Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: kXs9FgF8OqTu+iqMHhD91x1zZELTX4VH+Ww64j+1OfM=
Subject key identifier: 7D:B3:95:FF:B5:C3:03:A6:EF:BB:A9:41:7F:B6:36:DC:81:64:89:57
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 019F90599775FB3CCE4E330C55C581084585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 1177
Signing time: Thu 23 Jul 2026 19:00:18 +0000
Manifest this update: Thu 23 Jul 2026 19:00:18 +0000
Manifest next update: Fri 24 Jul 2026 19:00:18 +0000
Files and hashes: 1: 9PZjCn76gwRRUpq9MvbclVXkdOU.roa (hash: CaqNlJNQ1Ni2aWKqDPfoQcAYDuSQhepNqZ+uo297E2U=)
2: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: q8q/ya2C0BH6oQDkAPx3vou2q1s7ZbAT+kbN76ngcmo=)
3: ur76ehndzl2-pGTHmrbh1qcAWBI.roa (hash: Sb+oNrAUwZsJERFHDlGdgS7sblzKLRz12cNiy1csEgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:97:75:fb:3c:ce:4e:33:0c:55:c5:81:08:45:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Jul 23 19:00:18 2026 GMT
Not After : Jul 24 19:00:18 2026 GMT
Subject: CN=7db395ffb5c303a6efbba9417fb636dc81648957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:d4:84:0a:5c:90:66:95:3a:2a:15:30:46:
50:f0:c9:bd:0a:f4:bd:77:3f:7f:19:d5:74:56:b2:
d9:cd:de:df:67:38:7d:be:74:5f:46:6f:28:19:4c:
94:e3:7c:56:c8:38:99:9b:6c:6f:c2:17:7d:e0:9b:
93:f3:3e:b0:9a:cf:c7:c6:7e:9d:20:8c:b9:ac:d5:
e2:45:0f:64:27:ba:a1:79:7e:b9:92:af:30:71:e8:
a2:c9:b2:68:80:05:7f:b7:b6:a4:d6:23:00:52:48:
f8:8a:2c:56:50:d1:4f:45:3a:5b:40:9f:2d:7b:85:
67:da:b2:d9:6a:a2:02:c5:c3:18:58:8c:44:0d:9c:
10:f7:4a:18:ff:66:2c:aa:e2:1b:f0:19:29:d9:e4:
27:09:0f:4c:48:76:e9:b3:91:87:f7:1c:ac:38:6b:
46:0a:33:19:a6:18:e4:4f:37:c8:89:0c:59:4f:06:
22:08:9e:8f:a5:22:d9:72:18:fc:a0:15:f2:68:78:
9a:ee:e3:de:d2:29:e6:e2:21:11:97:81:73:b4:51:
e1:c2:5f:76:8c:53:c1:8e:94:1c:2d:46:95:44:f4:
64:f3:62:b3:22:c9:a9:b0:32:4c:70:53:18:16:9a:
c3:44:0c:14:30:50:94:f9:dd:58:88:60:cb:f5:e6:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B3:95:FF:B5:C3:03:A6:EF:BB:A9:41:7F:B6:36:DC:81:64:89:57
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a1:d6:40:18:3d:60:9b:1d:2c:e5:b6:d2:2f:69:bd:a5:3b:
73:2b:0c:90:b9:d1:2e:b7:05:6f:ed:15:69:83:5e:b1:b5:bd:
b9:07:48:77:56:48:a1:60:0b:04:5d:fc:fa:6e:cb:37:e3:e3:
a1:02:1f:16:a1:1a:88:86:6a:ac:92:da:b2:0e:00:3f:83:f5:
58:2e:c0:70:da:55:60:5f:cd:00:17:ce:88:94:96:3e:94:50:
8e:1b:d9:bc:f4:98:16:f7:b7:80:fc:d9:ac:dd:81:f7:98:4b:
26:e6:13:35:ee:ec:e3:03:17:2e:3b:73:ee:4b:55:03:2b:95:
3f:e8:35:09:33:1b:18:27:24:40:03:af:87:8e:95:c2:eb:b5:
76:cd:42:96:b3:a2:e8:8d:03:af:00:bc:71:37:16:b9:1d:cf:
2f:85:2e:f5:f6:04:eb:32:46:fd:9d:27:cb:f8:9c:d1:5a:c7:
b4:3d:a2:b8:c2:bc:75:f1:1d:c9:72:83:1a:b8:69:1e:4d:42:
bb:ff:0a:ac:4c:f9:48:19:7c:f5:a6:97:86:15:01:d8:a9:e0:
60:d7:68:e6:ce:4c:0c:01:ff:1f:8c:89:9b:e9:5a:2b:66:22:
f9:21:08:3e:4d:df:8d:a4:8f:fb:24:90:9f:1c:01:1d:e9:fc:
ae:85:6f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:34:31 2026 by rpki-client