Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: bCuwAzETAY/PX58Hw8nTj+MV/d/L+5knhsuIlJFHCSo=
Subject key identifier: 7C:B0:97:CA:E8:2B:90:22:F9:17:34:FB:0B:0D:F2:E3:DB:1D:9B:E0
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 019F9391CFE20E35323A54FB78DDC26096D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 10:00:34 +0000
Manifest this update: Fri 24 Jul 2026 10:00:34 +0000
Manifest next update: Sat 25 Jul 2026 10:00:34 +0000
Files and hashes: 1: K4rNlv6gYUKRgIqav4ptqCTSNGg.roa (hash: peGnClYWPqnMOOfi13oSusAgZ5+U+k8ztyI3Zgy/aPo=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: BGg0D/syp8Fti60k6MFPrj0gfcD4+BUY5Wes/g7M+Bs=)
3: zposQW8-Ml33uc3ENu1a83hxjEI.roa (hash: aFqmx16M5gCNIMqJZ5eqfmDRHZVtOgPSXQjK2JfuQ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:cf:e2:0e:35:32:3a:54:fb:78:dd:c2:60:96:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Jul 24 10:00:34 2026 GMT
Not After : Jul 25 10:00:34 2026 GMT
Subject: CN=7cb097cae82b9022f91734fb0b0df2e3db1d9be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:e7:4d:bc:2c:7d:ef:fe:dd:77:ba:4b:67:
cf:92:ed:d5:b3:b0:f6:c7:8a:47:33:8d:da:f4:91:
b8:76:33:eb:12:10:2b:58:7e:7c:7b:14:e9:a1:f8:
d4:97:66:c1:b1:ce:e8:b8:a3:fa:e6:12:81:21:6c:
34:7f:5f:f7:db:ce:e7:f0:fa:92:d6:1e:2b:58:9b:
d7:1e:c4:a8:d9:5b:56:1c:13:d7:98:e8:0f:71:a6:
63:28:28:b1:bf:7b:b4:90:d6:6e:3b:f5:67:1c:9d:
0d:53:a5:e9:e0:c2:8a:c6:d2:f0:f7:e8:e7:ea:c3:
be:2f:f0:27:c8:35:b2:4f:29:f0:db:26:c4:61:c6:
8e:60:79:eb:51:d9:75:1b:1c:39:0d:46:ad:cf:ad:
28:e1:87:28:43:f7:92:13:2c:0f:4b:64:b3:88:c8:
d9:04:9e:00:78:ed:e5:05:bc:e0:9c:8c:f6:cc:cb:
0a:73:82:93:1c:ed:46:23:c5:94:bf:e3:8c:f3:b0:
8a:2f:b9:3a:03:f0:42:87:9b:90:fb:0a:ed:07:83:
4a:92:d6:0b:30:e7:8f:69:ce:69:bc:22:97:9c:1a:
56:13:d6:93:f2:20:de:3d:09:f6:04:6f:85:f9:27:
9a:f8:48:c8:f3:c6:30:32:00:ca:05:7b:78:78:4f:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B0:97:CA:E8:2B:90:22:F9:17:34:FB:0B:0D:F2:E3:DB:1D:9B:E0
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:14:22:92:42:ca:47:c7:3a:4c:1d:03:54:13:48:00:2a:5e:
ca:b6:b5:1f:e6:df:80:34:16:3b:e6:37:bb:2a:6e:7f:c2:c3:
de:6f:3c:99:51:66:15:97:16:42:78:bb:78:5b:c3:a5:87:26:
52:6c:b7:9a:96:96:73:7f:1a:af:0f:7d:0d:08:79:3c:5f:40:
11:cf:ea:59:2f:d0:2c:72:29:63:74:b7:b0:3c:e1:02:5a:38:
f0:f1:2d:24:ca:87:87:05:3f:03:84:a2:a2:02:c6:71:ef:3c:
ac:50:22:4b:cd:f8:6a:b6:e5:dd:d8:56:ef:5c:f2:a3:51:ca:
10:b4:ee:33:7f:3b:fe:fe:43:2e:d5:9a:8a:d5:35:ef:7d:c7:
fc:49:1f:07:a2:68:97:19:90:63:a8:74:ab:c7:f6:ef:9f:9b:
ba:9e:b4:cf:b2:91:db:c5:a6:c4:4a:33:d1:56:09:78:43:8d:
8f:a0:db:8a:1a:18:98:ef:dc:b8:85:cc:5d:5f:53:25:5d:66:
e4:f6:7b:cf:a6:5d:3e:32:9c:15:c8:94:9d:05:6f:6e:b0:03:
9f:b0:d3:90:d8:b5:78:f2:38:9c:cd:7b:da:91:94:4d:4f:2c:
d5:e7:b0:7d:8e:cf:c6:4d:da:1f:b0:40:b2:47:68:d8:cb:27:
b7:e9:7e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:26 2026 by rpki-client