Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
File: Gq51omzPhiEiKBakccy3wNXnFuI.mft (raw, json)
Hash identifier: 9xewtRBZVPM/eg26rSx+08phNSbdVAyaV42R5i3pB1Q=
Subject key identifier: 5D:70:FD:8E:63:C0:2F:04:49:00:1B:5B:6B:4D:94:E0:EA:E3:FD:0C
Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
Certificate issuer: /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Certificate serial: 019F9211502BE40F2A6E677DB02253D59F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
Manifest number: 0CD1
Signing time: Fri 24 Jul 2026 03:00:35 +0000
Manifest this update: Fri 24 Jul 2026 03:00:35 +0000
Manifest next update: Sat 25 Jul 2026 03:00:35 +0000
Files and hashes: 1: Gq51omzPhiEiKBakccy3wNXnFuI.crl (hash: lNrf/pl72u3704hPaJGoBVkKWjFbxc1lHISJwKI++UI=)
2: NVSHB6tzwUob75xSfGz6jaNLiYE.roa (hash: +Q4isin9ctWLd5y4nbiMUVJ0M1dT5+TerwoyCULpr+o=)
3: Ou1S9-7Ve_CB-idLlDNc-rifkt0.roa (hash: 39EOhAHHh040SHRa6UcwZcFa8mestfBXu2NgvqotUUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:50:2b:e4:0f:2a:6e:67:7d:b0:22:53:d5:9f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Validity
Not Before: Jul 24 03:00:35 2026 GMT
Not After : Jul 25 03:00:35 2026 GMT
Subject: CN=5d70fd8e63c02f0449001b5b6b4d94e0eae3fd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:11:c9:16:25:c8:12:da:75:00:32:81:5a:
32:33:7a:f2:01:b4:da:30:60:e1:84:47:d8:be:8c:
01:98:40:81:87:b8:12:e2:d0:3f:44:10:a0:d1:4b:
70:b7:02:34:ae:c9:73:2e:f5:b9:fd:6a:4f:93:20:
75:d9:c9:d9:f9:3f:4b:2d:6d:f3:15:d5:e4:d7:d8:
8b:95:85:45:f4:05:66:ae:f2:a0:9e:60:49:65:6c:
c1:dc:ba:0a:98:fa:d4:ba:53:f8:a2:f3:fd:50:bd:
12:08:f9:70:e7:8d:a0:7b:99:3f:b5:53:cf:bc:43:
b3:26:09:df:a5:7a:52:7a:54:a3:ac:a3:74:4a:19:
6a:9a:6e:88:e4:6f:30:32:21:71:ed:5e:de:d4:c7:
d4:e8:90:ab:cb:2b:86:49:64:3b:57:3f:e4:6c:69:
18:86:dd:c1:f8:b2:5b:0f:66:14:47:31:25:6c:cd:
e7:1e:30:83:47:c5:2b:7d:f3:22:46:a0:2f:11:e0:
fa:58:21:77:03:bd:9c:26:0d:b5:2c:3d:6c:24:77:
24:cb:5f:30:16:3e:c2:1e:b8:06:76:1d:f0:1b:8c:
57:4a:02:35:e5:af:4d:b4:67:28:27:46:72:78:ed:
a0:94:51:b2:28:5a:fd:a0:fa:21:e5:af:4c:e6:36:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:70:FD:8E:63:C0:2F:04:49:00:1B:5B:6B:4D:94:E0:EA:E3:FD:0C
X509v3 Authority Key Identifier:
keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4c:1a:ad:ae:9d:6b:c1:1d:d6:39:98:86:f9:6c:fa:fd:e5:
87:6e:da:81:5a:26:49:f2:e5:ee:16:98:a0:bb:02:51:64:21:
a3:25:05:f1:74:d7:66:71:63:01:7d:54:41:0a:20:04:e2:c1:
bd:5c:86:2f:e4:f1:a7:62:16:9f:b4:40:6a:0b:fc:3c:52:4d:
28:02:ca:5e:31:f7:2c:df:a3:bd:f4:8d:f3:f5:cf:ee:26:e8:
7f:bb:b7:33:4d:61:2a:1e:59:e1:c0:b7:25:f2:0b:23:3c:80:
b8:a1:1f:7e:5d:76:fe:19:ba:bc:c2:d6:ef:04:a2:93:9c:92:
f8:66:11:a6:a6:4c:75:5f:1a:9b:11:38:db:cf:b4:33:9d:ef:
63:29:c8:9d:f5:42:57:60:98:dc:af:bf:ad:4e:73:c3:cd:b2:
55:59:60:85:c2:fa:84:73:c4:d8:4f:0d:98:f4:4d:76:87:6c:
dd:04:0d:81:4f:41:41:64:0e:56:81:fd:a9:e3:e4:ac:11:44:
08:48:86:aa:c7:6a:1d:93:f4:a6:2a:a7:36:77:bf:34:d5:11:
a6:e6:25:2f:fd:9c:7d:b6:3e:19:65:69:e2:ef:47:93:fd:68:
0a:e7:9d:c9:be:d9:d5:bf:d5:d2:d3:3a:49:04:11:f3:d2:c8:
3f:e2:1c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:22 2026 by rpki-client