fb:
96:f0:c7:c5:31:47:41:22:31:8b:06:5e:67:b1:5c:e2:83:f7:
ae:41:82:a5:99:6e:57:6d:53:7d:0e:32:2c:b7:29:d1:08:51:
91:57:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:49 2026 by rpki-client