Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: r+ZYjIywQOgQWe344j4ZqnlbNTaTM41rpnBT44QYV+E=
Subject key identifier: CF:03:D9:72:EE:6A:E1:77:53:DD:EC:6A:F3:B9:61:49:70:33:48:4B
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 019F829E26A68F6546E53117E6AD8DCBC827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0ECA
Signing time: Tue 21 Jul 2026 03:00:30 +0000
Manifest this update: Tue 21 Jul 2026 03:00:30 +0000
Manifest next update: Wed 22 Jul 2026 03:00:30 +0000
Files and hashes: 1: 1-G_9qaTlg9_9ZXzg69NS2bmEGWE.roa (hash: +lDVdHNQmmTIYvQZgxKxtZPdzwOYciN1IB8yFnfGP4A=)
2: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: cTeV1uD6709z+MBUrsTpodmG3Jl7SrBvgROCoiR8gbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:9e:26:a6:8f:65:46:e5:31:17:e6:ad:8d:cb:c8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Jul 21 03:00:30 2026 GMT
Not After : Jul 22 03:00:30 2026 GMT
Subject: CN=cf03d972ee6ae17753ddec6af3b961497033484b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:52:f6:34:8b:33:c7:d8:60:7d:60:ba:96:
30:22:2e:bc:63:42:56:46:91:e5:d0:68:d2:ad:b2:
71:1c:32:93:f4:3b:d0:2b:6f:56:5f:1d:7c:4c:0e:
6a:0b:bb:25:9b:ef:a7:c9:5b:42:ca:13:0b:9b:cc:
0d:a2:58:7f:fe:57:4e:1e:d9:de:1e:ba:e1:da:6e:
e4:64:12:99:58:3f:cf:c2:e8:eb:8a:a9:18:ea:4c:
74:14:b9:1f:69:7e:33:17:50:ce:d2:67:f7:4f:8f:
fd:ba:03:42:59:58:39:a6:a6:50:87:85:c4:a7:47:
8e:6b:22:51:27:60:07:8b:21:97:32:ce:dc:c5:3a:
a7:d6:33:e3:60:10:10:72:70:c8:85:e0:c6:60:8f:
c5:95:33:25:77:a6:ca:74:1b:a5:14:1f:47:b2:84:
da:7e:19:02:57:4a:12:db:59:c2:b0:19:8e:f8:87:
d7:c2:2c:32:cd:9e:9f:fd:bb:af:49:61:b4:fb:12:
45:e6:40:50:2e:4d:08:b3:28:f6:ad:33:44:b6:4f:
cd:3d:fc:6a:04:f0:da:d0:4b:1b:a8:ad:8b:d3:e7:
d5:54:5a:46:ee:fa:3d:6c:25:35:f1:a4:21:c4:78:
87:07:f9:8e:e5:e6:41:10:57:43:09:44:d9:f5:4f:
33:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:03:D9:72:EE:6A:E1:77:53:DD:EC:6A:F3:B9:61:49:70:33:48:4B
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:20:93:1e:3f:06:2e:65:b5:8a:fa:b1:54:5d:64:de:5e:c3:
ee:3c:38:27:9d:f6:be:fa:bb:e0:28:02:ce:f2:c5:ae:13:99:
b1:51:86:82:11:b5:1e:dd:77:c3:e9:e6:20:ae:18:54:13:6e:
3d:43:81:04:09:8d:92:37:13:97:07:94:e1:a5:9b:ff:be:0c:
da:14:fb:ff:72:ae:22:7a:4d:c4:1c:fd:c9:82:86:61:7c:6c:
99:96:a1:55:3b:99:4f:6c:7c:d7:9d:77:34:91:1a:d3:90:2d:
c3:5e:77:12:0d:ce:b8:35:f6:40:3d:48:2f:61:dc:33:85:b4:
32:6c:99:08:e1:d2:e6:a7:5b:24:c3:74:28:02:1c:82:1c:d4:
eb:1e:15:4f:c3:1b:30:7b:f9:1e:2c:36:f3:c8:e2:4f:e9:c8:
6e:c9:29:b9:d2:37:ec:b2:10:30:b3:a8:01:19:21:35:aa:f6:
44:3f:ed:9a:4b:54:0b:e2:a9:1c:e6:77:0f:1f:91:cd:48:27:
40:e9:3f:2f:8d:7b:df:99:79:c8:79:16:73:91:89:66:0f:ab:
02:0d:eb:76:22:01:b3:90:fc:2a:2d:35:dc:b7:e6:4b:a4:82:
1f:3d:f4:c3:bc:cd:52:e2:d6:48:e4:8a:47:ad:32:e3:d1:fa:
8d:c9:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:24:22 2026 by rpki-client