Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
File: gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft (raw, json)
Hash identifier: iY3IRiDRJtUfb+xA7Y7JteHl+Wjwpfn/M3zZp6G1TnE=
Subject key identifier: 42:84:E9:C4:1E:A0:8B:BC:44:05:65:AB:86:1D:49:08:B9:73:9F:DB
Authority key identifier: 81:94:36:4C:BF:27:68:7A:9E:59:52:82:CB:61:69:75:A0:63:FB:FC
Certificate issuer: /CN=8194364cbf27687a9e595282cb616975a063fbfc
Certificate serial: 019FA2CE71AED501E98A7642398FA0768D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
Manifest number: 27
Signing time: Mon 27 Jul 2026 09:01:06 +0000
Manifest this update: Mon 27 Jul 2026 09:01:06 +0000
Manifest next update: Tue 28 Jul 2026 09:01:06 +0000
Files and hashes: 1: 2bj5-0BZd7k7PxCQQt3dR6sMa_c.roa (hash: FbdQo9ph3iDjpX3oiKqtQfo2fgWCcSI1MBdgV3YQnqY=)
2: gZQ2TL8naHqeWVKCy2FpdaBj-_w.crl (hash: RU3gIsTSikZNMSBExBJRnp3G+UG/Y69P3RBsUmOwb9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:71:ae:d5:01:e9:8a:76:42:39:8f:a0:76:8d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194364cbf27687a9e595282cb616975a063fbfc
Validity
Not Before: Jul 27 09:01:06 2026 GMT
Not After : Jul 28 09:01:06 2026 GMT
Subject: CN=4284e9c41ea08bbc440565ab861d4908b9739fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:c2:b7:0a:a7:1a:02:de:99:e0:a3:65:d2:
8b:b7:c0:fd:ab:ef:bf:f8:ac:a7:66:bf:d8:12:c6:
19:a1:c3:56:5b:8e:57:20:26:94:fa:58:0a:93:e2:
16:8d:7a:15:83:19:b3:48:b0:98:66:13:bb:4c:c7:
7f:13:8b:23:f4:44:79:c5:49:9b:ca:d0:7d:8f:69:
a2:b8:2b:30:8b:17:e0:47:de:cb:1f:d6:fc:ce:c6:
c2:c5:50:5d:e4:9d:a3:81:4f:de:52:30:08:81:93:
a7:2d:bb:1c:c4:a0:10:d3:90:4d:48:2c:21:cc:f5:
ab:61:0e:60:ef:3c:98:80:2c:b0:23:af:a5:dd:3f:
ee:bc:08:aa:d8:38:1c:be:77:6c:d9:a3:3d:4f:ac:
38:e3:b0:b4:ca:f9:c2:47:ba:c8:8f:58:2e:1f:db:
78:3d:f5:5a:79:4d:a0:21:36:fb:cd:64:cd:1c:c5:
24:ac:db:87:78:3f:19:3b:a5:3b:5f:dc:a5:ce:39:
1d:21:6d:93:2d:07:db:65:e1:a9:d5:34:c4:a7:fd:
38:f8:21:c0:89:34:4f:19:f6:2c:b7:7f:9c:94:96:
ef:7c:4b:0f:e5:ed:67:f8:01:2f:04:f8:d5:27:2a:
a8:16:c7:97:15:cf:85:ba:63:ed:f1:ab:24:71:78:
6e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:E9:C4:1E:A0:8B:BC:44:05:65:AB:86:1D:49:08:B9:73:9F:DB
X509v3 Authority Key Identifier:
keyid:81:94:36:4C:BF:27:68:7A:9E:59:52:82:CB:61:69:75:A0:63:FB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2f:2b:f0:7b:45:89:5d:18:df:fa:52:7c:4b:b0:37:d4:0d:
9d:19:97:b2:81:da:12:d3:e7:83:a1:08:82:72:2a:56:95:08:
46:d7:79:58:06:af:4a:9a:46:7f:f8:9f:81:e4:c5:40:ea:19:
1c:3e:fe:30:9d:c5:a7:6b:34:5c:5d:11:35:56:af:11:4e:f8:
e9:cf:6f:0c:34:3a:6d:50:27:bc:fb:db:ed:91:91:5b:89:05:
4b:31:2b:3d:7c:5c:4a:d2:d2:c0:b2:f9:84:a0:dc:ae:33:31:
82:27:fa:92:c5:02:00:64:00:46:5f:2f:96:df:24:f3:82:c7:
9a:87:2a:b3:e6:6f:73:9f:79:05:e5:0c:bd:63:f9:f7:79:58:
8c:0c:e3:7a:c0:7e:55:b3:d7:21:28:70:19:60:5e:69:1a:e5:
a7:e3:03:0e:04:cc:85:88:7f:ed:45:fe:6d:6a:8b:20:90:bd:
a8:3e:dd:eb:a8:ff:4c:0f:24:af:69:d8:9b:d8:ac:0c:51:f5:
24:5c:5b:9b:39:30:22:d0:97:bc:57:4b:03:94:d9:a8:d5:9f:
ca:8e:97:1a:ba:c6:77:3f:23:9d:f9:5d:24:8b:f5:03:d4:8e:
8f:ce:1c:3c:97:d0:c1:aa:8d:46:65:08:f1:6e:c9:e8:ce:2e:
50:84:2e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:30:03 2026 by rpki-client