Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: jscryo4rnJ7lzcTDQMAJZdVccFajqjgGmu6UWCi/nN8=
Subject key identifier: 8E:17:DE:A6:5C:6C:60:CC:6B:48:04:26:0B:39:F2:FC:20:EF:9F:36
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 019F973889D084569CF24773E565226AAD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 19C5
Signing time: Sat 25 Jul 2026 03:01:32 +0000
Manifest this update: Sat 25 Jul 2026 03:01:32 +0000
Manifest next update: Sun 26 Jul 2026 03:01:32 +0000
Files and hashes: 1: E2vGMfTh0_d3hFyTF_vwxF5KrPA.roa (hash: DBcvB5VPooiTXjGKSVqOi+hUE2hv4iu9s06iz8E2+EI=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: Kuwo5aXtJLcPN/fGNP9aLOMHTjinKP7Jg7oH9Qq0nlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:38:89:d0:84:56:9c:f2:47:73:e5:65:22:6a:ad:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Jul 25 03:01:32 2026 GMT
Not After : Jul 26 03:01:32 2026 GMT
Subject: CN=8e17dea65c6c60cc6b4804260b39f2fc20ef9f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9f:e3:8a:89:ec:0f:fa:ac:43:f7:e1:6a:3e:
db:83:a4:71:92:e7:4d:8f:ea:06:f3:b4:42:55:73:
bc:e8:b5:f0:c8:11:ce:69:e5:5f:5f:a1:de:1c:00:
cc:e2:37:59:b6:a0:ba:d6:89:05:c8:fd:13:54:42:
bf:1e:93:5b:7a:e7:65:ac:16:db:56:da:85:e2:8d:
86:1e:40:49:e9:06:35:e0:bf:4c:24:fa:86:4e:1c:
54:c6:32:03:54:ec:c3:cb:9c:8b:ba:18:e1:85:97:
3d:eb:73:bc:a4:8e:13:8a:12:87:4a:ba:af:a4:56:
60:11:29:b9:19:60:13:ec:c1:9b:58:47:d2:02:23:
2a:18:f1:07:07:a1:bf:36:1e:77:20:58:94:e9:00:
24:3f:cf:71:39:da:4f:0b:fb:d3:d8:46:73:9c:b1:
06:49:99:7a:f5:52:67:0f:f4:00:14:a1:1e:05:28:
13:ca:c8:b3:ff:57:49:4b:48:7d:5d:b4:fa:c8:50:
bc:a6:c7:48:ef:ee:ed:1e:a6:86:57:3e:3d:c7:13:
bb:77:62:8c:2c:20:2a:ca:20:b7:ee:a2:6c:ef:4f:
ce:90:31:32:dd:5c:19:04:bb:9a:07:c2:94:c3:67:
f2:d2:e7:90:4a:bd:f7:88:58:85:75:2a:ee:f0:85:
90:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:17:DE:A6:5C:6C:60:CC:6B:48:04:26:0B:39:F2:FC:20:EF:9F:36
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a2:e9:a3:79:c7:12:ad:64:48:ce:23:a7:60:14:b0:1d:24:
aa:9d:85:f8:54:8f:22:72:a0:77:f3:32:a2:cf:10:da:c9:a9:
24:39:11:aa:29:fb:5f:29:cd:54:3f:a2:40:b6:3c:49:2f:81:
db:bf:5d:7c:0e:04:8b:e8:11:9e:76:80:e2:65:a2:97:f6:4e:
37:a9:2e:b5:8e:b5:1f:9c:fe:d6:81:4d:27:92:fb:a9:89:35:
27:50:1d:38:3c:8c:20:bb:99:9f:ea:27:1f:3a:51:ea:ab:7f:
96:dd:8c:0e:bc:c6:86:37:7c:51:22:69:79:cd:ba:cf:8e:d5:
4e:17:37:87:49:5c:19:30:1f:90:40:db:10:2f:59:83:41:46:
1d:3d:46:0d:87:ac:5f:de:b8:2d:c4:e5:dc:61:9f:9f:16:f0:
07:8c:44:42:7b:4d:f1:23:40:60:4e:ef:86:80:58:bb:e7:4f:
b9:65:4d:c4:ff:f2:04:01:78:d7:9e:38:39:2f:cc:1f:1a:9c:
b6:5e:d4:ce:8c:f9:62:3c:8b:41:21:9f:9b:1f:b9:10:2e:10:
ad:94:e8:e2:98:f8:c9:69:51:87:2b:7d:57:bd:59:7b:94:7c:
16:9f:5e:1f:ae:70:83:18:53:ef:c4:1c:f4:7b:c9:e2:18:a9:
8b:30:9d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 06:57:13 2026 by rpki-client