Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.mft
File: gFTM2r30q23tum5-vGuFVhIWp8I.mft (raw, json)
Hash identifier: AmpRiKM7BFg+axxSVSxOGEGp/BYg8nonjnYwvSD7IG0=
Subject key identifier: DC:F9:AA:1B:7A:81:EF:6B:0A:D2:64:10:93:D5:DD:6F:BE:67:28:87
Authority key identifier: 80:54:CC:DA:BD:F4:AB:6D:ED:BA:6E:7E:BC:6B:85:56:12:16:A7:C2
Certificate issuer: /CN=8054ccdabdf4ab6dedba6e7ebc6b85561216a7c2
Certificate serial: 019F954A17B80C7B7335AE15A1F2E24ADF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFTM2r30q23tum5-vGuFVhIWp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:28 +0000
Manifest this update: Fri 24 Jul 2026 18:01:28 +0000
Manifest next update: Sat 25 Jul 2026 18:01:28 +0000
Files and hashes: 1: cSrvIBBg9Bs2xIkNy9xHTScyMPc.roa (hash: qTMbAxvVKSY9LQIKpalsM/DeRx12O22u83d40FQyhIo=)
2: gFTM2r30q23tum5-vGuFVhIWp8I.crl (hash: PovlJAid9hpiPvoMRlGVKm/Op2g5ItwMf1jAEdR9TKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFTM2r30q23tum5-vGuFVhIWp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:17:b8:0c:7b:73:35:ae:15:a1:f2:e2:4a:df:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8054ccdabdf4ab6dedba6e7ebc6b85561216a7c2
Validity
Not Before: Jul 24 18:01:28 2026 GMT
Not After : Jul 25 18:01:28 2026 GMT
Subject: CN=dcf9aa1b7a81ef6b0ad2641093d5dd6fbe672887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:ed:bf:e4:01:f9:28:c9:31:1b:1b:18:a0:
57:2d:d3:bd:56:c8:fb:dc:5b:c4:72:01:67:4d:eb:
f0:07:d4:0c:fa:e9:8a:4f:52:14:be:37:8f:de:ea:
d6:e6:0f:2e:ca:48:14:86:05:07:7f:02:65:3e:1e:
30:7a:3e:27:b5:8b:72:a8:2f:d2:ca:83:a8:6a:2a:
5d:5e:14:40:1a:df:0b:41:f4:1b:72:8e:a8:0f:b0:
86:a0:60:c9:69:1f:a1:d9:92:f3:a0:6f:00:5e:9e:
4e:b9:d6:44:83:d4:5d:c0:da:34:4a:54:22:bc:b1:
17:95:ce:e5:98:35:b1:8b:67:91:3a:b9:eb:c9:16:
23:37:d5:2f:36:05:1b:a9:41:2f:8f:22:66:bd:86:
6a:90:f6:9c:c2:68:c0:ec:16:26:6d:bf:eb:9b:3c:
2c:d4:db:40:3a:73:18:6e:f2:b2:d0:7b:c5:bb:47:
4d:8a:a5:a3:c5:a3:9b:e9:47:9c:04:80:27:fa:e4:
c9:15:03:b5:86:38:80:88:d1:e2:e5:08:f7:e3:39:
74:76:57:34:2a:a1:58:9a:95:ef:dc:3e:8d:6c:aa:
28:e0:b9:40:9b:de:6a:fe:8a:b6:f8:a2:30:52:6a:
de:96:dc:77:d5:02:12:88:ef:9c:ac:b0:7c:69:9a:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F9:AA:1B:7A:81:EF:6B:0A:D2:64:10:93:D5:DD:6F:BE:67:28:87
X509v3 Authority Key Identifier:
keyid:80:54:CC:DA:BD:F4:AB:6D:ED:BA:6E:7E:BC:6B:85:56:12:16:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFTM2r30q23tum5-vGuFVhIWp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ea:5b:4b:48:8e:ee:11:12:f3:a7:b2:d8:b2:8d:a8:2c:1c:
eb:28:f7:af:e6:33:25:58:e1:95:ba:98:bd:75:92:a0:45:f0:
bc:86:29:d9:41:7c:bb:ba:b4:f1:37:0e:99:06:0e:ab:f4:21:
e2:b6:85:5d:0e:bc:1c:b7:0d:5a:55:fc:8c:66:72:2b:b2:58:
54:85:74:a0:83:a1:ea:d6:17:6d:a6:01:4d:6f:86:10:21:25:
25:06:4c:88:f1:94:63:f0:37:f4:81:76:26:a1:9b:28:3d:65:
5d:fc:6d:ed:e1:92:79:19:0e:0d:e6:ed:a1:f4:dc:ef:e4:24:
7c:77:fc:37:03:ec:af:7f:dd:04:ea:f3:46:c9:c6:9c:c6:fa:
6f:c9:50:ea:21:b0:29:c0:b8:fb:ae:c0:5f:1e:9f:69:cb:03:
0a:dd:ea:ba:8f:5f:0a:dd:71:30:c4:20:48:15:e5:ec:b4:0e:
d9:44:d2:d5:2b:4a:52:56:bf:08:f3:31:d6:31:49:53:62:d0:
ee:ca:76:5e:74:08:54:cc:ae:d3:5f:89:1f:1e:0f:d2:14:3f:
99:09:d9:76:3b:05:7e:7d:45:58:34:0c:f2:93:9f:69:26:a8:
d3:23:7e:b4:28:b4:fb:00:af:d1:ec:b5:fb:e8:fb:8e:ca:ed:
bb:d0:91:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:57 2026 by rpki-client