Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
File: Gu0CBP9R8olCGFT6YrPCMcNer2w.mft (raw, json)
Hash identifier: IEBAfC7WnLE1RsokhKFF0kLkPZrIAA02FBs0rv4OV6U=
Subject key identifier: 42:40:A7:0B:EA:63:9E:A7:FD:BA:54:A9:88:D9:F7:B2:C5:22:F5:D8
Authority key identifier: 1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
Certificate issuer: /CN=1aed0204ff51f289421854fa62b3c231c35eaf6c
Certificate serial: 019F916D21CC9F8FB6512CA2172DFFFF2993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:15 +0000
Manifest this update: Fri 24 Jul 2026 00:01:15 +0000
Manifest next update: Sat 25 Jul 2026 00:01:15 +0000
Files and hashes: 1: Gu0CBP9R8olCGFT6YrPCMcNer2w.crl (hash: MafiP4TYrzuOTeWoUmeSdVYs5UxwZo7TJy6MuktzYfA=)
2: MXiJymlWnPv8K0_SYeg14AvCims.roa (hash: VJrJz4Yf0xl1z5pYVZXPPsSfyBh8RWLcRUu/3SlQW5M=)
3: TSXqej0WW_9xcvEDJRvBI7pt5LE.roa (hash: ZTp/vNt08nHTq/Tb6B374ia403187ADNP0tAFEOnaq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:21:cc:9f:8f:b6:51:2c:a2:17:2d:ff:ff:29:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aed0204ff51f289421854fa62b3c231c35eaf6c
Validity
Not Before: Jul 24 00:01:15 2026 GMT
Not After : Jul 25 00:01:15 2026 GMT
Subject: CN=4240a70bea639ea7fdba54a988d9f7b2c522f5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:f1:cf:44:92:70:cd:f2:d2:43:28:d0:72:
94:22:17:ca:04:76:1b:a4:f7:fa:b7:63:84:7b:d8:
cf:c5:6b:d1:4c:9e:ec:a3:4c:ab:4f:e9:06:4f:dc:
3f:36:b3:4e:d2:53:ab:a4:79:f6:16:27:d5:e3:79:
2c:29:00:7d:15:37:2f:43:c0:de:18:6b:d3:0f:68:
2e:d7:49:34:87:b0:3f:56:0f:cf:b8:23:e0:21:8b:
1a:88:83:18:fe:b2:f3:72:cf:48:30:02:db:06:53:
c1:8a:fc:00:1a:d2:2e:9d:c2:12:a1:9a:d7:43:67:
8a:63:40:ca:7f:3f:8e:be:d6:2a:41:86:2c:72:f9:
27:da:da:60:6e:1d:22:6c:68:f3:78:c1:bd:0e:bc:
73:f0:4d:58:99:37:37:69:4b:83:f0:4e:fe:1b:e2:
fa:5a:74:c1:11:2a:83:12:8f:0f:e9:fc:c5:a3:5c:
54:e5:30:b1:34:10:9f:2f:e4:02:39:15:87:a5:4d:
c9:f9:d7:1a:d6:de:74:8b:5d:5d:4b:b2:ea:bd:9b:
33:f0:c9:75:36:d3:5c:dd:ee:5c:3a:94:94:5c:af:
ea:05:11:f4:ab:f6:8c:7e:83:57:e7:b6:35:40:2d:
fa:8d:0e:4d:ae:33:96:1d:02:2b:25:2c:da:be:f1:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:40:A7:0B:EA:63:9E:A7:FD:BA:54:A9:88:D9:F7:B2:C5:22:F5:D8
X509v3 Authority Key Identifier:
keyid:1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f4:42:f9:71:e9:f3:4d:e8:84:c8:3c:86:8f:1a:c5:76:77:
57:72:0d:1b:28:3d:7d:40:2d:2e:02:57:75:79:d5:5e:fa:cc:
e0:4c:8b:0d:10:ca:31:af:93:52:31:aa:0b:17:38:76:df:78:
f3:96:f0:0d:c9:55:56:9f:d7:ab:ff:c8:73:48:c9:00:7d:6f:
8a:95:c6:b2:0f:c0:ec:d4:0d:8e:a6:bc:fb:51:d6:a6:f8:23:
2a:d5:ca:ad:07:4a:f1:0f:ab:34:b7:bf:3f:c5:40:8f:f5:08:
7d:86:af:ce:56:8c:d2:9a:e3:c9:a2:61:b9:e2:e7:0d:63:05:
86:8d:1c:a9:1a:85:ac:09:9d:95:f1:43:59:20:0b:45:43:77:
d9:f0:10:bd:3c:67:5b:cf:53:72:44:93:2e:53:49:d0:8b:1f:
f5:de:22:af:ec:3d:98:52:9c:d9:3f:9b:f2:d4:03:40:7f:33:
ee:f8:1c:ba:a9:1b:4b:20:55:fb:94:47:f6:f9:6a:9d:43:15:
6b:57:72:f8:29:6c:1c:7c:3a:e1:81:09:9e:7c:cd:fd:0f:cf:
04:90:47:d5:39:2f:09:b8:5c:5e:e2:38:a3:b2:ad:0c:4e:67:
9d:1d:68:7c:a5:7c:75:b8:31:4d:32:dd:da:49:86:28:44:e2:
79:a3:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:22 2026 by rpki-client