Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
File: gtqmUAcIPsylkSj9XwMdNQMrV0k.mft (raw, json)
Hash identifier: LxYWZeQtRgLoYqiMpe3SbrE5zkoxDVsDXRxOSPgLoRE=
Subject key identifier: 42:1D:14:63:20:F3:74:41:F8:E8:E4:0B:FD:FA:9A:C0:82:4E:62:18
Authority key identifier: 82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
Certificate issuer: /CN=82daa65007083ecca59128fd5f031d35032b5749
Certificate serial: 019F935B5AC211B8FA9D14E1B67DDCEDFD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
Manifest number: D2
Signing time: Fri 24 Jul 2026 09:01:05 +0000
Manifest this update: Fri 24 Jul 2026 09:01:05 +0000
Manifest next update: Sat 25 Jul 2026 09:01:05 +0000
Files and hashes: 1: Qr6lJM203NhFGKZShnscSCdGFno.roa (hash: jbJSkdqG0TP7acpwCoEzRW1DcU+dJ+gbIy2PJggIZmM=)
2: gtqmUAcIPsylkSj9XwMdNQMrV0k.crl (hash: 6bLDMz0ETmQpL1To/fxntf4NOOx3YAuP1CzKtc4oVvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:5a:c2:11:b8:fa:9d:14:e1:b6:7d:dc:ed:fd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82daa65007083ecca59128fd5f031d35032b5749
Validity
Not Before: Jul 24 09:01:05 2026 GMT
Not After : Jul 25 09:01:05 2026 GMT
Subject: CN=421d146320f37441f8e8e40bfdfa9ac0824e6218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:3e:80:7f:79:58:52:eb:52:2a:81:ce:9a:
ca:14:7b:82:88:45:ae:a6:db:cf:63:9c:31:65:5c:
f3:3d:7e:df:df:89:e2:8b:68:ca:b1:7a:48:b0:47:
54:04:f1:66:2f:aa:69:35:85:a0:66:7f:98:fb:53:
e5:61:71:47:a0:17:b2:3b:a4:14:e7:40:5d:c3:09:
04:a0:eb:4b:f2:fa:19:90:1f:24:7d:6c:f0:e7:07:
17:99:92:9d:cf:63:3a:7b:bb:56:2e:1d:03:11:fb:
4a:d9:b0:05:1e:a4:85:6f:63:86:ff:7a:4d:b0:74:
fd:c5:21:0c:0a:af:b9:c4:7b:59:7d:16:6a:62:8c:
87:29:6a:16:de:7a:13:8e:e5:6f:57:b8:6a:1d:76:
87:3b:1c:63:f3:b3:88:12:83:e0:00:25:4d:e0:67:
64:3a:0f:ec:ab:16:99:b5:9f:eb:ae:ff:60:de:d8:
99:ab:a5:ae:bb:69:7a:38:4b:9f:f6:97:e3:af:b1:
ab:8e:06:bf:46:74:6d:d8:87:b7:15:db:86:ed:2f:
01:87:a1:c3:fa:81:3c:3a:f9:49:78:bb:6d:3d:05:
12:2c:77:03:f5:a3:20:81:a1:a9:e3:4b:c5:60:84:
04:ad:eb:f9:e7:84:4e:2c:98:ec:3b:fc:38:ac:8b:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1D:14:63:20:F3:74:41:F8:E8:E4:0B:FD:FA:9A:C0:82:4E:62:18
X509v3 Authority Key Identifier:
keyid:82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:67:8a:ea:fa:b6:b8:87:30:86:91:43:a5:5a:97:31:ba:e9:
ef:7f:40:54:4e:06:42:a4:d5:d5:8c:89:b1:8c:33:49:6b:23:
51:d1:aa:c7:c3:fb:4b:c3:d2:cf:6b:b2:af:db:fe:b7:73:57:
c8:75:19:98:b1:05:55:5a:10:8e:d8:e0:0d:04:35:13:24:22:
8e:c6:d3:6c:4d:7a:52:5c:3c:b8:a0:9b:a9:54:13:de:94:1b:
60:e7:1c:b6:79:1a:c9:ec:84:81:ca:c1:75:d6:70:c5:c1:c0:
19:10:c1:6d:5a:d3:5b:1b:f7:c6:be:99:e4:16:7c:4f:ea:fe:
2a:3a:ae:18:d6:e4:47:dd:85:8b:9e:b2:2d:ca:8a:c9:c9:44:
61:e6:6c:20:17:a3:72:8f:90:59:ba:51:ca:7f:49:d8:9a:4f:
38:c8:4d:7e:70:1c:d0:61:33:c5:ad:67:e8:89:47:c4:c3:8e:
ab:51:c9:18:ae:ae:19:c8:87:5a:a4:66:07:40:9e:95:c8:2d:
93:dc:b1:b9:c0:ec:f1:6f:d6:48:b0:d8:f2:9b:d1:dc:4c:73:
4f:28:75:9a:54:6f:2c:02:da:38:24:c2:ea:ed:3b:59:1a:5b:
c7:3c:3f:06:1c:c3:3d:c0:a1:00:19:c7:b0:92:68:ff:ab:68:
c6:3b:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:57 2026 by rpki-client