Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: WCXhSRSIjOFnuX9QZwzBFRUIwmP0yFzsHO8g5nWZZYE=
Subject key identifier: 3B:08:2E:01:CF:85:24:82:B0:58:17:CA:6A:F0:A7:A1:F0:A2:CC:20
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 019F8E34524827D8B889945FB436374C7487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 09:00:21 +0000
Manifest this update: Thu 23 Jul 2026 09:00:21 +0000
Manifest next update: Fri 24 Jul 2026 09:00:21 +0000
Files and hashes: 1: 4ShXPhWP4Qk_JTUR7nsENpLjDoc.asa (hash: HXRCdfUgdsuwOo68NwP3+PURL7JrnmOHum1V4B+oxJQ=)
2: aiWvgSfnwbnLlzyTpx8toxkUKEw.roa (hash: yBRys49Mvvm6+/VlItOHtileiNejv8QSbeDxO1U1PhI=)
3: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: iTKA4cv5DdGOFr3oKTNyrjVICNAkzcF7UiZifns/qE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:52:48:27:d8:b8:89:94:5f:b4:36:37:4c:74:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Jul 23 09:00:21 2026 GMT
Not After : Jul 24 09:00:21 2026 GMT
Subject: CN=3b082e01cf852482b05817ca6af0a7a1f0a2cc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d4:45:d7:fb:ee:e0:46:e5:8c:19:e5:49:08:
a7:ca:33:e3:91:26:81:6a:69:6f:d2:43:60:da:1b:
70:78:62:6e:29:4d:f2:8e:12:c7:13:7e:44:69:62:
30:7b:f2:92:74:7e:c9:d7:e1:34:19:1b:07:92:fc:
9f:3d:9e:af:b2:57:76:07:f2:02:f5:9d:54:a9:fe:
74:e4:96:4d:ef:e6:ac:62:42:a9:ab:0d:a2:d9:cf:
40:56:9a:c7:1f:c0:a8:36:0d:7a:0d:0a:c8:5f:6a:
80:45:28:4d:d1:39:f2:45:80:f1:3b:f4:fa:42:4c:
2c:9a:98:88:99:09:4b:61:a5:e9:d8:de:47:c7:46:
29:80:5d:7e:58:fc:aa:63:49:df:ea:4c:ca:68:cc:
5d:76:7a:2a:91:59:c0:c4:db:fb:9c:ef:d8:38:e9:
1b:14:1c:03:a9:bc:f1:81:94:8f:60:f2:7b:66:ff:
e2:00:f2:39:ab:88:61:81:f4:18:0c:3d:3f:e3:5f:
58:f0:89:92:eb:a8:26:8d:95:c1:c3:e6:ad:b9:ed:
76:96:9c:c6:34:4e:65:6c:8c:14:bc:db:a7:94:d7:
a8:d2:2e:ef:40:bd:61:93:19:27:09:31:0c:06:28:
97:7a:a6:c4:c5:47:c7:dc:89:86:77:1f:24:eb:a5:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:2E:01:CF:85:24:82:B0:58:17:CA:6A:F0:A7:A1:F0:A2:CC:20
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:04:b3:1c:50:48:45:b4:bc:aa:e8:f9:2d:77:32:4f:7d:bb:
2d:2a:64:d2:12:de:aa:6a:b0:db:2a:7c:3b:b2:ba:c6:0c:19:
1e:f7:69:ce:b8:92:c6:02:f4:b8:f6:ef:1c:2c:64:d6:a2:c5:
7b:b1:62:ef:ab:45:59:0d:cc:df:1c:f7:ed:21:e4:f5:08:e0:
a8:9e:b1:69:31:46:1e:96:ca:be:7b:52:55:4c:86:fa:d7:5e:
81:3c:65:92:c2:9b:2f:30:c7:ce:da:70:f6:87:10:0f:bc:f2:
01:1c:88:ff:f4:19:d5:0f:67:2e:a3:9c:77:2b:c1:56:2e:3d:
95:8f:b3:87:b8:d4:33:42:18:5a:09:8b:d2:8e:a5:09:4f:22:
55:8a:79:32:e2:ab:5d:93:b6:10:cf:71:84:02:71:33:e4:7b:
2f:c2:50:1a:ce:1a:4c:2d:32:28:6a:8b:1c:c3:8d:02:79:2c:
b1:0e:6a:05:5b:ef:f5:7d:3a:2c:2f:f8:89:cf:ec:9d:6d:db:
cf:83:91:62:77:20:84:c6:30:eb:7d:00:48:8d:34:d9:da:4d:
55:f9:7c:b3:b6:48:fd:4c:b8:5a:28:18:bc:0c:9e:54:c8:28:
4b:d4:5c:d3:f5:ea:1d:21:80:71:46:8d:08:8e:6f:25:30:e0:
52:7e:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:46 2026 by rpki-client