Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
File: gtiJtzM2c4evJNBuf5IeHrwOjMA.mft (raw, json)
Hash identifier: t7HssMdlqkkU2SB2Wgzuf98DqC2Z3Kmxr16vxeZdMV0=
Subject key identifier: F6:B3:8B:22:F5:0F:C3:7A:EA:DD:38:AA:B6:47:80:77:76:9F:65:4F
Authority key identifier: 82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
Certificate issuer: /CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Certificate serial: 019F9549C6779406F51BCFB5E7D3A94186A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:07 +0000
Manifest this update: Fri 24 Jul 2026 18:01:07 +0000
Manifest next update: Sat 25 Jul 2026 18:01:07 +0000
Files and hashes: 1: Ivo9foptlHgZGm6u5gb6QwW3XyE.roa (hash: 2DKjAU7c2CAk3rfklrUELipPt0YMxIA0kvbW1SiZbks=)
2: bd0fr_kRPnaKLvLN9ZpO5e3Kz2I.roa (hash: WDxxU0O54RTfygWfLBj7mncB1ZZMMpBFwyQajkCAytc=)
3: gtiJtzM2c4evJNBuf5IeHrwOjMA.crl (hash: /q7XIJwwNLA92obflQkCYN2fXADUJMxmtwnIZFFcSxw=)
4: i_5GgFY65mhct5XMfGA2cRGx7lE.roa (hash: u8f3lfAClBezvakZmVD5y6jZdKYCu72g+x8pASRVo2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:c6:77:94:06:f5:1b:cf:b5:e7:d3:a9:41:86:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Validity
Not Before: Jul 24 18:01:07 2026 GMT
Not After : Jul 25 18:01:07 2026 GMT
Subject: CN=f6b38b22f50fc37aeadd38aab6478077769f654f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:39:e8:fe:63:24:cd:b7:a5:61:f3:96:1a:
af:66:45:4d:31:c8:e5:ec:17:21:36:54:02:69:c8:
da:93:1c:b5:11:3b:98:96:4d:cb:c1:81:3f:e7:fa:
fe:f1:8d:02:92:eb:d3:3c:66:49:9b:88:b4:a5:b4:
01:4e:66:de:6d:ee:2c:38:c2:34:0c:df:46:f6:35:
db:18:d7:18:b8:64:2f:06:3f:fc:5a:45:09:17:62:
0d:cc:17:4f:d7:bb:a2:f9:d1:d6:ea:56:22:e8:45:
aa:e1:bd:04:bc:34:a5:37:30:f5:63:45:a6:e9:b5:
04:6a:d3:7c:f6:0f:6c:3d:b4:ef:69:5d:0e:ae:e5:
ac:15:8e:bc:c7:33:f7:ad:dd:c7:53:f6:1d:d9:f1:
03:57:38:6d:27:cf:7f:28:d2:8d:5b:00:e5:61:55:
9a:30:61:8d:6c:1a:3d:0e:45:93:5f:0c:7c:51:a0:
19:e7:04:9b:55:9f:05:8b:e3:6e:b3:a4:26:a5:1c:
ba:f0:54:91:12:fe:2d:e8:9e:e2:52:55:af:f7:f4:
17:af:3f:21:70:3b:63:8e:20:6d:9e:27:43:33:8d:
b2:40:80:31:a5:e9:43:8f:e4:f9:41:2f:12:80:8e:
95:4f:7a:e1:d0:7b:54:05:eb:82:f1:75:7f:e7:fb:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B3:8B:22:F5:0F:C3:7A:EA:DD:38:AA:B6:47:80:77:76:9F:65:4F
X509v3 Authority Key Identifier:
keyid:82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:40:3b:da:a6:f7:e8:67:64:ca:78:0b:9d:5e:bd:a1:14:ec:
8f:0e:80:3a:49:5e:30:0b:d5:e4:54:b0:30:d0:c8:cf:3f:14:
1e:94:8b:45:bd:8f:21:a5:b7:9b:f8:97:78:3d:42:54:6c:9e:
4a:52:16:e3:6d:92:53:0a:c5:2e:00:18:fc:a1:02:5d:85:9b:
fb:72:3e:33:2d:e5:a3:b1:71:d7:46:1b:f9:81:49:7b:d3:22:
d0:c8:59:50:ba:a1:79:1b:f0:2c:12:e4:2a:c3:80:72:24:35:
33:50:ff:2b:01:90:51:df:a8:e8:7f:a6:a6:12:c0:b5:0d:22:
5f:1e:3e:fc:0a:03:f6:2f:83:a5:46:7d:7e:85:89:9e:63:65:
73:13:d5:3f:fc:e3:b7:91:ce:de:4d:45:fa:10:90:98:48:4e:
18:b1:56:91:33:cd:ae:a6:91:5c:ba:6b:47:df:6b:ac:b6:f2:
3c:ee:b7:92:49:c6:c1:2c:47:5d:e3:cb:e2:80:8e:98:bb:79:
c8:25:c8:45:45:d5:01:01:b0:3a:7a:41:6f:6b:85:ec:36:93:
b5:bf:3a:bf:1e:b8:41:7a:87:96:70:75:75:cc:e4:5a:08:0f:
e3:a7:1a:97:f5:8a:10:c1:6e:f6:3f:d9:5b:8e:f3:ad:98:7c:
60:38:cd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:25 2026 by rpki-client