Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: XPwg+TG48fPxcQohmvPd4zITMvZXocFKMpVQfgePSfA=
Subject key identifier: B5:2C:DC:DE:AB:AB:6B:98:0E:8C:00:3C:73:5C:D9:76:74:33:29:DE
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 019F91A37539B90D94AEF6DFB95126AE8FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0D0A
Signing time: Fri 24 Jul 2026 01:00:36 +0000
Manifest this update: Fri 24 Jul 2026 01:00:36 +0000
Manifest next update: Sat 25 Jul 2026 01:00:36 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: KEj1pKKfoj3YE/vl2Y2yf3suhxLqcA4/vXXped47HXg=)
2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:75:39:b9:0d:94:ae:f6:df:b9:51:26:ae:8f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Jul 24 01:00:36 2026 GMT
Not After : Jul 25 01:00:36 2026 GMT
Subject: CN=b52cdcdeabab6b980e8c003c735cd976743329de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:7f:f5:3f:b7:a4:fc:9f:8c:af:c4:07:99:
41:1f:d0:b4:08:01:3a:10:12:02:95:9c:e4:2c:c1:
11:a9:db:fb:0f:1f:59:1c:16:7a:14:e8:59:d4:ce:
30:47:a0:58:f5:65:f5:c0:5e:70:18:24:5b:1f:49:
ee:af:19:27:0b:7f:ec:f6:5b:f3:8e:9f:a4:69:73:
06:c9:8c:be:1c:65:9d:99:a3:f5:47:da:59:4a:85:
40:4d:ee:34:a5:ab:03:62:52:9a:d0:4b:9b:61:31:
f1:81:0e:10:3f:c1:3c:ac:0c:94:a4:6f:b9:e0:88:
62:ad:d6:36:76:cf:77:f3:71:f9:64:30:a4:38:f4:
b0:6e:6a:ba:43:49:bf:53:cf:dd:a5:98:6b:46:3d:
d2:24:c2:45:e7:a3:35:c0:b4:9b:60:a3:4b:c1:50:
9b:0d:a5:cf:7f:a7:a4:3e:4d:2b:f7:a1:f8:af:fb:
47:89:7d:b5:d5:0a:0b:0c:6d:24:81:3c:0b:5e:61:
b8:cf:9b:e7:33:de:c6:cc:20:dd:f8:a0:6f:73:bf:
bd:3a:f0:bc:59:4a:89:e7:48:96:ab:00:ec:21:c3:
a1:e8:47:3a:78:1a:d3:98:b6:19:ea:3c:e3:40:b4:
3e:1a:be:91:bf:ab:b0:2f:c3:c4:40:9c:96:dc:50:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2C:DC:DE:AB:AB:6B:98:0E:8C:00:3C:73:5C:D9:76:74:33:29:DE
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:88:1d:42:f3:2e:10:98:5e:f0:b8:7b:0c:7e:76:0c:dc:01:
f6:4c:bd:a5:79:71:5c:80:c3:e5:04:5a:bf:cd:e1:85:05:2b:
c3:3b:99:64:27:96:13:bb:c6:8e:a5:2d:d5:3b:80:1d:e5:8c:
5d:f2:d8:f6:74:d3:4d:b0:dc:ac:10:65:0d:e6:75:8c:84:fe:
01:2c:de:fd:3e:95:62:67:8f:1e:2a:ef:a0:57:34:30:34:d9:
e8:a2:b8:a5:c6:21:18:16:81:43:ca:05:5d:77:f6:35:e5:b4:
98:fb:06:cd:6c:86:9d:cc:39:b6:aa:c7:7e:ba:a0:1f:0c:73:
a3:e8:cf:57:39:29:9f:a1:3a:09:6e:0b:00:8d:99:63:6f:ee:
fe:4a:32:20:28:87:93:62:45:16:5b:82:82:14:32:43:3e:6c:
5f:b7:3c:80:cc:1e:ad:b3:89:b6:d5:7b:f6:f9:aa:6d:de:bc:
7c:a0:52:4b:fe:23:de:2e:41:a5:62:7d:d5:81:54:f6:10:53:
bb:68:37:89:4c:4d:f9:d6:73:77:0e:3d:77:94:a0:68:ea:f6:
28:0a:ec:fc:a1:ab:4a:a3:a2:39:c3:42:b0:22:83:bd:c0:09:
50:22:00:39:9b:5e:3e:fc:9f:72:fd:ed:b3:c4:45:6b:a6:fb:
bb:29:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:36:48 2026 by rpki-client