
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
File: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft (raw, json)
Hash identifier: 2Noi3tOQhYxptBfVL6STBcaMifP2EYVmHQjSC30hAQ4=
Subject key identifier: 69:69:30:01:FC:92:FA:8A:88:21:7D:34:97:F0:A4:B4:80:63:07:87
Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
Certificate issuer: /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Certificate serial: 019F8FECD9C2FE9C67B9FD5909F782970A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
Manifest number: 14C8
Signing time: Thu 23 Jul 2026 17:01:31 +0000
Manifest this update: Thu 23 Jul 2026 17:01:31 +0000
Manifest next update: Fri 24 Jul 2026 17:01:31 +0000
Files and hashes: 1: 1-uY3ByKZWX6EbvY022ukUYAIf0A.roa (hash: RrYvBD/sXCQXZ4ZUGRnJ0kZRIByBBH3L6RfLx0gb2ec=)
2: 2VnEP0kZcDQSDl0UL_jzXnG71q4.roa (hash: ZjSYJHerA/IUP/DXVd1u6yoH1Bz+1CyyRDmQ7NJ49jM=)
3: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl (hash: PHq+mu3oVVB1Y8lgDJH/7lh9IpE6X+PX9l3E77qefDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:d9:c2:fe:9c:67:b9:fd:59:09:f7:82:97:0a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Validity
Not Before: Jul 23 17:01:31 2026 GMT
Not After : Jul 24 17:01:31 2026 GMT
Subject: CN=69693001fc92fa8a88217d3497f0a4b480630787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:40:4a:54:f4:10:17:37:0e:5b:39:2d:02:
f1:ce:9c:40:48:56:d0:e3:b4:8e:a5:ee:53:df:50:
66:5f:2a:be:d8:4f:b4:3d:ed:1c:83:0f:9a:13:90:
24:c8:c3:2c:8a:eb:04:ed:dd:bb:b8:57:5c:2c:83:
e0:c0:1c:09:95:3c:f3:6d:c8:ef:93:de:01:0e:13:
1a:f5:37:63:27:ea:39:91:b0:6f:b0:1b:e8:8b:4c:
be:7a:95:fc:43:c4:66:e7:ee:5d:fd:01:4b:e5:07:
5b:91:cb:9c:15:5f:b1:3a:ee:2e:8f:28:a3:65:b7:
0a:a1:e7:6e:83:c4:ac:22:82:eb:3f:f3:83:e0:ec:
02:9c:7c:9d:e7:76:74:e3:4f:d5:75:ad:60:76:59:
1f:de:d1:f1:50:c2:2d:6d:56:a6:b1:01:2d:81:12:
55:2e:79:77:42:69:a4:b9:37:34:43:9d:6b:7a:3a:
01:8d:ab:80:c3:57:43:08:c6:9d:f5:fe:ab:e6:29:
c6:f3:e8:11:39:af:0d:04:7b:5f:64:1e:61:ba:10:
02:34:d1:98:bf:0c:65:ce:6e:bd:7f:04:17:05:19:
bb:d2:06:c2:8a:3e:8b:7a:55:a9:73:bd:16:de:db:
e1:b9:29:77:d3:5d:de:a6:7f:b4:da:42:7f:41:ea:
d8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:69:30:01:FC:92:FA:8A:88:21:7D:34:97:F0:A4:B4:80:63:07:87
X509v3 Authority Key Identifier:
keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4b:07:59:9b:e3:82:98:89:af:fa:97:0d:a8:9f:e6:fc:16:
c6:f4:ba:18:b0:58:45:3e:a0:28:60:7a:39:7a:fa:2a:44:82:
1f:61:e1:40:3e:30:0c:62:55:a6:5d:18:4f:ae:9c:d9:2e:6b:
df:bb:3c:77:d0:d0:29:ac:ca:ab:7f:03:91:5b:60:38:48:f4:
cb:00:d9:64:90:17:c8:84:0f:6a:a7:16:94:be:77:6c:3c:fb:
76:9f:61:a9:62:2c:7e:85:d9:29:5a:c3:6e:d0:71:b1:dd:ee:
c5:76:dc:e8:c8:b9:ec:aa:a6:91:a4:95:76:72:92:ec:54:11:
c6:df:27:20:f8:f1:19:d6:8c:fb:d4:4a:30:c6:96:ba:16:05:
d4:a3:81:53:2f:a9:a3:e0:99:eb:1d:86:e7:c1:87:de:0f:9a:
8c:0f:38:6d:74:49:ec:7e:40:ad:40:7f:3f:8e:a5:55:9d:77:
1a:13:42:bc:af:e5:2a:73:22:de:bd:96:b5:0f:a5:9c:fe:7b:
eb:9b:54:09:54:04:0c:a0:52:97:f3:7f:78:23:8e:00:90:a6:
f4:c2:94:f6:d6:c0:b7:7a:ce:ad:cc:aa:12:6e:c0:9a:4e:51:
ff:09:e5:a6:19:11:f9:15:10:1b:cb:be:9a:32:1a:26:d7:17:
6d:28:47:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:48 2026 by rpki-client