Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier: pYyNh/JSOgaHsdJm0t4pd3lQsJMqzwBHncDcJmL1rXY=
Subject key identifier: 53:FA:8C:88:A3:E3:6F:B3:95:1B:B7:45:2D:42:82:F3:88:24:32:73
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 019F93FFA8225B4B63ED27F274B4EB4479BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 12:00:33 +0000
Manifest this update: Fri 24 Jul 2026 12:00:33 +0000
Manifest next update: Sat 25 Jul 2026 12:00:33 +0000
Files and hashes: 1: FRyXsiFg-6BIhEw2ARWH0DNGSnM.roa (hash: HOwOr4bTuIB/KNZWR5lcxrrwlrEvRwNSNG9O5oAt0bs=)
2: M_VtU7f5fPlDKkVKH-oBTR-MfOc.roa (hash: INw4W70ov+0DIQom+PoiFmtJQ/A7yUcxsfN1Ujem6fA=)
3: kkaW2PybyMFtKIudjGW5zNwrUVA.roa (hash: q2dHdK2+xshlUtyI1McPweg9tnAFSg39WkJ96aCsEe8=)
4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: a5y0BWDfDuz8P1wL2WtmpwIseJCCwdyl0Sgde6zV7W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:a8:22:5b:4b:63:ed:27:f2:74:b4:eb:44:79:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Jul 24 12:00:33 2026 GMT
Not After : Jul 25 12:00:33 2026 GMT
Subject: CN=53fa8c88a3e36fb3951bb7452d4282f388243273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:4a:85:9d:79:41:ed:1a:6b:a7:f5:48:19:
41:a5:c7:a3:c2:80:67:5b:bf:98:2a:05:9c:b2:c6:
d8:62:c9:0a:c8:98:83:b8:fa:fb:bd:76:ec:6c:92:
7a:be:84:5a:a3:0b:e6:47:c6:0b:c9:b4:0d:89:b9:
85:61:24:2c:c7:9f:33:5a:ae:6b:63:92:d9:c9:d2:
b0:34:02:ba:e7:ed:b2:7d:cd:03:df:18:8b:82:aa:
3f:0f:05:45:9d:8a:49:74:df:24:dd:f0:9e:7d:ca:
30:b3:3f:6e:ac:22:ec:8c:09:b5:02:b6:93:45:49:
82:7b:e9:79:7e:ad:8b:1f:14:74:0c:5e:7e:6c:86:
c2:bd:a8:24:b3:09:1b:b8:42:e3:35:75:9e:2e:76:
71:c3:9a:0b:a7:23:b3:fc:a7:3b:60:2c:ec:c3:44:
32:f3:cd:94:52:f5:f6:08:3a:27:fd:33:a6:91:8f:
1e:9e:6f:0e:6d:0a:2e:22:68:40:a9:30:09:20:e5:
62:13:9b:bf:47:da:f0:b5:05:92:09:3a:dd:bb:11:
a3:a1:34:ff:e8:2b:25:60:04:41:39:a5:9b:7a:3e:
6e:57:41:55:98:7c:bc:60:17:21:f6:85:dd:d7:a7:
f7:76:23:39:7c:c4:13:12:d4:62:da:b6:b4:3c:b2:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FA:8C:88:A3:E3:6F:B3:95:1B:B7:45:2D:42:82:F3:88:24:32:73
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5c:4d:aa:78:f7:cc:54:76:73:57:36:23:d5:ac:4d:17:42:
1a:3e:53:01:22:6f:82:4d:a4:30:01:6e:f4:e7:97:90:09:cd:
0f:f0:b3:0b:ce:19:2e:53:02:20:32:d0:aa:de:13:d1:5e:da:
50:76:d6:05:08:e0:e7:4d:f4:08:eb:07:89:bb:98:a1:a1:8a:
8f:ac:47:7f:19:e1:89:0b:52:ff:34:43:39:9a:56:11:7a:d2:
d3:a1:0f:f9:27:a1:14:cc:89:73:72:a5:86:22:aa:4d:29:86:
7b:e4:75:b5:a7:8a:f2:38:03:36:34:a7:d6:7e:f0:a0:a6:af:
43:89:08:ed:e5:f8:c6:d8:dd:ff:ac:ca:7b:76:26:51:e0:c2:
e5:c5:4f:7e:00:ca:42:89:6f:32:89:53:de:62:7a:66:81:e3:
85:f4:d0:52:43:6a:c3:d3:1a:5e:76:31:63:39:7e:14:9a:5f:
67:e4:7f:99:51:c9:49:b3:9b:91:f1:5b:d0:ca:cd:fb:95:84:
31:30:83:48:00:8e:cd:2a:78:c3:9b:bb:4e:fa:89:aa:ae:2e:
97:30:b5:69:35:f5:c3:1e:70:f3:5d:f2:5a:ad:d3:2f:e7:c8:
23:52:fe:6a:6d:34:45:5c:cd:a3:19:bc:81:18:6f:68:e7:2f:
2b:c5:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:11 2026 by rpki-client