Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: fAgqZih3l5k1jo+1ciM0muRP9jf2vpXobkcyzoWeG0Q=
Subject key identifier: 73:15:6E:67:50:9C:78:A7:CF:06:CF:39:6D:71:89:72:82:36:2C:67
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 019F935BE2FC61DFF7CB50B417644CC22DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 1098
Signing time: Fri 24 Jul 2026 09:01:40 +0000
Manifest this update: Fri 24 Jul 2026 09:01:40 +0000
Manifest next update: Sat 25 Jul 2026 09:01:40 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: HEtcTugvvc4drqgQvn32cZHC0lYAWK0ySJOphXyYOfI=)
2: oKpdyGhKwucvVbjfDmdQz3gb4YI.roa (hash: 9OjwGsmzo/fuyo74pyHihTisees7cSNinSvlluRB8YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:e2:fc:61:df:f7:cb:50:b4:17:64:4c:c2:2d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: Jul 24 09:01:40 2026 GMT
Not After : Jul 25 09:01:40 2026 GMT
Subject: CN=73156e67509c78a7cf06cf396d71897282362c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:f2:42:59:fb:92:0f:1a:ef:60:59:f0:75:
f8:43:75:54:80:5f:43:f1:82:fc:2b:2c:db:81:75:
e0:26:1f:d9:41:03:ad:7d:21:68:b2:7b:15:fe:2d:
86:85:e7:73:ee:60:66:4a:93:b1:13:5b:00:f7:58:
0a:d9:3b:80:59:cf:56:eb:53:55:e2:cd:51:9e:e9:
b9:56:e4:dc:ca:71:72:bb:bd:22:4d:2b:e7:47:b8:
29:c1:a8:55:42:ea:c9:55:57:ff:94:56:fa:37:47:
2a:4a:dd:9f:89:d4:01:de:cb:7a:23:21:a5:23:77:
4f:6c:9d:27:16:da:38:08:3e:cc:52:62:ac:d9:36:
9b:e4:99:4b:f8:1d:a0:3b:ca:d7:f0:e7:6c:b3:2f:
72:49:1a:c5:d6:e2:ac:20:5f:10:96:01:f4:68:ff:
4c:18:50:1c:a5:73:3b:bc:e2:af:5b:14:ac:d9:23:
a9:a3:84:62:b0:8f:9c:b9:af:bb:bd:60:96:d5:fc:
77:e8:69:e4:74:94:d2:ff:ab:37:c1:39:2c:dd:2c:
59:6b:83:7c:a4:b5:5c:c8:fb:a8:95:a6:3b:c4:90:
3c:ca:ef:76:a4:8a:ea:a5:55:4b:2c:99:29:06:b4:
73:b9:38:e1:d5:30:e1:05:31:72:1f:41:29:22:69:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:15:6E:67:50:9C:78:A7:CF:06:CF:39:6D:71:89:72:82:36:2C:67
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f5:4d:e7:66:cb:5f:a9:2e:6a:fb:b2:14:85:8b:df:56:e3:
ea:b6:86:f8:10:9c:2c:50:0e:09:3f:6b:98:93:1a:44:10:8e:
f5:cc:6a:b3:f1:bb:b5:9c:9a:7f:09:d8:a4:37:a2:ee:75:27:
6a:20:f6:29:c1:f3:82:f4:32:35:62:16:29:80:b4:be:56:13:
62:50:45:46:01:64:0b:2c:06:20:f2:56:52:58:2a:d6:5c:7a:
a6:d2:aa:94:b7:e7:84:dc:5d:c8:7a:61:35:d8:6f:6f:53:da:
a1:0c:4d:76:55:0a:fb:97:24:f0:b4:0b:38:e0:f8:7e:69:74:
26:35:70:6f:7f:03:71:b5:c4:88:52:b7:43:ea:70:1f:34:79:
67:40:a3:dc:71:ec:c4:51:ba:08:3d:80:8e:2a:0a:79:80:f2:
e3:ff:30:84:70:4b:94:ae:0a:2b:ae:ea:35:5f:ba:2f:5c:94:
d0:91:1a:19:74:55:ea:58:87:8a:7f:98:59:ea:0f:1f:c8:17:
66:77:f6:b4:3a:6e:d3:e8:20:80:25:db:67:c7:db:8c:e8:a3:
64:0d:af:81:f1:0d:dd:b3:06:f5:8b:36:23:45:a5:1d:09:b6:
f7:04:38:c3:a3:60:99:81:d9:b2:b3:3b:cf:1e:9c:98:6a:c8:
ba:f9:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:04:25 2026 by rpki-client