Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json)
Hash identifier: fhf5dcc84rbCEgYqxgAYGBRkBSreGWeM5u0RL+NWxx8=
Subject key identifier: ED:5E:78:AD:6D:23:75:DE:19:5B:EB:FA:65:5A:AF:9A:33:AD:2E:9A
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial: 019F83E7A411753AB82B383B1F4E68A14BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
Manifest number: 0D33
Signing time: Tue 21 Jul 2026 09:00:23 +0000
Manifest this update: Tue 21 Jul 2026 09:00:23 +0000
Manifest next update: Wed 22 Jul 2026 09:00:23 +0000
Files and hashes: 1: IVL7dLrg6wGDU1LsfYsBBP5fLww.roa (hash: nXXz2gE0BqsxA3+AlASgnT6agymsn4mqf9G776nMdI8=)
2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: XVv3VZ5i3o6fBxJdR3G6nfYvabIN9vmJgwR7pv39Uqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e7:a4:11:75:3a:b8:2b:38:3b:1f:4e:68:a1:4b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Validity
Not Before: Jul 21 09:00:23 2026 GMT
Not After : Jul 22 09:00:23 2026 GMT
Subject: CN=ed5e78ad6d2375de195bebfa655aaf9a33ad2e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ff:40:1d:91:26:66:1c:b5:73:39:9c:15:16:
7c:34:3f:1b:93:43:d6:5d:1f:d8:db:b7:4f:d0:e2:
ff:04:bb:9c:1e:c3:6a:b4:ac:90:22:a4:a9:c2:ac:
d4:17:7f:fb:f6:47:5b:2b:e4:66:e7:bd:bc:cc:26:
40:52:b8:9b:63:bf:33:4a:6a:00:05:73:13:e3:6f:
1b:ac:6f:c5:5f:d1:b5:d2:c7:dc:96:3c:0d:b8:97:
42:a1:22:eb:ff:38:ea:60:1e:1a:37:a2:44:81:fb:
7a:4c:e9:9b:64:b3:94:5e:02:14:62:08:9f:96:de:
b4:ec:cb:5e:ef:da:22:66:46:14:3b:be:b0:cc:ad:
3b:a5:92:f7:1f:46:16:1d:8c:a1:b8:63:e0:e9:ac:
81:e4:ad:52:37:e9:f8:6f:90:92:88:dc:c1:48:31:
bd:a6:f3:e3:b5:3d:a7:ec:cf:a1:ce:cc:c2:03:7a:
13:36:89:51:4c:9e:22:33:26:0d:e8:14:59:ae:b7:
c8:db:69:63:63:97:a3:56:bb:5f:7b:48:88:0d:34:
d8:dc:9b:db:73:98:44:c7:97:8c:2e:33:fc:43:8f:
54:d8:43:63:ac:eb:80:84:23:37:f8:53:d3:b0:d9:
2e:2d:bc:65:08:40:ac:33:52:b9:89:0a:55:69:84:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5E:78:AD:6D:23:75:DE:19:5B:EB:FA:65:5A:AF:9A:33:AD:2E:9A
X509v3 Authority Key Identifier:
keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b3:2b:d2:41:8a:35:cd:7a:be:71:13:44:fc:be:ee:39:a9:
5f:4b:d0:fe:cd:5e:19:cd:06:13:d2:1a:33:8c:3a:c1:2c:1d:
3d:95:b0:2a:67:4a:8e:8a:d5:07:52:fa:50:ce:d8:68:02:46:
f0:7b:ab:3b:76:ef:19:9e:14:f2:af:7e:f0:e3:f6:4f:d7:57:
04:c2:ea:c8:95:f3:95:c7:a2:33:ac:48:ff:10:d1:28:73:f0:
cc:f4:ee:3b:3d:5c:44:4b:6f:15:95:99:8e:3e:36:9e:9f:01:
37:ee:ac:b9:48:88:91:63:c7:15:13:e6:f6:e9:67:d0:fd:37:
cf:28:01:ab:ef:c1:46:e4:ab:3e:5c:04:36:5a:80:b8:18:18:
4b:57:0c:26:63:d4:f7:15:51:fa:04:b6:4c:41:6a:66:05:ee:
b7:f6:30:31:83:c2:76:d2:dc:11:8c:22:c5:14:8c:db:fa:93:
2f:41:2d:5b:67:41:2d:bc:f6:cf:9c:5e:1e:27:1a:bd:c9:01:
b2:37:8a:5d:0a:75:8f:7f:10:4f:31:89:15:c4:fa:fa:eb:af:
0c:98:91:e3:f0:4c:bf:5a:71:32:8a:14:e3:be:5e:e4:64:45:
d3:93:0a:4a:1b:85:21:b4:bf:c5:cb:04:db:ad:d6:ad:37:b6:
9f:5e:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:33 2026 by rpki-client