Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: oq6xeJxLNx3ZMnEROxOSJXEaw7UuaFudQbs+RAVhG5c=
Subject key identifier: DD:AA:87:57:B5:22:AF:41:92:E6:EA:5F:FD:18:E7:9C:7A:C1:DB:D8
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 019F927F3B86D21C5BE2ACD06AA91853C979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 19D5
Signing time: Fri 24 Jul 2026 05:00:39 +0000
Manifest this update: Fri 24 Jul 2026 05:00:39 +0000
Manifest next update: Sat 25 Jul 2026 05:00:39 +0000
Files and hashes: 1: 0bqo0bUAXv_4CI9l73mqbhE8a2g.roa (hash: iEe2NrJePiOEkt4y1MNa7WFWziQ9517Q5QJMPLgLqF0=)
2: RT27iS5dmX-RpCR1NpzNSn8n2Uw.roa (hash: qBi2ogY38ZEBaQkYgKwRqyPlrZuDmr1aSjBSW1/pXdo=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: YNK0xrD6JuNFRzgCTb/FTxlG2K/+ncdboxVJt3CUWVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:3b:86:d2:1c:5b:e2:ac:d0:6a:a9:18:53:c9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Jul 24 05:00:39 2026 GMT
Not After : Jul 25 05:00:39 2026 GMT
Subject: CN=ddaa8757b522af4192e6ea5ffd18e79c7ac1dbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:2c:6f:f6:4c:8b:77:5d:d8:3b:f6:77:13:
c1:07:7f:9e:18:9d:21:ca:2b:a4:6e:02:3e:52:5e:
48:7b:2d:fc:0d:97:c9:53:30:bc:50:d0:9d:cf:23:
5b:af:f3:d5:41:e2:0b:da:91:89:b9:75:ab:d3:54:
cf:97:b1:8e:6e:d1:a0:08:af:7f:8e:5d:18:a0:e8:
d2:e6:41:ac:ad:58:c8:bc:b0:45:14:a0:9e:7c:e1:
74:66:0f:69:fd:3f:53:06:55:84:90:b3:0c:4f:23:
9c:1b:dd:5d:d0:1f:5d:ae:0f:a3:98:71:cf:d7:92:
58:63:fa:94:19:d7:91:21:8f:98:c6:3d:0a:9c:ad:
b6:11:be:67:74:30:57:c2:71:6c:b0:19:cf:5f:d5:
91:bb:4b:2c:71:fd:ed:f0:c0:b3:67:32:59:e9:50:
09:37:cb:eb:3c:1f:e5:a2:55:ed:d4:c0:e0:93:11:
4b:e8:3f:c2:23:26:b4:0e:c4:96:9b:d7:93:12:2f:
fc:8c:ad:00:2b:21:f6:7e:75:d1:69:a7:b6:69:bb:
64:6b:42:67:09:47:17:57:7a:95:47:80:cb:fc:5c:
a3:a4:2a:da:9e:47:3b:18:16:70:8d:bb:41:49:9b:
cb:ab:e7:40:e0:29:01:51:93:8d:47:27:95:d3:e0:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AA:87:57:B5:22:AF:41:92:E6:EA:5F:FD:18:E7:9C:7A:C1:DB:D8
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ee:71:cc:60:bf:3f:6f:de:37:64:f0:8d:ac:44:70:52:1c:
a3:29:79:6b:78:03:1f:5f:8e:25:50:dc:b1:f9:23:82:b0:d8:
e5:03:cf:d3:65:cc:6b:09:56:e9:b4:d5:87:25:ba:eb:8a:4d:
50:1e:f4:2f:b4:3c:6f:4f:24:f1:94:12:d6:e1:a8:d7:e9:44:
70:df:df:77:7f:da:b8:fe:f3:93:7e:4a:d0:d9:e6:59:26:0e:
da:60:62:88:de:18:b9:b5:c6:d7:6b:ab:e6:ca:5f:40:b8:72:
15:4a:16:e1:8b:56:e2:92:21:a8:86:c7:f8:fc:05:ec:48:5c:
df:0d:fb:93:d9:8c:24:fd:06:ab:74:18:51:79:35:21:22:30:
6d:5d:0f:70:fa:a1:b0:14:2a:77:e2:ca:0a:57:7b:bb:e2:c8:
95:73:b4:f7:02:9b:5c:9d:6f:ce:8d:f6:41:dd:b3:72:d7:25:
d3:a8:07:85:18:27:28:f7:e5:bc:d7:0c:58:75:c1:de:95:70:
68:46:0c:ca:53:cf:8e:dc:39:e5:7b:fb:93:0a:30:ba:2c:83:
d9:ea:dd:fd:18:4b:bb:e8:6b:9f:fb:ca:e6:72:4c:19:28:b7:
ee:5c:ae:19:e0:30:93:56:5b:37:be:87:ac:96:b5:55:ea:f2:
33:a5:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:28:24 2026 by rpki-client