Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: gx3iw3+ifd+aNRYWCvlTeIoY8lgwFzB3Bn5xyJFX7F8=
Subject key identifier: 67:A3:73:27:80:3A:ED:D5:18:F7:6A:79:AD:95:47:3B:AF:9C:3C:AD
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 019F935ADA85DAC3D720A630B3ADE6E6EDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 09:00:32 +0000
Manifest this update: Fri 24 Jul 2026 09:00:32 +0000
Manifest next update: Sat 25 Jul 2026 09:00:32 +0000
Files and hashes: 1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: Z9QaX/FLmtyvSHsb2hPm+Ur3FFUAwKcBWFdmr5dkQU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:da:85:da:c3:d7:20:a6:30:b3:ad:e6:e6:ed:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Jul 24 09:00:32 2026 GMT
Not After : Jul 25 09:00:32 2026 GMT
Subject: CN=67a37327803aedd518f76a79ad95473baf9c3cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:0b:bb:64:97:69:6c:bf:b1:be:e2:06:3e:
15:f0:1c:f6:55:75:f8:e6:d7:2e:4e:2f:e2:c6:2a:
e0:c5:40:fe:9b:8a:e1:fc:7e:43:05:ea:b9:b2:89:
bb:31:0e:f3:b7:fa:dc:a9:c0:a8:81:48:5a:04:65:
ca:90:66:85:b8:9c:8d:d3:d7:1d:7c:f7:10:a6:d5:
67:01:5e:b2:68:94:ee:99:5e:c3:9b:99:06:e4:fc:
b6:fe:58:c5:dc:9a:1f:6f:38:dd:eb:1f:9e:48:87:
01:6b:b6:28:52:09:62:6f:0f:72:aa:48:82:77:2a:
d0:06:da:ab:3f:3b:e6:73:5a:83:04:ea:c8:77:f7:
61:66:3a:0a:12:07:30:4a:b3:e2:a1:62:b4:fb:41:
c4:db:ac:0f:f8:22:74:d1:15:86:fa:8b:d6:28:48:
4c:7f:86:09:c9:11:77:47:a3:9b:ac:29:0a:e2:f9:
fd:50:c3:81:87:9d:17:53:4e:22:db:c1:5c:8a:cd:
58:4c:7a:64:3b:58:30:bc:a7:b1:74:13:1d:24:4b:
65:e4:17:3e:c2:71:3c:89:e1:eb:7d:c7:9d:da:6b:
a9:f0:8a:b8:66:de:1c:a0:a5:e2:ff:65:e1:be:ed:
4a:4b:d1:67:46:28:8d:44:36:26:d1:ce:6a:2e:ca:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A3:73:27:80:3A:ED:D5:18:F7:6A:79:AD:95:47:3B:AF:9C:3C:AD
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:37:38:ea:ae:50:9d:42:d6:7a:cf:dc:2a:d2:cb:59:7b:e5:
16:b2:79:8a:6f:90:a5:b3:1c:df:26:c7:d2:6a:0d:ea:b1:32:
ec:f7:71:91:2d:8a:02:11:14:27:b9:e2:4f:a3:ca:16:78:6b:
0b:50:4b:85:77:98:d8:6b:93:9d:ab:64:c6:1a:5c:e6:08:40:
b6:0a:43:56:90:d8:5b:4c:fa:22:19:16:a1:70:aa:36:57:a0:
81:b8:bf:39:14:d9:6c:55:4d:4d:e8:dc:b2:79:9f:41:65:dd:
af:7c:ee:5c:9d:8e:52:a4:75:1c:fe:3d:54:e3:d3:24:02:0f:
29:52:bd:03:1a:7e:2c:90:ae:89:e9:16:69:a6:fd:b4:19:59:
46:28:5b:1b:26:f7:17:d6:bd:4e:c2:65:fd:99:db:08:54:6d:
ee:26:25:41:2f:51:91:9a:89:70:4d:63:27:33:61:c5:a9:38:
56:33:f5:24:64:ff:14:5f:27:b4:b3:54:c4:df:ad:94:bb:c5:
b8:de:8e:67:dd:de:19:38:a8:ad:03:89:f9:9d:b5:53:53:1a:
10:c0:05:63:11:2b:17:ee:66:70:f5:e2:e6:ea:0f:7e:7c:d9:
09:f0:8b:28:4d:6f:db:c7:90:8e:7a:48:4e:7a:c1:34:72:3c:
34:c7:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:31:53 2026 by rpki-client