Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier: AJvbOXmlskDRizDyOGBaiWaY4ThYgLHmJKTB1Bw/eho=
Subject key identifier: 2A:21:40:CC:A6:F4:7F:CF:D5:69:96:50:56:FD:A9:BB:7E:39:7F:B6
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 019F95B790F747D03952996EDADD3E2C4959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number: 0B29
Signing time: Fri 24 Jul 2026 20:01:03 +0000
Manifest this update: Fri 24 Jul 2026 20:01:03 +0000
Manifest next update: Sat 25 Jul 2026 20:01:03 +0000
Files and hashes: 1: HGlsVrHEnVUZTxnltUDYgtbddII.roa (hash: PRTqegkFaXBSmjlIahMPcYyZ0ftS890tO/2pjXR1d6s=)
2: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: QN8lY+SgsxieOFUe14vZhkokn9sVZksFRM2jGIa1iBw=)
3: jcRnGzty5tFJLCYMbqQ9KAoJt0M.roa (hash: a1X93SlCywmHujOimn+Po6M7RMMfbT2R8166ZJ7vS9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:90:f7:47:d0:39:52:99:6e:da:dd:3e:2c:49:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Jul 24 20:01:03 2026 GMT
Not After : Jul 25 20:01:03 2026 GMT
Subject: CN=2a2140cca6f47fcfd569965056fda9bb7e397fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:b5:db:52:39:95:bc:29:1a:08:6b:b7:a2:
d7:cc:54:a8:ca:c5:9c:68:70:f2:3b:62:b7:db:89:
7f:bb:ae:78:0b:72:92:4d:2a:f3:34:a7:9a:e0:f4:
ea:95:ae:a8:b7:a9:d9:d9:f4:77:28:70:40:81:4e:
42:14:fa:5c:bc:6e:02:0a:81:5f:e7:6d:e3:d5:6d:
6e:34:c7:2b:c5:af:17:1d:6a:45:21:36:5c:70:77:
b8:d6:78:68:13:e7:61:d6:77:e3:fb:63:4a:e1:c2:
da:6b:63:66:81:05:0c:55:5a:b8:bb:26:f5:08:92:
ef:31:1f:61:90:37:dc:33:6d:8b:20:fa:e2:20:1d:
c2:88:ea:2e:ab:15:77:73:f2:ee:72:42:aa:9d:e7:
9c:80:24:ab:c2:08:74:ad:f3:73:5d:57:cb:01:d3:
4f:33:9a:51:61:95:0b:08:d5:46:45:dc:63:fd:34:
f4:97:06:87:16:37:e1:63:29:ee:e2:fe:c4:b4:b1:
54:b9:b4:9d:81:4b:ff:be:8c:c3:c4:f1:99:25:7a:
4c:d6:8e:b6:be:f7:ba:f5:1a:39:b1:ae:bd:f0:48:
20:18:90:2d:34:9d:da:b7:b0:ee:55:16:1e:8f:58:
c8:84:aa:06:7f:a5:b5:de:84:4d:9a:c6:ad:0e:0b:
c1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:21:40:CC:A6:F4:7F:CF:D5:69:96:50:56:FD:A9:BB:7E:39:7F:B6
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:06:40:8e:23:61:b2:74:9e:c8:16:b7:14:2e:85:d7:76:eb:
c9:06:40:34:21:b4:4b:0d:ec:15:65:0f:d2:a8:a3:22:f4:8f:
6e:92:47:b6:35:38:58:4b:6a:1d:bd:8c:b2:eb:e4:57:c0:73:
a3:11:18:68:f9:0d:eb:ba:21:77:67:35:f7:00:09:1c:8d:ea:
da:4c:9e:59:4f:25:86:e5:84:47:72:bf:a0:d0:77:ea:4f:5c:
30:ae:1b:82:55:47:b1:d1:29:1f:10:6c:06:6f:6e:e3:b3:06:
cd:a9:94:56:91:82:fe:8c:7c:f0:7f:a9:21:42:9b:07:5b:e8:
b3:09:21:79:3b:00:7d:3e:d6:4d:16:d8:e5:94:25:c7:8a:53:
73:e1:f0:23:f3:cb:8f:87:ce:8c:15:e6:7e:d2:d4:d0:82:5b:
9f:fe:8c:5c:25:b6:c4:61:46:e1:a8:2c:00:ff:fe:90:b2:65:
c9:82:6b:d0:f6:92:98:c4:45:de:08:11:37:ae:7f:17:c2:9b:
1c:4f:93:27:f1:5f:ab:c9:00:15:b2:a7:1b:eb:6f:a6:64:c5:
cd:7d:99:e4:70:03:e5:73:ca:f4:3c:ac:c6:42:86:70:eb:31:
93:ba:a6:9a:a6:9d:ee:f0:d2:50:70:3f:3a:9b:94:66:a0:67:
f4:b9:40:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:13 2026 by rpki-client