Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: ZHf42/iHbMBZVhMwSeoxQSg0bvj6COC90Vagh+8FXgw=
Subject key identifier: 86:F4:E2:4E:DC:04:BE:27:B0:57:3C:7F:F4:C1:56:53:26:ED:C5:23
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 019F94A50F7F0BDDE62CA9ED06F1F1E8726A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 042A
Signing time: Fri 24 Jul 2026 15:01:13 +0000
Manifest this update: Fri 24 Jul 2026 15:01:13 +0000
Manifest next update: Sat 25 Jul 2026 15:01:13 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: fsq3K56RfCfJclpTkUh4WKOPUeTNKcVrX7Q7KIfcGIs=)
2: t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa (hash: Gojw7FbJO6oLOCFdJ+IonU5RAeRQTmH3d/fqvSSbRko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:0f:7f:0b:dd:e6:2c:a9:ed:06:f1:f1:e8:72:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Jul 24 15:01:13 2026 GMT
Not After : Jul 25 15:01:13 2026 GMT
Subject: CN=86f4e24edc04be27b0573c7ff4c1565326edc523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:00:d3:bf:86:14:88:f0:92:be:7b:a4:77:
8b:63:03:db:0f:1a:46:92:0a:6e:96:92:b4:d0:18:
68:93:f5:75:cc:e6:e1:8f:a3:a8:aa:f3:e4:d2:cc:
4c:9e:b2:33:38:14:08:82:98:83:1b:6a:b5:f5:77:
17:6d:e4:d1:ca:e0:d1:86:42:da:d1:de:6e:d8:d5:
30:6b:c4:73:65:44:02:c8:6b:5e:cb:da:0f:3a:1e:
74:e4:98:fe:5a:d6:71:17:21:56:13:08:0d:bb:c1:
5d:b6:64:3d:cd:f0:c9:af:fc:1f:b7:c7:7f:c8:b7:
f4:58:07:2e:8b:89:91:f5:81:85:b6:63:68:bc:f6:
3c:d3:92:b0:b5:ac:f6:a7:05:16:da:83:48:f0:4e:
cf:f1:97:80:95:62:21:78:d7:d7:5d:d2:4c:35:d2:
9d:b7:34:72:66:4b:50:ad:5a:c9:91:e4:a9:16:9d:
57:b8:9c:12:4d:e9:53:3c:a6:21:0e:ea:9f:dc:a7:
5e:fd:2e:56:3c:e4:9c:3e:e5:b9:96:30:5a:48:e3:
b6:eb:9e:dd:30:83:25:17:1a:01:0d:ac:0c:f8:25:
e7:cd:ab:6d:77:c5:3e:61:a9:45:06:b7:bb:28:25:
ed:72:1a:b3:53:b5:28:88:a2:80:6a:d0:fc:dc:b5:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F4:E2:4E:DC:04:BE:27:B0:57:3C:7F:F4:C1:56:53:26:ED:C5:23
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f2:99:a6:94:e4:18:39:41:5b:e6:ab:16:1f:3a:23:82:95:
bd:0e:81:9d:d6:4c:12:ab:1a:d5:85:4d:ae:68:43:66:b7:44:
8f:b2:31:9e:ab:67:13:0e:ba:5b:b8:d0:d7:ad:b5:3d:d3:2f:
e6:ff:6e:08:b6:02:34:c5:12:41:f1:8a:9c:35:29:f6:d6:0f:
01:99:05:3a:68:8d:0f:02:df:03:14:71:2b:26:c3:72:e8:1d:
60:aa:9e:b1:14:77:68:24:e7:81:9b:27:94:8f:c3:dd:f4:12:
05:63:c2:a2:b7:00:79:ee:6c:e9:61:de:d2:44:d8:f1:94:19:
0a:af:65:70:d1:c3:4b:ad:ef:90:0c:1f:8f:88:fd:b9:88:79:
07:65:c3:96:33:06:76:0a:fa:aa:96:7a:42:db:6e:89:5f:88:
85:05:2d:28:7d:b1:f7:5b:e2:0c:ee:4f:fa:79:0b:7b:27:31:
a2:10:a0:fc:e6:0a:dd:09:64:b7:77:d4:06:cd:59:07:88:33:
4f:63:c2:a1:5b:10:c9:d0:81:5c:0f:0b:a4:94:f7:d4:f1:b3:
f7:ef:21:b7:8f:49:45:b4:47:57:19:1a:58:7e:48:cc:5a:05:
13:98:f0:18:6c:98:34:86:d4:1b:b1:82:b0:56:24:79:11:a6:
fe:b2:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:06:34 2026 by rpki-client