Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
File: gFOrw9SfVluUh47Y8iDOMn-XSjI.mft (raw, json)
Hash identifier: wnzct82gAWNplUuzLU6m3emKjLbYAWEpijvuvDnFhOQ=
Subject key identifier: 8B:22:97:46:A2:D7:01:B9:D5:32:41:F8:81:8D:60:2D:D8:F2:D5:F9
Authority key identifier: 80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
Certificate issuer: /CN=8053abc3d49f565b94878ed8f220ce327f974a32
Certificate serial: 019F8FEC8159815A49BB3D9C66FD27BD4177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
Manifest number: C3
Signing time: Thu 23 Jul 2026 17:01:09 +0000
Manifest this update: Thu 23 Jul 2026 17:01:09 +0000
Manifest next update: Fri 24 Jul 2026 17:01:09 +0000
Files and hashes: 1: GPJ5YibQX7Qs5zXj8y25gwD4O7o.roa (hash: dw68P8crMQR+t7pqyZ2DtV9eQd5KOVoGJFGq3g9A+8E=)
2: _5dlpHFSfnZB5fPESdwe0vcQoK0.roa (hash: 648yr+Yw2hgriwVmDfKLpfCh/5rjlF0ILGcl2PNzoO4=)
3: gFOrw9SfVluUh47Y8iDOMn-XSjI.crl (hash: UBANCxryzW0CjpO+Yu7JvQ/TCIOXhK1R4G1Vnla1L5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:81:59:81:5a:49:bb:3d:9c:66:fd:27:bd:41:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053abc3d49f565b94878ed8f220ce327f974a32
Validity
Not Before: Jul 23 17:01:09 2026 GMT
Not After : Jul 24 17:01:09 2026 GMT
Subject: CN=8b229746a2d701b9d53241f8818d602dd8f2d5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:ad:69:25:61:de:62:53:55:3a:cc:9b:67:
79:1a:b2:6a:df:ae:7e:de:a5:28:50:f2:74:74:0f:
07:44:dd:ac:87:0b:f6:f8:64:23:bc:81:52:56:8f:
b3:67:93:57:27:19:8c:0e:e3:70:8d:42:94:9f:0c:
0b:3d:d4:10:45:b9:dc:7e:d0:5e:3f:d5:11:c6:35:
1f:73:06:8b:c0:a2:4a:3c:13:16:ba:a6:26:f1:a3:
40:25:20:fa:eb:65:48:14:08:ee:8a:fb:3d:ca:dd:
88:e6:fc:c4:55:e8:6a:a0:56:ac:f5:83:f3:41:7f:
8f:b3:8c:99:21:9e:75:c6:42:37:de:d8:fa:35:9d:
03:49:2c:96:7c:b3:06:1b:8f:2b:be:d2:5e:56:13:
e3:28:4a:81:9c:38:05:d9:43:dd:8a:bc:54:8e:66:
c6:2a:20:02:2b:15:0f:92:88:a9:15:87:22:c4:01:
2e:71:b9:3d:91:6a:2b:e2:18:c0:4b:83:ec:31:39:
80:d3:28:bb:33:ff:0f:9a:1f:ab:12:ca:b0:30:67:
58:9f:e3:3d:96:91:e2:da:f8:2d:de:00:1c:6a:59:
74:e0:39:f0:db:db:2f:5d:3c:21:aa:f4:52:3e:b8:
13:30:b8:38:33:4f:79:a9:7f:c3:1c:1b:04:d8:39:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:22:97:46:A2:D7:01:B9:D5:32:41:F8:81:8D:60:2D:D8:F2:D5:F9
X509v3 Authority Key Identifier:
keyid:80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0c:68:38:07:19:1d:af:47:dc:c6:32:5c:9c:a3:93:9c:38:
04:ed:2b:1d:52:f3:03:e9:1f:12:7c:e1:d8:39:e4:b2:c0:a1:
18:62:a2:da:1e:b8:c2:9d:b8:d7:4f:bd:e3:5a:2d:b5:c1:0f:
0b:7e:2a:04:d0:c1:b3:ab:73:cb:af:8f:f4:3d:db:52:1c:6d:
0d:41:d5:75:f3:ba:c3:d2:b3:75:07:5c:04:f3:c2:38:28:2b:
1f:6a:1f:a1:26:c9:d1:ac:bb:ba:4c:69:60:8e:60:6a:8a:8a:
a3:88:47:db:6e:cf:0e:38:14:97:7c:59:e8:52:c8:39:d9:5e:
ca:5a:6e:94:2b:23:57:0f:d1:13:a3:3d:e8:fa:9e:ed:ed:63:
46:46:d4:de:28:b3:a9:15:78:4a:84:ed:15:82:7f:c7:fb:91:
d6:20:5e:17:02:96:28:e3:dd:0b:47:c4:2f:ed:96:a3:e6:9a:
72:23:3c:ba:c6:62:a8:3e:74:fd:63:56:9b:4d:d8:96:f7:9a:
5b:16:fb:a8:6b:0b:d3:c5:fe:65:91:7c:64:c4:55:5b:63:b4:
1f:0f:86:61:8c:fc:bf:fe:11:56:f8:d0:a1:3d:8b:66:b2:ab:
a3:66:14:c8:28:9d:a2:96:3b:04:4e:ad:87:c5:cd:bc:bd:02:
15:e2:90:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:38 2026 by rpki-client