Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
File: gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft (raw, json)
Hash identifier: nhTHRki0qAKvtA0OxtyOchLRMHuD9dNqXoLua7P0gXU=
Subject key identifier: BB:8A:07:32:01:02:06:1C:9A:6F:58:6C:A0:35:0A:AC:9E:6C:70:65
Authority key identifier: 80:A9:21:40:84:33:B6:6E:A5:0A:40:00:AA:CE:10:D2:AD:D0:6A:85
Certificate issuer: /CN=80a921408433b66ea50a4000aace10d2add06a85
Certificate serial: 019F94375655DE690B2E43AD76F492284D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKkhQIQztm6lCkAAqs4Q0q3QaoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
Manifest number: 0820
Signing time: Fri 24 Jul 2026 13:01:22 +0000
Manifest this update: Fri 24 Jul 2026 13:01:22 +0000
Manifest next update: Sat 25 Jul 2026 13:01:22 +0000
Files and hashes: 1: TADovInnVhImIAMNLhy833dYeyU.roa (hash: f/dalF6vRD8VNn9XqvAc5SALl8hYeWv1uoN4z7iWDuo=)
2: gKkhQIQztm6lCkAAqs4Q0q3QaoU.crl (hash: 8p7sEf/R2WxtUfJRXoELNVEyGeE7IySj7+Waa60g3n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKkhQIQztm6lCkAAqs4Q0q3QaoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:56:55:de:69:0b:2e:43:ad:76:f4:92:28:4d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a921408433b66ea50a4000aace10d2add06a85
Validity
Not Before: Jul 24 13:01:22 2026 GMT
Not After : Jul 25 13:01:22 2026 GMT
Subject: CN=bb8a07320102061c9a6f586ca0350aac9e6c7065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:3e:87:6e:61:19:e1:7d:91:f5:f3:da:40:
b0:e4:62:dc:54:d5:af:aa:38:2c:9c:a3:b2:2b:3b:
9c:c6:6d:eb:2b:00:91:3f:ea:52:21:ad:81:e2:a5:
80:2a:51:49:86:c5:f8:ee:19:c9:a5:4d:f9:6a:84:
70:99:b4:e0:96:eb:f4:dd:24:de:7c:12:7e:b2:ca:
b1:50:53:95:6b:bf:b1:17:f4:23:d9:e1:82:e6:0f:
ec:b9:92:d2:23:09:90:91:bb:a2:e5:c6:5a:de:f1:
d1:38:e2:ab:63:03:d2:de:4e:03:07:ec:4d:63:09:
2e:4a:e5:f0:99:d6:21:59:75:36:13:29:5e:cf:04:
2f:c8:30:0b:88:12:79:1d:4a:d7:9a:72:c9:3b:88:
6b:c9:50:e1:63:b5:a4:94:4b:5d:e0:1a:92:ed:08:
d9:45:14:ee:4d:36:c3:fc:2e:15:ed:47:df:76:4f:
c0:89:c8:db:bf:c2:4e:35:84:a6:14:af:e9:32:8f:
33:b6:fa:7c:bd:77:da:e2:bf:cd:45:6c:f2:85:df:
a8:2b:f3:b4:03:3c:7e:53:c6:91:81:42:90:41:11:
26:ac:c8:f0:ed:06:0d:bb:ff:45:d4:cb:61:bf:bc:
e8:6d:05:e8:29:e3:70:ae:76:e9:63:81:46:5c:92:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8A:07:32:01:02:06:1C:9A:6F:58:6C:A0:35:0A:AC:9E:6C:70:65
X509v3 Authority Key Identifier:
keyid:80:A9:21:40:84:33:B6:6E:A5:0A:40:00:AA:CE:10:D2:AD:D0:6A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKkhQIQztm6lCkAAqs4Q0q3QaoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c7:cb:39:cd:4a:e2:2b:9d:72:d3:3e:82:b2:83:da:f9:1c:
61:f6:a2:55:08:23:ed:36:0b:dc:cf:1a:05:f7:d0:78:e1:22:
93:7a:fb:23:5c:ef:90:f4:34:4c:4f:c9:c0:9f:6e:f8:05:75:
bf:9e:79:e3:2e:b0:ff:ce:bd:ed:ce:82:57:54:a1:b1:32:d8:
be:8e:d2:a4:f7:28:e3:77:8e:c5:f8:6c:ef:b1:27:86:71:cb:
04:9e:45:da:50:02:02:62:c7:90:31:12:61:7b:24:e8:db:31:
2d:37:e3:36:a1:81:b9:8f:a1:35:e3:22:b8:ba:86:f4:c5:92:
f2:bc:27:c9:cb:69:b7:54:cc:f9:6e:6d:c1:1c:53:9e:be:7d:
f4:c1:ec:45:ea:e2:27:e9:81:56:6c:42:41:c1:5c:18:1e:a5:
57:cd:a8:f0:33:fa:64:5f:09:94:5d:8e:78:17:33:62:4d:f7:
23:93:6c:ee:0d:82:3d:da:df:06:b2:82:31:07:f4:84:b4:6b:
53:52:45:db:3f:6a:4b:02:51:69:65:a2:b6:f3:1f:78:43:ed:
bf:64:c2:09:0c:1d:90:ad:f7:99:ad:bf:b7:c7:ee:1a:c1:4f:
4f:03:cf:a4:06:f7:50:6c:78:60:9a:ad:1f:5a:55:ab:4c:f6:
a6:4b:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:32:44 2026 by rpki-client