Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: 5ml6GFjREkw+2RPbxc+FI3ScrGHms+a2rAOKzvBYVgA=
Subject key identifier: EF:D4:8A:63:FB:82:F4:0E:09:4C:84:3F:93:D9:B8:74:C4:D1:9F:43
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 019F916CB06CFD26F0948DE57B9579733A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 00:00:47 +0000
Manifest this update: Fri 24 Jul 2026 00:00:47 +0000
Manifest next update: Sat 25 Jul 2026 00:00:47 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: glZv6W93Rz4VyUHxCDx8wTHqYadPhn9SCWO/5IAziRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:b0:6c:fd:26:f0:94:8d:e5:7b:95:79:73:3a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Jul 24 00:00:47 2026 GMT
Not After : Jul 25 00:00:47 2026 GMT
Subject: CN=efd48a63fb82f40e094c843f93d9b874c4d19f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:13:87:cc:77:ae:ae:5a:68:2c:57:31:47:
2b:0d:42:ae:73:c4:6b:e2:17:9e:c4:eb:64:71:c4:
ae:82:13:73:82:44:1b:7d:15:47:d3:e4:a8:83:72:
61:cb:40:a7:84:2f:4d:c0:82:c3:10:87:1f:59:d8:
3e:85:8f:ec:cf:09:00:c1:93:8a:a6:d6:e9:c8:31:
06:8a:38:53:a2:73:b7:d8:75:e6:2d:2c:7e:6f:e9:
a9:49:4d:0f:f5:c4:0c:6b:a0:32:4b:eb:52:61:e0:
8f:77:fa:ab:62:ac:5c:8a:8a:96:a2:6e:eb:3f:9b:
6c:bf:89:b3:52:7a:ef:a5:cb:76:3d:ad:41:bd:17:
ba:51:b6:24:f7:13:97:02:0e:18:ba:3c:2d:9f:0d:
10:02:7e:14:3e:31:e9:19:28:18:9e:b3:8c:78:8e:
d2:b2:84:14:a8:34:15:fb:81:47:0f:1a:52:49:7a:
0a:ad:0a:73:5a:72:be:66:f3:40:df:88:48:e9:ad:
ec:c1:f5:b9:92:57:bf:83:7e:3b:c9:63:64:54:50:
c7:10:e3:f5:49:fc:bd:0c:d5:b7:69:ab:04:53:a5:
11:15:b4:f7:b0:eb:d7:da:9f:57:fc:56:e4:c0:9b:
8a:ef:bd:ba:f1:91:09:57:90:7f:b9:79:d1:2a:9b:
05:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D4:8A:63:FB:82:F4:0E:09:4C:84:3F:93:D9:B8:74:C4:D1:9F:43
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:83:53:6b:84:25:6f:a9:23:35:e4:70:4f:71:55:55:f9:f7:
cc:6e:1c:47:83:64:cb:d1:f1:69:01:a9:35:45:b9:05:21:9d:
c2:67:ad:e5:cd:4d:26:aa:75:0c:ba:2c:72:07:0f:57:10:e9:
26:8e:49:be:ef:09:0e:21:0b:10:c3:2b:38:ab:df:c0:d4:bd:
1a:79:ef:bd:3a:ca:b8:56:4a:54:01:13:14:0f:3f:c6:09:89:
54:49:18:3b:c8:7f:a5:3c:9d:81:01:98:c0:8d:25:24:aa:9c:
42:fa:49:05:74:3e:23:e1:b4:fb:94:3b:66:45:67:b2:f7:71:
fc:b1:5d:5a:6e:b8:9e:24:7d:3d:1f:c2:32:19:57:37:18:a0:
58:27:cd:96:01:b5:68:12:1f:d5:8a:9a:e7:82:21:76:b7:29:
92:7e:ff:9b:55:6c:0d:74:2b:0d:d2:f7:54:ed:54:68:d8:c6:
56:83:93:f8:40:5a:2e:2c:92:04:e9:45:98:37:71:78:88:d8:
fe:0c:0f:3a:ec:8a:b0:b4:73:40:f4:13:a8:12:40:03:65:b9:
7d:d6:79:7b:d7:6a:9b:2f:7c:46:ec:d9:ed:d1:5d:e4:16:e8:
78:19:b5:d4:b1:5b:18:81:21:52:33:c4:1e:ae:24:c3:df:25:
71:3c:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:17 2026 by rpki-client