Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: YhPmqqlTFsWm1VS/7wYfMYZBh07WnCUrJ3pivAwxyXE=
Subject key identifier: 20:A8:72:9B:6B:B6:5A:82:18:B4:FC:D7:82:BA:E5:DD:63:6A:0B:85
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 019F90FF053ABFC6949CB28DD9556217F3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 0AA1
Signing time: Thu 23 Jul 2026 22:00:59 +0000
Manifest this update: Thu 23 Jul 2026 22:00:59 +0000
Manifest next update: Fri 24 Jul 2026 22:00:59 +0000
Files and hashes: 1: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (hash: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: oOgAlG0zU3Vv3TiH0AEAf0ujTHdY5hPqm60JLGw34wI=)
3: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (hash: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY=)
4: XtW69XYWfcYs9FhfW77svXCHmQk.roa (hash: +2PiuVV/xd9FID0vQ4PS/1nWqfCBv4fOx6GV++A7pIo=)
5: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (hash: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:05:3a:bf:c6:94:9c:b2:8d:d9:55:62:17:f3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Jul 23 22:00:59 2026 GMT
Not After : Jul 24 22:00:59 2026 GMT
Subject: CN=20a8729b6bb65a8218b4fcd782bae5dd636a0b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:c1:2d:6f:19:dd:d8:8e:d7:9e:4f:2c:67:
59:b0:39:09:c9:d5:c9:0b:c8:53:db:87:f9:7d:c8:
82:1a:45:f4:dc:2c:11:23:9c:e0:4b:99:d9:9b:73:
8d:5b:ee:61:a2:e4:c6:2f:69:76:c9:b3:b7:a9:67:
a1:df:b3:2a:e9:67:c8:46:26:8d:7c:1a:76:0b:84:
27:6f:34:7d:8c:3b:54:15:53:d4:65:e9:86:93:6f:
be:a2:cd:39:2c:0a:d1:14:5b:e3:82:7d:e3:c5:6b:
b5:23:64:2b:4d:4f:4e:c8:e1:ef:25:22:21:6e:8d:
0b:05:12:7b:ef:cc:7b:6b:98:11:13:13:c0:06:10:
17:5c:67:cd:83:9c:34:16:f3:10:db:4f:f7:84:42:
20:e9:d2:36:a1:52:99:4f:b0:0b:0f:c6:71:35:e6:
07:1d:83:8e:56:ff:b2:f8:23:a4:9e:35:de:c4:b9:
ce:95:2a:d2:02:92:c0:8b:e1:e3:dd:99:6c:82:16:
96:12:bb:59:bd:b7:9b:e1:d4:a9:ce:fe:c4:fd:4e:
ce:07:dc:9a:44:d6:ee:44:08:ca:e0:11:31:34:f2:
16:04:ac:42:ac:88:75:70:88:35:66:0c:a6:94:54:
1e:b7:af:cb:2e:11:ff:4f:9d:a1:a3:75:22:cd:9b:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A8:72:9B:6B:B6:5A:82:18:B4:FC:D7:82:BA:E5:DD:63:6A:0B:85
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f4:f5:01:0d:74:e9:5d:8a:04:05:37:f1:b4:ce:2c:99:26:
89:0a:7b:be:f6:09:27:ab:5d:2a:91:38:bb:78:27:e2:ab:cb:
0f:99:6c:7a:c4:fa:86:16:44:43:07:d9:de:67:65:9a:a1:d6:
19:09:87:eb:2e:bb:38:24:ba:5f:11:65:ec:d9:69:21:45:4c:
f7:81:06:01:6c:0a:34:3e:bc:29:63:3b:ae:de:8a:d4:9a:e5:
8e:1f:57:97:e7:fd:dd:4a:bd:02:2a:d7:53:ab:62:88:d3:34:
f2:69:8c:8c:ba:cb:84:af:e2:31:82:7a:6d:22:bc:90:3c:23:
19:12:6e:aa:1b:5f:86:c7:88:f2:16:79:0d:80:e5:fc:9f:d2:
4a:69:38:81:97:26:bc:09:2f:83:c1:46:8e:53:19:66:fa:72:
c9:27:35:da:a7:b5:65:89:b7:cc:78:99:dc:f5:9f:3e:ab:0f:
da:dc:4a:90:e8:2a:10:ba:bb:b0:8b:88:9b:97:56:21:d3:73:
b9:12:fa:af:ba:46:af:d5:64:f5:ac:2a:d0:c4:e2:6b:68:27:
18:3a:10:17:76:ba:9d:e4:da:86:42:d1:b3:90:d4:ea:e3:4f:
e3:b2:fd:77:f5:13:cb:02:da:88:51:84:52:bb:ad:92:b3:04:
f3:c8:f0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:12 2026 by rpki-client