Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: u3BPRi9fOU+oMvEcgEdJ21QQ53v46If/NHaQA8KVB70=
Subject key identifier: 9F:BC:05:0B:06:0E:A7:A4:F8:E8:B1:C8:C1:98:58:72:83:C5:92:65
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 019F94DB5145381D9DBA0A5E9187D9EA363B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 1614
Signing time: Fri 24 Jul 2026 16:00:28 +0000
Manifest this update: Fri 24 Jul 2026 16:00:28 +0000
Manifest next update: Sat 25 Jul 2026 16:00:28 +0000
Files and hashes: 1: 5m2yB9NEeUbzh_RrMBbFTl87vZI.roa (hash: +gJzTRd7yfkb9lyTBCKq01A8haFjWWwRmaKWjp0RAm0=)
2: Opf2QA1qNa28jjAr8yKuXu_bAbY.roa (hash: ovjEoKocSUBnOUVIGPdI/qSQMjayKXITtpelF2L20jw=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: t0PW0y8EUphPsmfz7htF3aVa1a/2JKbjyq8WEjoNmLQ=)
4: yvE1riQnzN8M1_ohncQ6e5yrX4w.roa (hash: Bi2CKtLlem3xa/y5EAdM8w4Q0JN6Uyw6zRxbHmseyms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:51:45:38:1d:9d:ba:0a:5e:91:87:d9:ea:36:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Jul 24 16:00:28 2026 GMT
Not After : Jul 25 16:00:28 2026 GMT
Subject: CN=9fbc050b060ea7a4f8e8b1c8c198587283c59265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:59:97:79:ac:75:4e:4b:3e:f7:ed:b0:ee:
32:8a:ab:4c:1f:c2:72:50:22:85:6e:a3:ab:79:0f:
03:8e:88:0e:38:7e:4f:20:5b:18:66:81:e3:42:07:
9e:d6:8f:3b:f6:3b:1d:9f:a7:06:a8:58:ab:cc:45:
ea:e3:ea:6c:4e:92:61:59:5a:29:81:89:ab:06:e6:
df:c7:6d:0d:a3:c7:7e:67:dd:c3:cb:32:1e:f5:b6:
14:e2:39:c6:d8:2c:32:17:1a:35:8d:3c:66:a3:bf:
94:38:03:d8:c3:66:28:47:b8:56:47:25:c7:42:cb:
67:a4:d1:f1:87:34:63:57:78:3b:98:ad:c8:c1:fc:
41:7a:95:4a:f4:26:09:e6:8a:7c:1e:df:25:93:72:
33:5d:55:a8:03:98:24:5c:aa:4a:41:4d:b1:35:8f:
61:86:40:ae:82:0f:0a:3c:d5:d7:40:54:39:f5:eb:
4b:55:e8:ed:e9:63:7e:9f:80:e0:cc:8a:d2:b0:f5:
84:84:ab:49:d6:ab:ca:f0:44:03:d3:7f:c2:39:e7:
db:1e:b6:42:fd:ae:6f:31:a6:fe:54:a0:d0:f5:61:
fb:54:a9:7b:2e:20:d0:f9:db:84:86:ac:3f:e0:58:
55:76:4b:24:4f:8c:54:6a:3c:58:71:c8:a6:b5:fe:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BC:05:0B:06:0E:A7:A4:F8:E8:B1:C8:C1:98:58:72:83:C5:92:65
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7c:75:87:02:5d:ac:90:72:fb:46:7b:00:3c:24:ea:84:07:
29:f1:bf:de:82:cf:cb:72:3e:a1:69:5b:62:54:4d:ac:07:79:
1e:a2:08:4d:d2:e3:65:c1:90:dc:7d:40:d0:2c:d9:25:d3:78:
cf:c4:da:9d:42:a5:66:a0:8f:19:29:b0:d4:85:af:09:ec:ea:
de:fe:e0:05:6b:4e:44:0d:7d:18:10:31:92:19:84:cb:13:b1:
e1:0e:6d:06:f3:37:f2:bc:33:ef:7e:99:7a:0a:b5:64:42:18:
a3:54:68:0a:e5:68:ef:9a:db:9c:f7:71:27:a0:24:d4:67:00:
f0:94:33:2c:44:62:0c:f2:42:39:ab:0c:a2:3c:a5:0d:d2:bd:
8c:d3:47:6e:79:1b:a7:d9:cf:f6:31:10:e1:72:05:19:fa:cc:
bd:48:fd:02:6c:4b:47:6e:d6:35:ce:33:cf:08:89:a6:a2:7d:
59:95:61:03:c1:51:cf:9b:aa:7d:69:0a:24:5d:85:62:f7:52:
f8:a8:7e:c9:63:eb:09:50:ed:9b:e5:96:f0:2f:2d:34:8d:cb:
6d:d9:a2:1f:0a:7a:6a:2c:70:1e:39:a4:28:78:92:30:f7:b5:
ff:a9:c1:46:91:44:31:ca:86:65:07:8b:9e:20:39:1c:7f:90:
2d:5f:b7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:34 2026 by rpki-client