
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json)
Hash identifier: RAAht+RYtB6OG0v6u2aBKRk7JotfTyxHlYqPk8k1khc=
Subject key identifier: 7B:4F:70:51:D8:02:A1:B0:1F:8C:08:F0:B9:1A:54:04:A1:47:F0:CD
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 019F9248DD1EAB41E80D2852B70044709CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
Manifest number: 0E0C
Signing time: Fri 24 Jul 2026 04:01:16 +0000
Manifest this update: Fri 24 Jul 2026 04:01:16 +0000
Manifest next update: Sat 25 Jul 2026 04:01:16 +0000
Files and hashes: 1: 8JSZWhyUYpRy8aBCdNPv83OhLzE.roa (hash: cRifW1LmyHI9b6LIEF+DhKfqeLjA5tpM2Wwz0m3WPJE=)
2: DBuCDMr-eMpkAR_hikUInL2urKQ.roa (hash: kBMh2uve9H6ZGJ+wBBoi4Snq4VxIhSy8cm7vuFkDv3U=)
3: GiB2XPgzfAZoK37GjE41zRNuwfw.roa (hash: kt4wF2f4rJfLJ5yt1aN/zDgxy1rqy/Zyxyd2CL/+BiY=)
4: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: cPmwhe/W42zWWzAB6ZPgApAm9mSw8Ogz3O/IWz1y4a8=)
5: SMhGdBkdywnevpYEWhKr1IzaM4M.roa (hash: m3kf4ZVSNKzUhBPVSBlYDUaNyUcw0siodBs/T4U83BA=)
6: iVDK6PCtMfpuZKgZWoFycnHMVRw.roa (hash: GeJfT/LpcdK0hbYcqcrlMnAuUaNLyo2x8WoLR5cuzUY=)
7: lx_DhApBbepgoPXpAWVMZkHOy4M.roa (hash: uguPsOnPbZyPw2Mv7U8Fmu1LMUcIDj3qTCfJ/Uhauy4=)
8: ohLWgfGRLPEKw04h0DLfOIlNhog.roa (hash: K98aaZcn2W9HA9Zia29dMsLJX/i+ewGU4FK1Pvj0Z10=)
9: w9-s1rg8ZZyOOyxtduxCw6s1Z18.roa (hash: SjJ+kgcVTjrARPsmt0o25UIbqtkMvNHn5HJI2G5k1Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:dd:1e:ab:41:e8:0d:28:52:b7:00:44:70:9c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jul 24 04:01:16 2026 GMT
Not After : Jul 25 04:01:16 2026 GMT
Subject: CN=7b4f7051d802a1b01f8c08f0b91a5404a147f0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:b5:81:9c:40:21:5b:82:2a:95:62:a5:d7:
57:fe:cd:d8:5d:30:fb:6c:40:b8:0b:74:b2:45:33:
e6:3a:ca:44:a0:ea:c9:bc:ca:62:04:a6:33:1d:15:
5b:46:dd:31:38:c2:cb:d9:45:c2:a8:71:de:e4:31:
e6:38:6f:4d:d0:e0:a2:a1:7c:43:32:4d:e5:f6:12:
12:c8:28:75:39:07:10:af:38:99:41:60:a9:69:e7:
90:21:cd:1b:24:65:09:b4:05:a7:f4:12:01:ea:55:
01:5f:f0:1d:1c:4c:8a:37:00:c8:fc:a0:c0:7e:d0:
9f:88:7b:f5:59:9d:56:06:a3:42:7f:87:bd:cb:3c:
b3:9b:e0:86:35:28:43:91:e5:01:2c:98:b7:53:6b:
4d:42:8a:c9:75:2d:3e:e0:a0:a6:f7:ed:8c:a8:b1:
69:b8:10:c3:09:b5:a8:bd:7f:20:81:f2:95:cc:3b:
9a:fb:92:00:bc:dd:47:c4:72:7c:9f:3f:59:ef:a7:
46:98:06:02:24:51:46:12:3c:ab:7a:d2:6d:29:92:
2a:d4:66:cb:4e:0c:75:3e:30:a5:20:0b:ff:8e:fa:
47:6c:89:77:46:23:7a:6d:9c:6e:25:77:13:43:00:
86:c3:7f:70:4a:2b:ad:68:f5:11:45:1e:fc:23:67:
b3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4F:70:51:D8:02:A1:B0:1F:8C:08:F0:B9:1A:54:04:A1:47:F0:CD
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:48:d9:fe:af:74:f4:9b:bd:4a:af:72:1a:23:e0:da:69:0a:
31:c8:95:73:40:3f:bd:9e:fd:3d:cd:fc:cd:cd:9a:50:e2:cb:
35:ab:d3:7b:2f:5e:e8:7d:87:9b:12:9a:45:c3:2c:4c:6b:4e:
51:da:a8:70:d4:14:31:c0:a3:5c:0a:ca:fe:95:fa:03:8b:d7:
07:af:c0:14:5c:4c:7f:0f:4c:4b:47:66:7e:37:68:ba:ee:1a:
3b:46:91:57:3a:93:25:53:49:b4:8e:6f:d1:41:04:33:9c:63:
7f:8e:83:f3:f0:a7:f7:1e:ba:d6:ab:01:11:4a:29:32:59:08:
f9:79:e0:93:29:50:4f:d9:6f:71:58:85:57:bc:bd:f6:95:bf:
35:bf:36:03:c5:b3:ed:8a:6d:3f:da:b8:09:a0:87:e2:88:e3:
c4:00:e7:7d:31:47:7d:0b:27:29:85:70:cb:d4:2a:d9:80:86:
29:30:6e:0e:86:3b:1f:7e:dc:e8:33:b0:6a:25:13:0d:ed:b9:
30:94:68:37:ac:8e:94:c0:40:a2:3f:68:61:f2:0c:16:67:33:
b9:0e:3c:24:1b:ff:1b:e9:63:1f:be:cf:9a:6d:5d:8c:0f:25:
49:41:9f:be:00:65:5a:18:02:31:1b:92:50:90:98:50:ea:77:
38:bc:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:50 2026 by rpki-client