
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File: gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier: okLiHYwF/LSAorZk90axWF0we6763tfVwMKiwBwpeMo=
Subject key identifier: EB:CD:70:87:4B:0A:03:B9:DD:6D:A6:CA:CD:10:F4:67:F0:AB:A7:C3
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer: /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial: 019F93FFCD58BAAFCE5EA8083C9AA3DFBFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number: 0936
Signing time: Fri 24 Jul 2026 12:00:42 +0000
Manifest this update: Fri 24 Jul 2026 12:00:42 +0000
Manifest next update: Sat 25 Jul 2026 12:00:42 +0000
Files and hashes: 1: 8DmkjBsB4UphtJeSH3FxYV3pk2w.roa (hash: bPCKO1jX7AbhbVFNmCvWafOjpt+yiRZfbgufuUpuv5g=)
2: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: Xw07dcZcAPYCY23YL+AeCfTri9ECXD435aiOFNS2o9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:cd:58:ba:af:ce:5e:a8:08:3c:9a:a3:df:bf:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Validity
Not Before: Jul 24 12:00:42 2026 GMT
Not After : Jul 25 12:00:42 2026 GMT
Subject: CN=ebcd70874b0a03b9dd6da6cacd10f467f0aba7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:31:72:67:09:09:56:5c:1c:a1:41:87:c9:
a2:05:94:39:b6:9d:aa:98:ea:cf:66:79:dc:ff:04:
a0:a0:b5:23:0f:54:ec:f0:31:45:00:d0:3c:3b:7b:
69:5d:2d:33:42:bf:fa:dd:e3:ba:5c:e4:91:34:37:
fb:a4:98:73:7c:af:76:a9:38:22:6b:96:a8:a9:c4:
eb:93:b3:ef:1f:e0:95:5a:21:48:1b:0b:02:86:53:
81:d6:80:89:56:20:68:6f:ce:4e:35:02:49:1d:1a:
74:7a:3e:6e:f8:21:f8:0a:96:be:fb:2a:0f:15:8c:
db:dc:52:4b:41:23:3c:38:2d:86:34:b5:1a:36:df:
b9:23:6c:6f:bc:6c:cf:17:56:8e:de:ad:e3:c9:17:
ba:f2:76:1b:4c:19:3f:ee:bc:7e:0e:87:e5:40:24:
ff:01:6b:68:4a:27:c7:23:65:8f:3f:ee:25:e1:9b:
29:4b:70:a7:31:26:3f:ab:a7:b7:ee:ab:5e:b0:05:
6f:f9:25:fe:50:aa:b5:fe:40:66:e6:78:a0:3d:70:
f4:75:11:b1:06:92:11:ed:5c:6e:eb:65:f1:f0:61:
8e:98:f5:12:b5:8a:d4:f8:3a:23:90:14:4d:eb:74:
13:64:a4:e8:01:18:2e:67:2e:27:9c:2e:ac:c0:cc:
2d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CD:70:87:4B:0A:03:B9:DD:6D:A6:CA:CD:10:F4:67:F0:AB:A7:C3
X509v3 Authority Key Identifier:
keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5b:ab:e0:1d:d1:a8:21:20:d8:b4:bc:a5:83:fc:18:ee:3f:
14:0a:10:d2:8b:81:ba:19:17:94:ce:c5:56:b2:2d:c4:c1:d9:
86:76:dc:fc:d7:f8:f2:4f:6b:9d:e5:4c:f6:8f:b1:cf:85:b9:
13:a7:8c:bd:a4:81:37:22:bb:83:31:47:3f:42:21:de:99:94:
6c:da:d9:2d:f7:15:87:b7:e7:43:16:a1:dc:97:8b:e9:09:db:
06:4a:cd:55:cd:82:a0:c7:00:04:11:da:78:56:0b:74:f5:e0:
42:07:dc:37:79:b8:d9:6f:42:57:00:e0:46:8a:b4:36:aa:9a:
81:8f:c3:00:a3:c9:4f:1d:48:b0:b8:59:a8:d3:f5:7d:46:53:
91:23:dd:66:f1:cd:44:72:7e:a9:a1:ba:dc:e8:54:41:c9:1e:
5f:53:93:0c:9c:5e:2a:af:cb:61:d7:61:9b:c2:1c:24:50:bc:
e9:57:b0:29:b0:e6:74:2e:77:d3:08:e3:3e:d3:22:78:9f:56:
8f:9d:ef:f0:e5:d1:8d:69:bf:25:bb:93:4a:68:92:82:d1:af:
18:00:e1:f3:65:77:7c:1b:cd:c6:d4:bf:17:fb:06:72:fb:18:
27:7d:e4:f4:0e:9e:ac:fd:04:70:10:da:f4:09:4d:66:87:fa:
98:3a:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:16:07 2026 by rpki-client