Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier: BOmFIEIUMU7VyydaTh9jYgVoCf2MGHXyJ4EYoG4LLWY=
Subject key identifier: 18:C4:BE:79:E1:3B:3F:C6:35:35:67:3A:94:07:13:02:8B:BE:03:B2
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 019F92EDB3537F2107D0EB01F59B11F71A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number: 0F32
Signing time: Fri 24 Jul 2026 07:01:19 +0000
Manifest this update: Fri 24 Jul 2026 07:01:19 +0000
Manifest next update: Sat 25 Jul 2026 07:01:19 +0000
Files and hashes: 1: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: JRG13aXLDtjsMXY2MsmeXcEjexqs86mxeDUFlOCW+9E=)
2: hQ9NotylFYMkqo3bbUqE9OBXr30.roa (hash: DDGD0ACVZ8p80B8GH1cwIOOojO6HokidqY08m4jPrFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:b3:53:7f:21:07:d0:eb:01:f5:9b:11:f7:1a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Jul 24 07:01:19 2026 GMT
Not After : Jul 25 07:01:19 2026 GMT
Subject: CN=18c4be79e13b3fc63535673a940713028bbe03b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:eb:87:ac:68:78:92:33:77:3a:03:07:11:
d8:c1:cd:25:95:f5:9c:d3:c0:f7:4e:c3:00:f4:a7:
21:9a:f2:e9:56:37:d5:2a:0e:b2:f9:03:cd:4b:40:
42:f8:9d:71:92:fc:7b:4c:12:df:1f:08:9e:35:9c:
15:9a:4b:42:83:da:fd:e3:ec:82:4d:4f:62:aa:e5:
1a:6b:f7:7e:e6:b8:52:eb:48:ce:f6:2c:1a:29:8a:
32:58:0c:00:a7:0f:48:49:13:3c:81:0b:ac:2d:29:
1b:eb:3d:f5:d1:ce:14:48:5a:9e:fb:f5:14:8a:63:
16:1a:03:ea:59:a7:43:96:58:aa:e3:02:7c:21:a6:
65:0a:ca:1f:b3:23:15:58:c9:2d:df:5e:4b:b5:2d:
33:39:78:51:cb:42:d9:d4:4c:ee:2e:1a:23:48:e8:
83:29:aa:1d:26:3a:e1:a3:c1:a9:1a:67:cb:36:8a:
15:d4:dc:89:bb:58:23:4c:cf:c9:1e:a9:50:54:16:
6c:eb:ee:d7:00:4c:a1:75:08:a7:97:c6:ac:57:d7:
0c:56:57:50:83:7e:ca:e3:60:07:75:7f:0b:8e:53:
03:f9:d6:a4:64:7e:3c:ba:b2:70:d4:5c:97:0f:b6:
36:c8:23:24:71:04:2a:24:98:7d:fe:8f:bc:87:2a:
9e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C4:BE:79:E1:3B:3F:C6:35:35:67:3A:94:07:13:02:8B:BE:03:B2
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:70:4a:fc:69:84:d5:d3:c4:52:00:49:33:64:44:59:43:1b:
b1:46:98:48:04:54:9d:d6:8a:ed:f3:f8:10:57:57:26:a1:08:
84:84:10:bb:cd:5e:29:c4:18:67:69:27:a2:5b:13:fe:6f:09:
63:29:a9:c4:22:40:f0:87:ba:e4:13:d8:be:41:b6:50:6b:be:
21:d0:3a:e5:f4:5f:2d:d8:eb:ac:5a:2f:ca:f1:42:f0:8e:25:
fa:8a:e0:80:b3:94:79:a1:7e:cd:84:27:a5:5a:08:67:fc:36:
77:e2:e1:63:be:56:d0:e3:07:a5:9a:d7:73:6a:61:b4:39:4d:
41:68:3b:76:b9:b8:d3:50:75:d2:26:39:ea:ca:b2:94:b4:db:
b6:df:aa:74:cd:5f:7a:4b:91:7c:86:94:e9:b6:8c:af:0a:4c:
af:68:9f:d2:7a:50:40:02:9d:46:b9:88:72:e3:ba:ab:0c:17:
a1:5b:4e:94:e9:3d:5c:19:0f:c4:3e:9c:57:86:61:e6:d8:16:
fc:06:db:84:5d:a1:37:6c:84:3c:d9:20:11:6c:01:41:fc:77:
59:25:c9:7b:c2:70:37:f8:42:2e:ed:c8:cc:1a:c6:ed:73:b6:
d9:7c:3a:5b:d3:da:d7:0b:42:6e:bf:bc:05:e0:6a:20:64:ed:
41:80:7f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:52 2026 by rpki-client