Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: gynoVG2kWEdk3TSZZxWjJ/cS6hrWUouOQKZWKHqOrlI=
Subject key identifier: 3F:BC:91:46:48:F0:0E:2D:73:25:ED:D7:3C:2B:CF:F8:61:A2:2B:C2
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 019F93FF601044939BD6509CDF0FE60C7FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 0A87
Signing time: Fri 24 Jul 2026 12:00:14 +0000
Manifest this update: Fri 24 Jul 2026 12:00:14 +0000
Manifest next update: Sat 25 Jul 2026 12:00:14 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: U7Anqa9hIMPd7AFgNL7n5HguU1m6Di8Ek2y+9VtJRn4=)
2: TsOc3ubRn91JAdgQ5aLAsWxpMqE.roa (hash: tbfSoTjpCJFJ4FddOzyLpgPxxaJetU74fFW5NiMSulQ=)
3: hN7XUM5Glyrot6zaK4scGwI3uPQ.roa (hash: NvKjw+roiIXWY/ok1kEl36Mdnj7pgwk3grKasFBC3AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:60:10:44:93:9b:d6:50:9c:df:0f:e6:0c:7f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Jul 24 12:00:14 2026 GMT
Not After : Jul 25 12:00:14 2026 GMT
Subject: CN=3fbc914648f00e2d7325edd73c2bcff861a22bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:48:0f:1d:2d:8b:e4:3a:43:94:b9:53:85:
b5:b2:30:a6:e1:66:a0:9e:5a:23:ce:e7:5a:08:fd:
8f:1e:6b:82:95:70:a5:11:4e:b7:0b:d7:2a:ff:22:
fc:d0:37:87:5a:d9:35:a7:50:03:7e:76:b4:fb:e0:
7a:9b:08:53:ea:9b:2c:00:aa:e2:60:64:64:0d:67:
f9:95:80:e9:9a:56:cb:0e:0c:6c:ab:33:9a:04:83:
e9:aa:10:f9:1b:2d:98:52:46:ea:02:65:90:4a:f2:
85:2c:c1:f7:df:a0:f6:5c:eb:1c:e4:0e:58:37:eb:
25:5a:7c:12:63:0c:b7:b8:01:42:cc:12:96:70:2d:
39:9f:92:ea:8e:5c:af:45:68:01:50:a5:f0:f3:b7:
0b:b4:df:0a:17:cb:f6:58:21:b4:1d:41:0f:5f:d7:
04:ef:8e:eb:4b:24:67:51:95:38:38:4a:10:d7:3f:
c5:13:08:b4:63:b5:2e:1b:b5:94:88:e4:1b:ec:0b:
fd:bc:94:a7:7a:c3:62:e7:37:6d:b9:c9:7a:97:24:
8d:4b:e5:85:84:66:ae:80:85:c5:75:e3:79:1b:83:
73:28:60:a3:4c:a2:37:92:30:eb:e4:eb:f7:73:5a:
6a:f3:a9:05:59:8a:a1:82:1d:6e:f5:7c:9e:7a:3b:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BC:91:46:48:F0:0E:2D:73:25:ED:D7:3C:2B:CF:F8:61:A2:2B:C2
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:cb:30:26:65:8f:75:30:03:cf:69:ce:70:ae:59:24:b3:7e:
e8:6e:1e:c2:1f:ed:ee:3c:0c:e8:91:0e:a0:bc:e7:12:e0:50:
2d:b7:e3:e7:6e:81:ee:4d:01:ab:eb:9f:55:21:70:bf:f5:4b:
7f:30:83:7d:03:a1:03:82:f6:86:b2:e5:e5:98:62:71:45:b7:
c4:d3:84:b0:28:44:80:fb:1f:2c:d1:58:fd:1c:41:3f:09:08:
59:bb:90:1d:25:0b:07:25:d2:fc:b9:4d:58:eb:77:5e:9f:1b:
8a:38:24:38:49:04:24:82:1a:ca:68:68:9b:3e:a8:e6:4f:ba:
1e:e3:7a:67:7e:ae:64:f5:bc:78:48:5b:7b:6f:86:dc:26:36:
90:38:dc:c2:a6:62:dc:b6:99:6c:8d:7e:d2:a8:9c:ef:e0:c7:
e2:ab:46:de:a2:1e:c6:9f:a2:d5:7a:b9:2f:69:48:4e:4d:e1:
cc:31:98:ed:a8:80:5e:08:8d:08:65:7f:5f:f8:28:6c:9e:69:
8e:09:df:7d:fa:15:93:d9:f0:5b:8a:ed:e8:6e:45:7c:c8:7d:
36:00:7e:40:6e:94:f9:1e:45:aa:c7:99:8c:f8:88:3f:d5:5d:
dd:e9:89:21:8e:6d:df:ad:84:5f:54:b4:7d:0e:0e:83:e1:49:
94:86:7e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:56 2026 by rpki-client