Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: NWMIr3+Sp0WAiN//0ExKCIL7JBzdgd9PluDn8sriJgw=
Subject key identifier: 84:9B:AB:25:B9:A6:14:92:93:3A:76:8F:F9:E5:7E:34:04:1E:C2:D6
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 019F91356AFA5BC77AD01177CE081434EEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 23:00:24 +0000
Manifest this update: Thu 23 Jul 2026 23:00:24 +0000
Manifest next update: Fri 24 Jul 2026 23:00:24 +0000
Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: Tc8rZIg6JgApzNv07foZJikAQEKr4HbyLoJyaXTpf+8=)
2: xQLXNMGtJIEmbmsa0yimk8gh264.roa (hash: 681EcZV9/rvtEn+cL3EpnhUhg/0vWlpEsupf9xZzDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:6a:fa:5b:c7:7a:d0:11:77:ce:08:14:34:ee:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Jul 23 23:00:24 2026 GMT
Not After : Jul 24 23:00:24 2026 GMT
Subject: CN=849bab25b9a61492933a768ff9e57e34041ec2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:11:f7:ef:96:83:79:87:7f:8a:ca:7d:a9:c6:
0e:81:1d:5f:1b:71:79:45:3c:f0:20:29:68:8c:8e:
45:3b:7a:8b:15:8d:42:ca:15:d1:d1:a3:a5:c0:b1:
13:78:d6:b0:37:f3:15:d1:a5:f1:8b:1c:03:69:d7:
67:ab:af:10:40:45:ce:ef:f6:8b:04:62:bb:5f:ca:
33:68:1e:bf:e3:e3:f1:03:5f:0f:5b:3b:d7:72:a4:
80:b1:6b:9b:08:51:75:3c:38:d0:8a:c9:4d:54:ee:
17:fe:c8:e9:bb:12:37:30:ea:45:5a:a4:5c:89:14:
f9:da:1d:5d:40:90:e8:15:34:be:59:4d:1c:17:e2:
2d:10:6c:5f:bc:c6:a7:b0:28:28:c5:61:8d:38:d7:
bd:81:8f:e9:c0:1b:de:98:33:2d:a4:c2:b5:15:90:
e4:db:6a:74:5e:16:0b:ca:89:e3:1f:fb:ca:5d:bc:
da:b9:27:b4:f3:35:86:f0:04:8f:ad:47:14:5a:77:
0b:ed:9b:b7:97:73:6a:05:1d:42:66:c3:b9:3b:47:
bc:4f:65:21:4d:88:c7:ec:86:ac:56:27:f6:41:b7:
29:02:9e:12:49:07:b0:8d:6b:8e:df:46:a7:d1:86:
ae:19:ee:5b:4b:a8:dc:17:13:00:75:32:b4:95:ce:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9B:AB:25:B9:A6:14:92:93:3A:76:8F:F9:E5:7E:34:04:1E:C2:D6
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d6:2d:68:7e:64:5c:bf:fd:f9:ea:fb:df:ac:79:6f:86:a6:
33:c6:8e:b4:7d:82:35:12:96:6e:bd:43:5d:b9:50:37:08:c2:
40:ab:88:e1:6d:72:ae:1b:2d:42:85:f4:f1:71:d0:92:2b:10:
e8:5d:92:0a:6a:7d:f7:6f:5b:2f:8c:9c:60:da:db:71:51:f0:
ea:a6:ad:a9:a3:c6:1b:62:a6:f6:5f:6f:32:c6:7f:e4:5d:e1:
b2:a9:5c:e1:61:a0:7c:6b:6d:b4:74:8c:f5:9b:a6:b9:84:a7:
75:f4:9b:c4:e0:5d:c9:c6:12:b9:6e:9a:39:4c:30:4d:0a:32:
97:1c:3c:cf:73:33:7f:4e:4a:3e:6f:d7:0c:0e:e4:b6:ce:e3:
16:8b:18:b6:d2:de:22:29:b9:ae:55:31:e8:9b:a9:34:68:bc:
9b:09:eb:66:b9:29:fe:d1:47:e1:6e:08:3a:37:27:fe:f9:8c:
86:4a:71:dc:fc:90:4c:36:87:6c:12:15:52:10:1c:4e:a3:c5:
5d:27:f0:10:ef:eb:01:5c:7b:94:e0:27:ab:eb:93:1b:f6:ec:
21:c4:b8:5a:e4:36:a1:78:da:35:ed:34:e0:85:da:80:25:7f:
b2:eb:e7:58:72:f5:47:8b:7e:45:9e:db:0a:64:47:1f:da:d9:
fa:50:5a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:54:02 2026 by rpki-client