Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: dPh5PlzTrunEC5C9wf6bRsviEejHS6jzggK0XMUBF34=
Subject key identifier: 97:EA:5B:5C:6A:AA:40:E9:29:71:DF:00:DE:C1:52:A4:A2:00:29:C2
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 019F94A503F0AEC24BA3EBA602B5875119F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 1666
Signing time: Fri 24 Jul 2026 15:01:10 +0000
Manifest this update: Fri 24 Jul 2026 15:01:10 +0000
Manifest next update: Sat 25 Jul 2026 15:01:10 +0000
Files and hashes: 1: 1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa (hash: nATa+n5oWjMZXiwMho7tjE9Rx2x+4yb18TAu52HSqiY=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: vkMDEhGxEVBaqUdI/74ziEiIT6xG3ZD+lmDndYkS0Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:03:f0:ae:c2:4b:a3:eb:a6:02:b5:87:51:19:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Jul 24 15:01:10 2026 GMT
Not After : Jul 25 15:01:10 2026 GMT
Subject: CN=97ea5b5c6aaa40e92971df00dec152a4a20029c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:55:2c:63:95:4d:93:66:4e:ec:79:69:7d:
93:f0:34:91:e1:ba:ed:e8:4e:f8:9b:2c:ec:3d:12:
20:ac:97:c5:35:f3:61:2f:7b:51:3a:4b:79:1d:71:
ed:b6:f8:01:eb:33:91:29:2f:96:c6:dd:ea:bb:ac:
dc:8e:5f:0a:00:31:af:bb:1c:21:5d:bc:f8:88:48:
b2:9a:eb:71:e7:a2:11:72:c1:ef:23:96:da:19:35:
3d:69:48:9b:42:e7:5e:66:5f:04:99:f1:1b:c0:0a:
91:d9:47:7b:93:65:e0:a8:fd:2f:09:8e:a0:ce:40:
70:04:56:77:28:8a:2c:f8:b4:12:21:f4:10:57:72:
0e:1c:3f:57:44:6e:96:53:90:aa:9e:10:25:26:1a:
ac:fa:51:95:04:98:31:2d:d2:cd:51:42:84:7d:d3:
bc:34:67:8e:55:60:2a:59:d4:82:64:84:e5:e0:51:
31:a2:21:50:ff:41:8d:a1:27:47:7f:5a:5b:a0:1d:
42:6d:f6:5c:b7:f4:24:b6:b5:2d:23:39:ba:4f:2f:
97:57:2e:d7:a0:02:77:be:0e:54:e5:1e:63:37:f9:
cf:34:af:ce:d0:4f:c4:7d:dc:12:1c:6c:50:00:39:
50:8b:11:ae:d1:91:76:07:9f:e5:b9:10:c0:b9:6c:
53:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EA:5B:5C:6A:AA:40:E9:29:71:DF:00:DE:C1:52:A4:A2:00:29:C2
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:84:25:c6:b5:43:8e:cc:51:8b:ac:ba:9b:0a:7a:d4:f2:47:
04:9f:72:9a:4e:52:80:bf:e9:fc:e1:8b:7a:a7:82:3f:06:b5:
11:74:91:a8:5e:5c:5e:60:1a:38:30:1c:99:9d:df:3c:94:21:
96:e7:06:64:53:7b:b2:80:61:48:23:86:00:4c:44:4c:8c:a9:
2f:60:e5:7f:2e:ca:c6:e8:5b:ba:46:da:7c:d6:32:d4:1b:43:
cb:a7:db:57:00:dd:78:3a:3b:db:a5:68:e2:31:90:a6:2f:08:
ce:bd:4e:3e:b7:2d:1d:ac:61:37:22:dd:e0:34:e1:30:9a:5e:
97:dc:0b:d4:ee:3d:24:39:a3:a8:30:39:28:e6:ce:37:d1:9d:
c0:ff:58:af:f9:53:70:78:11:50:65:2c:da:e8:57:e4:4e:55:
71:40:82:f0:3a:4a:3a:0a:d6:23:1b:db:1e:14:35:4e:33:21:
e9:77:c4:3c:05:1e:84:17:a6:b5:b4:b5:d7:77:6f:1f:f0:dd:
52:b3:d2:3d:ea:47:48:98:98:82:c0:f7:55:84:b4:0e:3d:29:
9b:5e:85:ae:4e:a5:c7:34:c0:6b:9f:9a:c3:3c:f4:24:ce:0e:
1a:b9:eb:be:0b:d4:d7:f1:02:9c:b2:00:8f:f5:57:0a:97:55:
37:5e:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:20 2026 by rpki-client