Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: ZdM0e5QTy37TnRpTFc0aleNM+U8ovnYGhk7gn19gLhI=
Subject key identifier: 13:8A:03:24:79:9D:BD:C0:EC:B4:7E:C6:94:6C:1A:62:A5:1D:04:92
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 019F9090E838E40F59C1CE1410FFF33ADA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0BAB
Signing time: Thu 23 Jul 2026 20:00:43 +0000
Manifest this update: Thu 23 Jul 2026 20:00:43 +0000
Manifest next update: Fri 24 Jul 2026 20:00:43 +0000
Files and hashes: 1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: 4buvV5hQXdxuii0obJul8/OFnUMvJSo4bxaaov6NGu0=)
3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:e8:38:e4:0f:59:c1:ce:14:10:ff:f3:3a:da:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Jul 23 20:00:43 2026 GMT
Not After : Jul 24 20:00:43 2026 GMT
Subject: CN=138a0324799dbdc0ecb47ec6946c1a62a51d0492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:04:67:68:4c:f3:5f:09:3d:1d:c5:c5:bb:
ce:31:75:98:fa:cb:25:15:95:3d:24:f1:ae:37:ae:
b6:45:b0:26:3d:c7:66:15:c0:f3:96:f2:9e:b9:c6:
fc:6d:0b:8b:b3:ee:fe:39:c5:c3:29:cc:d9:e6:54:
c8:cb:22:64:52:b7:a8:0c:5b:49:19:4a:6a:4c:7a:
92:d9:78:57:7d:3e:1b:2e:8a:5b:a7:cd:2f:44:04:
9b:97:dc:22:95:1c:4b:5e:4a:ae:23:3e:d6:8b:41:
1c:b7:1d:1f:9b:36:21:91:ae:0a:fb:9e:b2:8d:ad:
ee:21:9a:36:56:cc:11:6c:1e:d8:96:7a:b7:70:0a:
b1:2c:af:39:7f:85:c4:a4:62:b4:95:36:c9:da:0c:
8a:d3:32:ae:47:de:4b:1c:22:a1:af:25:f4:05:9b:
0b:c9:6e:6f:f7:b7:9e:19:a8:0f:98:7c:07:5c:4d:
dc:0f:69:a2:99:22:27:7a:9c:15:c9:14:90:b9:0e:
9d:d7:1c:e9:88:bd:e0:47:95:03:90:00:de:b5:dd:
39:4d:4e:98:be:0f:7e:3f:d0:97:c2:5e:53:67:29:
78:19:35:13:a7:a2:24:30:39:f8:ac:13:47:0a:af:
75:31:86:27:e9:1b:5f:ec:32:e8:00:7c:fa:9a:c0:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8A:03:24:79:9D:BD:C0:EC:B4:7E:C6:94:6C:1A:62:A5:1D:04:92
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:57:e4:4a:e3:fb:57:38:c7:e4:81:b8:3c:6c:9c:4d:b8:7b:
8e:28:05:04:14:96:5c:8c:b6:04:35:76:32:7f:aa:6d:dc:29:
b8:95:3b:26:eb:4b:c7:e3:57:5d:22:05:13:4d:2b:6a:0a:85:
4a:c7:ba:e6:88:aa:78:9f:1b:97:d5:c8:49:dd:ab:9c:ed:4a:
24:e9:63:55:76:31:51:0c:45:f8:1f:c5:21:24:53:8d:a0:f9:
d8:23:49:f2:74:0f:ed:96:d9:5a:3f:eb:67:0b:ee:5c:f4:68:
fb:68:fe:67:9c:ef:89:dd:95:25:94:2e:ab:70:7b:9f:43:08:
46:78:80:88:fe:00:99:ae:48:14:d2:4a:2c:52:62:e4:16:cb:
7b:bc:4e:85:7c:b8:0a:20:3e:90:c4:5f:3c:b0:19:6c:12:17:
60:f8:42:2b:1c:68:d7:cd:cb:05:78:29:1d:1d:52:8a:74:55:
54:8c:b2:e8:b5:fb:5a:12:68:99:68:1f:c0:e7:b0:4a:72:7b:
58:40:c5:48:0e:67:ee:74:df:4c:69:c1:d5:99:e7:2a:c4:86:
de:5f:c5:5a:d6:b9:ac:f8:e1:f6:96:6d:8c:9f:61:fd:b2:d2:
b8:58:a7:ca:1c:a6:74:54:81:aa:10:10:58:d4:c8:3e:14:f4:
e6:17:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:57 2026 by rpki-client