Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
File: gtqmUAcIPsylkSj9XwMdNQMrV0k.mft (raw, json)
Hash identifier: QCc2egt3dAbavr5cJTmKqv6nlGbliOB3VI7q1cs86mk=
Subject key identifier: 1E:91:3D:89:01:7B:8B:3A:C8:DA:9B:ED:D8:23:C2:07:58:F8:5E:F6
Authority key identifier: 82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
Certificate issuer: /CN=82daa65007083ecca59128fd5f031d35032b5749
Certificate serial: 019F916CB6704F9E22E246D7851FFBE2F17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
Manifest number: D1
Signing time: Fri 24 Jul 2026 00:00:48 +0000
Manifest this update: Fri 24 Jul 2026 00:00:48 +0000
Manifest next update: Sat 25 Jul 2026 00:00:48 +0000
Files and hashes: 1: Qr6lJM203NhFGKZShnscSCdGFno.roa (hash: jbJSkdqG0TP7acpwCoEzRW1DcU+dJ+gbIy2PJggIZmM=)
2: gtqmUAcIPsylkSj9XwMdNQMrV0k.crl (hash: peistoVOPWb4Pw9XaVltm2syBd+DPeNml7+dnQ1HpOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:b6:70:4f:9e:22:e2:46:d7:85:1f:fb:e2:f1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82daa65007083ecca59128fd5f031d35032b5749
Validity
Not Before: Jul 24 00:00:48 2026 GMT
Not After : Jul 25 00:00:48 2026 GMT
Subject: CN=1e913d89017b8b3ac8da9bedd823c20758f85ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fe:71:83:74:7e:2a:54:e7:30:d8:ea:e4:6a:
af:40:9e:94:fd:87:1f:ed:35:a3:b5:05:66:d8:a5:
09:4b:18:40:ec:38:1c:02:3c:10:ff:83:6a:90:4f:
b8:3f:17:1e:75:e1:34:7a:0c:3b:6c:dc:79:2a:9e:
4c:d8:78:8d:88:a9:46:7f:99:ba:e3:eb:6e:e4:92:
49:c1:03:6f:21:89:02:8b:fe:2b:64:de:b4:fa:6e:
f5:55:48:7f:e2:4a:c4:e7:72:81:05:d4:93:b1:fb:
23:4c:67:bd:5c:6c:d8:f1:84:43:12:1f:a5:66:55:
db:b6:49:71:d0:a5:da:e1:b0:b8:3e:0d:7b:5c:00:
01:72:8b:43:fd:22:b2:67:69:a8:78:47:18:2b:87:
7b:51:3b:bb:d8:61:63:0b:8d:d5:18:3c:e1:a6:d7:
63:8b:1b:1b:7f:c0:13:d4:d5:06:7c:fc:6b:83:fd:
6f:b8:bb:b1:14:29:66:38:19:8c:da:0a:07:e8:d9:
c8:ac:6c:5d:03:0d:b3:93:50:58:c7:13:5c:4a:c4:
fb:ee:79:14:b9:4b:3f:3d:6a:ae:e2:e8:ad:7c:51:
3e:6d:65:94:df:c6:18:9b:32:b9:46:3d:b6:bf:26:
cc:f4:12:ca:1e:26:e1:66:6f:b7:d0:f4:d9:5a:ff:
4d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:91:3D:89:01:7B:8B:3A:C8:DA:9B:ED:D8:23:C2:07:58:F8:5E:F6
X509v3 Authority Key Identifier:
keyid:82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:03:78:bb:8c:aa:af:14:70:04:b2:aa:4f:fa:6f:70:06:d6:
91:f5:96:50:11:24:3f:53:6e:88:8e:27:cf:5c:56:e4:31:ff:
cb:7b:3e:1b:eb:74:bb:a4:76:4b:b6:9a:ee:8f:4c:0c:25:13:
73:ff:eb:b7:03:f0:5e:88:cb:28:c2:52:af:41:d7:d2:71:82:
3a:43:6e:73:c1:84:80:be:d8:c8:5f:51:65:9e:66:c0:f0:3d:
b5:70:0e:54:c1:eb:c7:1d:e6:2a:a4:52:d5:e8:f5:2b:24:e1:
27:d6:f7:4e:c0:7b:41:34:ba:41:50:c1:cb:16:0c:3b:9f:3b:
28:89:cd:2a:f3:2f:9b:50:b5:8d:10:be:84:cb:75:1c:5a:09:
2b:63:38:cd:cd:ae:e9:e5:20:77:db:60:a2:ba:d9:db:fb:6f:
ca:7d:88:70:41:66:ec:10:6e:47:8d:86:e2:42:73:b8:2c:ed:
8a:16:e5:50:87:bb:30:d9:ee:c2:88:66:51:49:0f:75:03:da:
4d:d8:86:c8:6a:e5:6b:6f:e2:df:94:27:06:2f:b9:90:04:07:
c5:95:2c:63:44:de:f7:c0:fd:b9:7f:b0:1b:51:5a:e1:dd:08:
23:ee:85:26:e2:12:71:0d:84:6f:3e:95:21:35:28:bc:6e:37:
2f:eb:e3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:21:47 2026 by rpki-client