Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File: gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier: tvbE8w2L5muo6cMvlj6Mvn5Vvx6RMdrDsmdVzoNZSi8=
Subject key identifier: 98:7D:8E:6B:54:FC:A8:51:9A:E8:FC:BC:F9:1C:E1:3B:E0:FF:C1:51
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial: 019F93C935C16C2C59C6381B59BC13AB21FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 11:01:04 +0000
Manifest this update: Fri 24 Jul 2026 11:01:04 +0000
Manifest next update: Sat 25 Jul 2026 11:01:04 +0000
Files and hashes: 1: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: eX8r2I2mTdf8/GmavfGGUo5dytqwcsBSyKKnk0/VzOk=)
2: k1oWIl9uaPhK_7wC7TzwxBmJV5U.roa (hash: Teuvy3ArR3TwwUcbjV0tYtPi6ySgg76mgoEbmzqvJDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:35:c1:6c:2c:59:c6:38:1b:59:bc:13:ab:21:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Validity
Not Before: Jul 24 11:01:04 2026 GMT
Not After : Jul 25 11:01:04 2026 GMT
Subject: CN=987d8e6b54fca8519ae8fcbcf91ce13be0ffc151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:35:8e:1a:43:c8:d1:d2:77:bd:48:17:51:
5d:e1:37:25:11:7b:c7:b8:b1:0b:78:a0:e9:55:e0:
4f:fc:fc:c3:66:98:9c:dc:c3:51:c6:4a:b8:42:95:
45:ca:1a:99:4c:cb:44:2c:4a:e3:73:92:12:70:0e:
9e:f4:e5:de:f5:35:cd:c0:24:8a:ee:80:60:83:72:
1a:16:7a:e5:ae:44:39:02:3d:51:a4:68:3a:2c:9d:
52:ad:cf:b5:6b:17:46:f5:88:58:c0:7b:76:ab:79:
d5:df:d6:b0:e9:4b:34:d6:e9:9c:5e:b1:f7:13:96:
ef:aa:95:21:76:2b:2f:82:e4:61:8a:e6:cf:00:63:
c0:ea:6a:47:96:97:c9:72:ca:29:d8:53:e0:86:5b:
04:ea:54:b0:b4:a6:31:ce:5e:3d:c5:2b:8d:88:4f:
c7:8a:4e:8d:e7:fc:ef:77:07:71:be:e5:74:48:00:
6b:84:48:cb:35:be:23:cf:31:aa:70:48:6b:3b:ff:
1d:fe:6d:d9:2f:a1:7f:6d:e1:af:ba:7e:c7:5c:03:
d6:79:20:57:db:b4:20:82:a9:c1:ec:d7:2a:00:00:
1d:f6:a4:4c:27:cf:1d:7f:78:a8:f9:88:c0:31:a1:
1d:89:71:61:6d:85:96:22:1a:fc:46:bb:8e:00:6c:
5e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7D:8E:6B:54:FC:A8:51:9A:E8:FC:BC:F9:1C:E1:3B:E0:FF:C1:51
X509v3 Authority Key Identifier:
keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:77:b2:2e:d8:18:4f:7b:5b:79:f2:c6:5e:b8:b4:25:3e:2c:
3f:39:70:50:62:0e:e0:d2:de:4b:74:4d:d0:18:12:51:98:6c:
1f:b5:b2:f2:e6:93:10:c8:59:66:3b:90:f1:1b:4b:2c:e6:48:
42:58:35:7d:f0:3c:5b:f6:bb:eb:03:8d:16:a7:5b:7a:f3:c4:
1a:b9:cd:98:86:97:8e:99:b3:3b:19:fc:dd:dd:4c:7b:70:86:
0c:4d:1d:bf:1b:16:4c:ad:9b:08:16:75:6b:4c:82:1e:2e:36:
40:27:e2:9d:a5:55:f5:a2:a2:7f:3f:12:2b:a5:31:6e:43:0c:
c1:17:50:97:a4:c5:41:51:0e:64:8e:cf:82:6a:fb:14:ac:34:
07:85:b9:2c:e8:cd:ff:23:98:19:56:ba:cd:ae:91:36:b4:f8:
ff:f9:37:5a:83:91:34:73:60:2a:15:f4:1a:bd:f3:36:05:53:
ed:39:23:9f:8c:b9:a3:72:90:c8:a4:84:c4:04:88:2e:95:75:
c2:ac:21:0d:5a:8d:ce:f7:6b:96:63:7d:93:3e:ed:2e:ae:de:
e8:07:18:d6:a9:dc:1b:c3:ad:0d:fb:10:42:f6:e3:20:42:09:
17:11:da:25:c1:ef:b6:8d:33:ae:e6:80:a4:03:ec:4f:1d:a4:
fe:4d:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:55 2026 by rpki-client