
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
File: gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json)
Hash identifier: +3c7xnGPGqp0SpqTv959GN05dkUrj5hUdVKMbbCaIHA=
Subject key identifier: 35:B1:D1:31:B1:BD:16:37:40:46:B0:EC:FC:0A:6A:AE:DF:B3:34:85
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 019F916CA5EE0A599D9F20554802DCB215F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
Manifest number: 0F68
Signing time: Fri 24 Jul 2026 00:00:44 +0000
Manifest this update: Fri 24 Jul 2026 00:00:44 +0000
Manifest next update: Sat 25 Jul 2026 00:00:44 +0000
Files and hashes: 1: aIIL3zN4ZUN1hFPhWa5OB2tT7BE.roa (hash: fzKmg/Y3EsolCl+9NGvW6oDouQRm2edVgKukMEtlQJI=)
2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: 0C6Ic8MQalM5/YCixLSaB8CXZrO4hTdUBJPqJLTsGeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:a5:ee:0a:59:9d:9f:20:55:48:02:dc:b2:15:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: Jul 24 00:00:44 2026 GMT
Not After : Jul 25 00:00:44 2026 GMT
Subject: CN=35b1d131b1bd16374046b0ecfc0a6aaedfb33485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0a:68:c6:37:d3:4e:01:40:c5:e2:79:d1:e3:
69:b1:4b:c4:91:5c:f3:cf:09:81:47:5f:85:ba:e7:
c9:df:49:f0:a2:56:83:69:df:4b:bc:81:fc:d1:f9:
6b:40:c0:45:51:82:ca:c0:08:8b:18:67:2e:f8:12:
2e:23:34:25:8e:a7:ec:6e:2e:d6:b1:72:ca:65:e5:
81:43:b0:58:6f:8c:02:b4:ef:f3:94:f4:c0:bf:8a:
b7:70:4b:71:46:ec:90:66:4a:07:0d:50:f6:b6:2e:
57:0c:22:af:65:9b:3b:da:6a:0a:e3:5e:58:5b:f5:
2a:44:84:b5:30:16:b5:20:3e:e3:34:6d:c1:6b:f0:
5f:d8:ca:eb:ef:2a:d5:fe:68:e9:c6:e7:b7:65:03:
11:83:f3:a2:06:73:87:ac:96:27:6a:93:75:a9:4d:
9b:e6:30:b6:96:42:52:fc:bd:1e:7b:9c:fd:fe:5c:
13:18:33:b7:41:ef:8f:b7:e6:ff:44:c5:31:20:90:
aa:1a:ae:7d:01:26:11:05:56:7f:82:a4:4c:b0:57:
0a:14:49:83:91:da:f6:a4:bd:60:0c:d3:e2:b6:ce:
77:8a:7b:ff:e0:6e:2a:ed:25:5e:d1:36:03:1c:58:
0e:ef:0b:5b:61:06:8a:7a:42:8d:d6:07:2d:87:96:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B1:D1:31:B1:BD:16:37:40:46:B0:EC:FC:0A:6A:AE:DF:B3:34:85
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:be:83:fa:98:b9:8d:14:74:90:db:ad:33:74:c0:28:61:76:
c8:c6:b0:cb:9a:1b:d3:7c:4b:71:0f:fe:40:06:d5:87:be:0b:
30:eb:ef:43:c0:ff:db:11:21:48:e0:d3:c8:dc:92:17:dc:fc:
35:0f:cb:bd:8f:7c:e4:54:19:17:a5:0c:3c:76:2d:40:52:8e:
1c:d9:03:95:1a:96:cd:c3:71:5b:32:2f:63:ec:14:54:3e:b1:
98:0b:2a:05:56:52:65:cb:93:90:ad:c9:f2:d4:18:83:d4:2f:
09:5b:75:a5:f6:6e:0f:c4:70:27:e9:be:c6:dc:f2:6f:65:c2:
d8:6d:ef:1c:6f:7a:f0:d2:0d:6d:dc:55:eb:b4:c8:fd:d7:b6:
86:d1:91:e3:ef:d7:32:a3:cc:c8:5a:44:0b:87:f4:83:e6:fb:
75:ac:84:49:23:f9:aa:97:68:a1:6e:f8:d5:91:93:65:1c:0b:
dc:a3:81:56:58:91:9d:1e:71:d1:bc:38:37:dd:2c:08:3e:78:
11:e4:02:e3:74:9b:9b:8d:18:06:ef:ed:d0:5c:76:cd:83:30:
9f:eb:da:46:21:5c:0a:68:da:09:89:00:9e:b9:c7:16:55:9b:
84:a9:a1:95:00:af:07:18:e0:f7:31:75:72:d9:87:24:a4:aa:
0b:af:5e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:07:44 2026 by rpki-client