Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier: vebgsj2NQcVI5Ed+Gn6MC1jcIGn6sjLPyLZB6IfKUFs=
Subject key identifier: 33:E0:71:2B:5F:08:47:D4:32:2A:4E:9C:90:D2:0E:9F:CD:D9:3E:24
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 01A01F7A0D215E223DB9E30F56B5045674FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number: 1A12
Signing time: Thu 20 Aug 2026 14:01:27 +0000
Manifest this update: Thu 20 Aug 2026 14:01:27 +0000
Manifest next update: Fri 21 Aug 2026 14:01:27 +0000
Files and hashes: 1: 9iYRo82i9hRkUCgmREahdJYxLLE.roa (hash: Iaajzt1IR/GS2dadWD8d0yfp4+37Bgf5XHM3q2W76dA=)
2: Jm12F1fJac9AdzTGN7xQVn8K_U4.roa (hash: P/nVz8qxvVHC3IkIASDUTBADr0JHFnsbfxbsnkdVypc=)
3: U17Ig7TH3Hf9u0Hjug4B8FqbaeM.roa (hash: h4vlRYblnFE5NeXhaGifoUzHbL8gvX60WPtBD/isPek=)
4: Z81lv8qaADBtEGYsx0-brJvvQeg.roa (hash: r6SobeHV+YoGbEJkji/z1sNc1KoSoCEgvZU8Lt5eYac=)
5: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: BlS1DU0KYPk8vXOwwKQmQ43irqdp8pW9zrJNe8OiJDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:7a:0d:21:5e:22:3d:b9:e3:0f:56:b5:04:56:74:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Aug 20 14:01:27 2026 GMT
Not After : Aug 21 14:01:27 2026 GMT
Subject: CN=33e0712b5f0847d4322a4e9c90d20e9fcdd93e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5e:20:9b:bb:b9:3d:9c:28:78:da:3d:6a:0e:
f0:3d:1f:87:a6:cd:c5:78:b5:0c:74:c5:0f:75:d2:
ee:e8:89:cc:19:44:b3:ae:d5:69:12:b3:5f:8a:f4:
57:81:6f:13:5d:5b:85:a0:0d:ca:5e:1f:6d:9b:d9:
1e:89:17:a2:34:b2:7a:79:cf:c0:45:23:9f:0a:8c:
9b:ce:13:57:08:7d:fd:fe:b5:f5:67:95:24:73:f3:
93:68:80:01:c0:7f:14:6c:f7:b8:cb:0f:70:67:bc:
9c:57:9f:4f:4f:78:8b:39:40:18:5b:a6:e7:c3:c2:
66:9a:6d:f1:41:ed:96:4e:34:31:06:5f:d8:b4:0d:
64:a7:3b:7b:34:23:34:48:77:31:1d:6c:4f:e5:71:
65:b5:82:d5:32:38:85:b3:a3:e0:f2:f0:07:63:bb:
e4:0b:2b:d8:b3:f6:d1:2b:c2:7b:1e:6e:a3:97:6a:
d6:3f:ad:f9:25:6e:c8:24:c9:62:0d:a5:c5:42:15:
ca:02:60:f0:fd:b6:cb:c5:f0:f5:d8:b5:ee:93:fc:
eb:d8:82:06:bf:46:69:63:5a:9e:d9:3a:af:ee:9e:
fe:cc:cd:54:05:ca:bf:f1:f5:ab:e2:64:fc:51:c1:
57:fd:d6:19:23:32:67:ab:63:9a:5f:43:7b:24:8d:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E0:71:2B:5F:08:47:D4:32:2A:4E:9C:90:D2:0E:9F:CD:D9:3E:24
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1c:40:bd:c5:88:fe:f3:21:3a:74:5c:c5:35:99:d9:aa:da:
b6:8e:50:e5:1f:33:ec:6a:81:1a:bf:3a:6a:ee:1b:fe:d7:52:
8e:15:f7:fb:45:d4:0d:ec:f9:5c:16:55:7a:45:bb:d4:23:76:
40:48:4e:5a:4f:ae:93:3e:45:ad:64:60:b4:0d:d2:e2:05:68:
27:f1:18:0d:cc:82:4d:38:86:88:45:0e:4f:c3:fd:8b:e3:78:
93:12:06:fb:c3:aa:ee:41:24:c6:5b:36:36:d9:75:69:1d:9c:
26:18:69:55:79:fe:a5:b0:b3:57:37:d0:21:20:f4:c8:69:33:
2b:d2:e3:be:64:77:91:70:7f:9c:59:21:0d:aa:ee:ca:04:5a:
61:73:a9:ae:0d:e3:46:d8:01:ad:5d:2b:7d:7e:9c:0e:d7:6c:
5e:e5:e5:9c:41:06:53:95:91:ea:4e:b5:f4:cb:1a:fa:63:cd:
7d:e6:10:89:ae:38:a7:1e:ae:aa:bd:dd:7e:db:4c:2f:72:50:
47:6f:2c:c6:e4:52:18:96:de:43:20:ff:82:93:5d:eb:79:10:
7d:aa:0f:9a:3d:1e:b0:34:ff:6c:8b:a4:49:45:33:96:7f:04:
5b:73:3a:f7:34:b8:c7:9d:6a:1a:1f:34:61:8b:39:af:6e:c2:
5c:d5:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:05 2026 by rpki-client