Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: cRyyl7T4oycLCwKy+0KzM4mNnHQPIfFnO+3R1p0wH9k=
Subject key identifier: 9C:63:DB:F7:76:53:C2:BF:0D:3D:FD:84:33:70:F7:F2:FA:2F:D2:47
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019F92B5CB872CF6DC1E020F880B0BE705FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0D84
Signing time: Fri 24 Jul 2026 06:00:15 +0000
Manifest this update: Fri 24 Jul 2026 06:00:15 +0000
Manifest next update: Sat 25 Jul 2026 06:00:15 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: osf+J9UJsKNg1AoXM3JS0ahG7zAGJ/PM9F32h1fBu0c=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:cb:87:2c:f6:dc:1e:02:0f:88:0b:0b:e7:05:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Jul 24 06:00:15 2026 GMT
Not After : Jul 25 06:00:15 2026 GMT
Subject: CN=9c63dbf77653c2bf0d3dfd843370f7f2fa2fd247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:75:80:f8:41:44:5d:09:51:2d:d1:c4:c5:
8b:e5:a2:f5:32:4e:3d:4f:00:fa:69:f8:a9:81:b0:
5e:dc:1b:72:b5:8b:56:49:21:14:14:8f:b9:65:4d:
13:08:44:bc:bd:76:b1:0c:49:61:a9:30:3f:a8:36:
8b:0f:34:83:88:3c:78:8f:24:3b:1f:fb:07:d9:51:
0a:07:75:02:ae:91:67:5d:ce:c5:77:62:2f:e2:f7:
58:62:bb:c0:91:74:47:13:95:db:22:6c:a4:95:72:
3e:74:6f:2e:08:0e:08:af:2c:54:ae:1c:42:04:d2:
e9:4a:22:14:7e:f9:51:97:0a:10:86:a9:b6:76:14:
99:6b:cf:57:24:7c:4c:63:82:63:6d:d8:6a:3e:cb:
b7:a0:20:05:92:72:0a:b3:68:03:89:3c:93:49:86:
12:5b:06:32:a6:c7:09:b6:be:9f:d8:d3:25:f7:3b:
d9:7a:ea:db:d4:53:0b:55:07:40:b3:39:25:98:60:
2b:94:5f:14:df:7d:38:08:ab:3b:a5:2c:2e:ca:0d:
9c:23:8f:64:5f:a0:61:7e:8b:b4:1f:6a:89:aa:53:
25:7e:fa:ca:36:5b:b0:77:62:11:8d:a2:fa:e2:23:
b9:b5:40:d1:3c:1b:ac:64:a0:f1:68:a8:a4:24:ce:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:63:DB:F7:76:53:C2:BF:0D:3D:FD:84:33:70:F7:F2:FA:2F:D2:47
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9c:83:15:81:a8:31:e3:40:13:b5:fb:f6:a7:aa:42:4f:37:
af:36:d9:3c:b8:2c:35:5c:a6:db:3b:38:62:48:5d:a4:0b:a0:
03:3a:03:a6:b3:63:37:d2:0a:6d:d2:46:61:78:36:18:c1:30:
98:a0:3c:04:1d:3d:43:2e:fc:b8:9f:87:54:8f:8c:b7:cd:96:
09:0e:68:74:c0:83:51:93:d3:a1:df:dc:9c:c0:4b:42:15:33:
4d:f0:cb:b7:74:c2:8a:06:60:aa:2d:e1:9a:3b:48:d3:e3:79:
b4:b1:21:f7:18:94:ca:9c:87:0c:97:19:9e:76:1c:78:59:fa:
3d:6a:b5:8b:bf:aa:fb:ed:92:84:0d:4f:5e:1c:20:ff:ad:ce:
a6:03:f1:19:b3:16:07:61:9a:3b:10:cd:31:1c:35:ea:5e:80:
58:dd:62:ad:7f:59:44:f2:bf:e7:84:23:1a:1d:32:67:d9:c3:
79:df:1b:5b:a6:b5:1b:98:0b:fa:4d:39:99:88:3a:fa:7a:99:
28:78:2a:d3:ea:a8:16:dd:e0:32:e4:20:ec:f8:82:f6:3d:59:
e5:20:e2:9d:f1:a9:f0:4f:84:32:ad:c5:5e:91:73:83:06:8f:
90:6a:af:81:5b:c0:ac:1e:dc:51:bc:e4:34:07:99:62:27:22:
eb:fb:b3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:27 2026 by rpki-client