Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
File: GpvZxsEozNlD9_dyKSLGb2a07dU.mft (raw, json)
Hash identifier: E146/HnLeDau881SGTRk3AbnP7b6dzmvwXyNKLd7Dz8=
Subject key identifier: A3:3D:35:44:33:D6:04:3D:92:60:8E:9A:95:59:40:EF:9E:DE:07:BD
Authority key identifier: 1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
Certificate issuer: /CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Certificate serial: 019F82D529F8DA1504D842B5DC5D9EF025BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
Manifest number: 0253
Signing time: Tue 21 Jul 2026 04:00:35 +0000
Manifest this update: Tue 21 Jul 2026 04:00:35 +0000
Manifest next update: Wed 22 Jul 2026 04:00:35 +0000
Files and hashes: 1: 1-oyfhNLyYue13tRFCKo0IPxmM24.roa (hash: oPm09IIbFaa5Ai2vo1N5k2H9XoBpkLq4SkDxgfWP1PU=)
2: GaCNO5uvEPZSSwfLA86l-W_3H7o.roa (hash: Q+4U2eLN8lYe4XRd9553vr9mNVPmss4+izmTxQVodwk=)
3: GpvZxsEozNlD9_dyKSLGb2a07dU.crl (hash: tM9/q3p61BA61YfFfMjMYZrbrHmV7PkBCF8+bHyCTrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:d5:29:f8:da:15:04:d8:42:b5:dc:5d:9e:f0:25:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Validity
Not Before: Jul 21 04:00:35 2026 GMT
Not After : Jul 22 04:00:35 2026 GMT
Subject: CN=a33d354433d6043d92608e9a955940ef9ede07bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:b0:a2:3f:85:d1:d8:db:7f:0d:4b:36:ce:
e6:39:69:72:3c:d0:ee:94:55:ad:52:b2:0a:47:1e:
13:3b:aa:ee:dd:51:91:d6:b7:55:a6:70:7d:fd:98:
e9:79:a4:44:b5:80:04:95:1d:6e:33:c4:36:70:f0:
f9:44:96:19:41:6b:c5:fb:4b:7a:e4:bf:b5:f7:4d:
90:4f:87:7b:a3:3d:5a:cc:3d:78:58:5d:bb:01:e6:
c1:32:06:39:d6:cc:ec:c2:1a:39:85:75:0d:37:9d:
d1:02:e3:cc:76:25:50:87:d9:79:c8:c3:67:74:c9:
bd:81:30:90:f5:b8:37:1c:a3:02:5a:9c:9d:94:e1:
e4:d5:66:a2:9f:4e:35:e4:fc:9b:04:10:0b:b8:b0:
1a:80:55:7a:08:70:fe:d0:c0:b4:0b:b2:fa:a6:79:
85:d0:3b:fd:78:d4:af:e5:ef:4b:7f:bd:3d:d0:64:
61:9c:90:4a:29:7e:05:52:fe:9e:d8:a6:80:2c:b3:
38:aa:c4:71:7f:12:06:10:34:a2:83:72:a9:5b:df:
44:97:47:ec:5f:1b:c4:2f:2a:84:90:ac:02:8a:21:
ee:f9:db:dd:06:74:65:ef:a0:b7:74:32:05:cc:0d:
a3:b6:6f:f3:e4:c5:28:9c:f8:37:10:ab:1c:8e:82:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3D:35:44:33:D6:04:3D:92:60:8E:9A:95:59:40:EF:9E:DE:07:BD
X509v3 Authority Key Identifier:
keyid:1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d9:b1:4a:d1:c2:62:c9:20:4b:e7:4e:f3:32:eb:04:0f:52:
ce:c1:6a:15:49:ff:6d:ba:07:61:f0:de:32:ba:b3:fd:de:3d:
9d:6f:cc:25:5a:68:e0:90:ec:2c:ef:29:88:46:d5:4f:6b:3d:
78:2e:c5:15:8d:c6:3c:a1:d3:1c:f7:e7:2f:d0:db:ed:79:ee:
70:21:3c:3e:e5:07:d4:7e:64:5d:bf:e2:fa:19:78:62:1d:52:
36:45:0e:35:7f:90:8a:a3:11:26:ef:73:67:04:dd:01:16:74:
44:ce:91:92:eb:57:1a:ce:76:64:9e:db:31:ca:10:e6:f3:01:
eb:3d:af:59:b8:af:94:b4:46:ee:05:93:7f:f1:67:66:e0:91:
20:1a:ca:68:f8:af:ef:56:83:48:45:28:67:c4:75:c0:ee:bc:
83:1a:11:14:bf:31:19:a7:19:e6:21:06:c9:e1:21:90:ed:ba:
08:41:51:23:2d:63:90:c9:43:aa:ae:01:f7:85:3b:6d:45:86:
7f:20:c0:cc:1a:b9:b4:19:0f:db:69:92:a9:58:59:a4:59:17:
85:31:0d:40:f4:47:9d:e6:b0:a9:4b:80:84:d6:1b:06:d4:85:
a3:cb:49:17:a0:92:e3:17:2a:d0:3a:38:2b:7f:fe:fc:83:29:
28:75:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:01:06 2026 by rpki-client