Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
File: GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft (raw, json)
Hash identifier: iPCCwgEJD7N8Q3VvOXg30wVVZbGdUDH7J30L1t6fHrs=
Subject key identifier: 1A:F3:7E:D4:1D:44:6F:94:D8:3E:D2:6B:BB:C4:5F:EC:0A:FD:53:8D
Authority key identifier: 1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
Certificate issuer: /CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Certificate serial: 019F837AD1A30EB62D0EE79121FCAC26A731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
Manifest number: A7
Signing time: Tue 21 Jul 2026 07:01:32 +0000
Manifest this update: Tue 21 Jul 2026 07:01:32 +0000
Manifest next update: Wed 22 Jul 2026 07:01:32 +0000
Files and hashes: 1: GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl (hash: GRTS85qZrow5Eswwg5+ADg00DLFfn0n7rPksx+I024M=)
2: zr6qOC2iZhYMAkfVEjFaWAW3Gdg.roa (hash: rfGt0EQo3cdc8IHh8jz9o2EgRv1qNBw2XAoGV+8jWOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:7a:d1:a3:0e:b6:2d:0e:e7:91:21:fc:ac:26:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Validity
Not Before: Jul 21 07:01:32 2026 GMT
Not After : Jul 22 07:01:32 2026 GMT
Subject: CN=1af37ed41d446f94d83ed26bbbc45fec0afd538d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:a0:44:c8:08:8d:ef:4d:16:3d:95:82:75:
3b:87:dc:42:95:b2:f5:be:3a:2f:3b:01:ff:e8:94:
c5:cd:97:a8:c1:39:a2:6f:3d:b3:c7:74:c6:d5:e2:
2f:99:17:36:b9:7f:67:20:dc:ff:ce:08:19:55:60:
1e:ab:fe:27:85:9a:e5:28:d7:2d:94:6c:83:3b:46:
47:0c:f8:b5:9e:05:a5:67:45:8f:75:4d:b7:c6:a1:
0c:83:fc:b7:a4:97:9d:27:31:8f:39:fa:38:04:45:
aa:bc:4f:fa:f8:76:be:4f:46:40:2b:a2:7e:d2:29:
d0:ee:40:ff:c9:a2:df:40:53:9a:b5:00:f9:bd:53:
c8:a4:cd:04:f7:75:de:47:7d:7b:78:44:cb:90:f6:
e8:be:7e:f9:5a:e9:26:76:53:8f:0f:bd:8c:26:a6:
22:ce:16:b7:77:09:5c:fe:23:f6:46:fe:20:91:86:
47:d0:91:30:82:7f:18:07:12:92:af:f8:ea:ec:ac:
2d:65:3f:52:52:20:b6:52:ed:44:f2:00:ed:77:69:
83:d9:14:2b:f9:12:28:4c:61:ff:5f:d8:03:60:b2:
89:b1:e8:46:2c:e7:ce:6d:36:27:06:64:6b:6d:4e:
1c:14:9b:2d:f3:f4:df:15:ac:78:d4:51:20:21:77:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F3:7E:D4:1D:44:6F:94:D8:3E:D2:6B:BB:C4:5F:EC:0A:FD:53:8D
X509v3 Authority Key Identifier:
keyid:1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0c:68:1d:f5:33:77:b8:c1:f6:d8:30:e8:f4:76:84:40:e1:
c8:be:31:77:b0:ba:fb:66:bb:d8:4d:4c:79:a0:d6:84:2d:c6:
75:10:bc:d2:82:87:fb:e7:74:c3:b7:da:e3:0f:b4:69:a7:2c:
d2:78:c9:34:a8:c5:8f:5e:88:67:89:f8:65:61:2a:30:4e:5a:
ac:7d:6b:87:9c:f0:d2:b4:a5:be:ce:3a:21:b1:f7:6c:26:a5:
32:e3:82:46:83:e7:3c:87:1d:f8:06:8a:f7:32:2c:15:0f:46:
83:20:2e:4f:9d:e6:36:52:d8:52:16:b2:3c:ef:05:61:37:9f:
22:c5:d1:d5:8a:3c:af:f9:27:ed:12:5c:1a:79:e0:ec:5e:a3:
1e:bc:15:39:eb:1e:3d:5e:99:8f:6b:b4:d5:63:97:1d:76:69:
c6:6b:27:8c:e9:1f:a2:c8:93:e3:f6:c9:82:89:bd:ab:16:c4:
71:26:1a:d8:52:2f:44:77:10:31:86:50:9a:d0:59:ae:82:e7:
3b:aa:66:0b:e6:38:15:16:84:db:4c:f4:94:1a:54:47:e4:01:
03:42:6c:39:3d:97:79:2b:d3:37:96:1b:4b:f7:20:e2:a8:77:
1d:0a:cb:c5:e3:e6:a5:b1:3f:46:6d:b6:ce:d9:80:44:6a:1a:
33:0e:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:42:27 2026 by rpki-client