Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
File: gtiJtzM2c4evJNBuf5IeHrwOjMA.mft (raw, json)
Hash identifier: bOgi3Nh5yKwK+PQpobBEy/xWnbSSxYviOGTxLULhdTU=
Subject key identifier: D9:9F:59:35:44:A0:30:73:FF:9E:45:91:2E:2E:AD:A7:CE:21:F5:BB
Authority key identifier: 82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
Certificate issuer: /CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Certificate serial: 019F89B3343FEFB379CD56843DEE3FE1434C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
Manifest number: 3C
Signing time: Wed 22 Jul 2026 12:00:50 +0000
Manifest this update: Wed 22 Jul 2026 12:00:50 +0000
Manifest next update: Thu 23 Jul 2026 12:00:50 +0000
Files and hashes: 1: Ivo9foptlHgZGm6u5gb6QwW3XyE.roa (hash: 2DKjAU7c2CAk3rfklrUELipPt0YMxIA0kvbW1SiZbks=)
2: bd0fr_kRPnaKLvLN9ZpO5e3Kz2I.roa (hash: WDxxU0O54RTfygWfLBj7mncB1ZZMMpBFwyQajkCAytc=)
3: gtiJtzM2c4evJNBuf5IeHrwOjMA.crl (hash: i6yGVuILKos48a9wytI88UwtxRyL+CtRIpf5V+tN37M=)
4: i_5GgFY65mhct5XMfGA2cRGx7lE.roa (hash: u8f3lfAClBezvakZmVD5y6jZdKYCu72g+x8pASRVo2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:b3:34:3f:ef:b3:79:cd:56:84:3d:ee:3f:e1:43:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Validity
Not Before: Jul 22 12:00:50 2026 GMT
Not After : Jul 23 12:00:50 2026 GMT
Subject: CN=d99f593544a03073ff9e45912e2eada7ce21f5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:96:aa:dd:63:e7:33:90:55:14:0e:52:ad:
01:ba:33:ce:44:b5:d1:72:75:54:c2:d4:ff:7a:3c:
1f:d1:c1:71:27:72:51:a1:90:99:f8:fa:7b:a0:5b:
1e:e8:bd:db:75:98:6b:20:59:c9:04:a9:3e:b0:1d:
3d:f8:44:26:35:f0:d0:c1:21:6d:3d:f1:7b:28:b6:
34:82:fd:cd:38:5f:72:8b:6a:71:c3:16:e2:1f:5a:
92:aa:e8:17:76:5e:77:74:e6:ed:fc:79:f0:48:f0:
17:6d:8f:e2:7e:d5:ec:bf:ff:fa:c5:39:05:6a:99:
93:eb:5d:d4:a2:76:14:ba:72:79:8d:7b:ff:13:6d:
3b:f6:2a:44:6d:3b:38:4f:6f:02:cc:7c:47:03:c1:
22:96:e7:a8:6c:66:71:5d:1a:cf:f6:5f:98:70:31:
85:ed:cf:eb:1f:53:8e:7b:05:a2:3c:b5:ee:9a:90:
f3:b6:ad:85:ec:5d:54:60:27:32:0e:34:2a:3a:32:
6a:ac:f9:a9:39:92:eb:5f:f7:04:74:01:76:0c:a9:
f8:d3:87:25:58:a8:48:12:69:4f:4f:17:8e:7d:0d:
cf:f1:7e:c1:61:85:3e:da:c1:a2:45:35:66:d0:2e:
40:5d:81:32:96:7d:94:95:39:c6:f1:54:9e:0c:1b:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9F:59:35:44:A0:30:73:FF:9E:45:91:2E:2E:AD:A7:CE:21:F5:BB
X509v3 Authority Key Identifier:
keyid:82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:66:ba:4e:0e:9a:35:43:b8:15:9b:5a:5b:e0:f3:57:4d:6f:
27:ac:f2:b4:d9:5c:32:ae:56:fc:e2:24:ad:86:e9:6b:1f:5e:
7c:31:2b:34:1e:61:47:ab:07:a6:18:ed:3c:d2:1a:44:0f:41:
1f:d4:c2:5d:c3:68:72:79:ec:bc:c6:4d:fa:10:79:ff:ea:97:
39:56:f8:9a:a8:ef:42:a9:eb:3c:43:22:f7:e1:81:b5:31:ad:
80:92:c6:71:ac:8c:3e:5f:b9:70:45:7b:02:39:23:ce:bc:2d:
2d:48:76:87:27:9b:58:cf:42:26:33:75:71:09:f0:d9:1d:e4:
90:bf:e4:58:c6:50:9f:36:23:2e:89:86:80:35:1f:4d:15:a6:
9b:7b:05:e2:69:3d:f2:32:23:e3:49:ca:e4:9e:13:7d:c9:90:
9c:e4:13:78:99:e7:dd:6e:32:5f:8a:48:ad:64:1d:3f:1d:bd:
60:30:99:2e:19:df:21:ad:9a:2b:92:0a:27:30:25:de:a0:db:
6e:86:96:a4:06:62:6b:e2:e9:18:df:82:1c:9e:d1:4a:48:68:
04:4f:99:fd:0c:84:b8:92:20:d2:14:e0:38:f3:ea:88:83:39:
0a:c1:6a:04:7d:2d:57:cb:98:ff:ce:0d:c6:74:44:40:7f:e4:
28:ea:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 17:59:01 2026 by rpki-client