Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: +394V/F2PL5g0IwGbxOSjE+luU+ke5piw+Op3RcZWEg=
Subject key identifier: 52:B8:77:59:AD:23:45:F3:E5:54:31:8B:DA:5D:91:3C:33:EA:56:57
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 01A17E183A0394F356063B2D4617489BDE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 07EE
Signing time: Tue 27 Oct 2026 16:01:19 +0000
Manifest this update: Tue 27 Oct 2026 16:01:19 +0000
Manifest next update: Wed 28 Oct 2026 16:01:19 +0000
Files and hashes: 1: GHSDF2JPEye0O4AWUxBCYSEkaAI.roa (hash: 0lOTIXpj+IiF+Cvw2ZPIma45JyDvj6gDTakt2B0h2bc=)
2: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: HNcp9zG/QdIVDn6G9aAR9AkWYtHu4G9gfVKOLQFaa+g=)
3: zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa (hash: 3m9rp/jqInhSmfaVC+tbC+fcAxs/SBMNeqBaNmCor5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:3a:03:94:f3:56:06:3b:2d:46:17:48:9b:de:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Oct 27 16:01:19 2026 GMT
Not After : Oct 28 16:01:19 2026 GMT
Subject: CN=52b87759ad2345f3e554318bda5d913c33ea5657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:42:e6:d0:e3:3c:1c:cc:6b:c4:ff:17:46:
f6:84:b1:b8:08:06:11:8a:b0:0d:d6:01:6a:56:80:
37:38:0a:b0:d7:e7:14:20:65:b4:cb:d8:e9:3e:e0:
97:63:d0:a3:50:24:5b:0b:28:63:10:43:8e:a0:91:
fa:10:f2:00:9c:fc:39:4b:65:56:48:b3:d2:c7:43:
72:92:ae:73:af:e1:f3:ca:b8:8e:eb:08:86:f6:f1:
24:20:47:fe:cf:68:4d:3d:e5:b4:4e:55:95:bc:58:
d5:6f:3f:fd:de:ae:5e:9b:53:60:45:12:55:e8:33:
eb:5b:8a:0f:30:64:e9:d4:8e:14:ab:8d:e8:40:cf:
67:14:66:82:11:19:4f:17:11:67:13:7d:ef:c8:96:
70:8f:03:1d:60:51:26:ec:52:af:87:2d:35:87:ae:
c9:f5:da:1d:90:a9:d5:71:c6:05:0d:0f:88:b4:3d:
36:03:e1:4d:f6:6b:06:41:26:1a:90:ca:7e:d3:5c:
9b:fe:85:71:3a:8b:a9:c2:0e:24:1e:13:eb:07:71:
26:19:91:d3:3b:59:b1:38:9a:2e:46:15:63:3e:61:
2b:6e:4b:77:a4:a5:fe:a2:ab:44:59:7e:bd:ea:1c:
dc:c8:55:e6:b1:fd:e6:71:e8:46:05:c3:cb:af:f9:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B8:77:59:AD:23:45:F3:E5:54:31:8B:DA:5D:91:3C:33:EA:56:57
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:31:66:7b:23:41:8f:e0:de:a9:43:62:73:4c:ae:b2:f9:e1:
92:ac:c3:a7:f8:9b:0c:be:79:ea:b4:30:c0:34:ab:89:7a:a9:
35:10:0b:ed:67:29:e6:b6:64:fa:9b:56:9b:b2:56:36:0b:29:
bd:48:a0:0a:9e:1e:2a:65:71:01:dd:52:59:5f:73:f6:b0:39:
fc:ea:ae:d7:80:e6:ef:97:08:a3:be:b9:b3:a1:2c:7f:ed:41:
ee:a1:b2:33:9c:2a:8a:2d:a6:20:b7:c3:c3:99:ca:16:4e:ea:
3e:75:71:c5:54:47:34:10:0f:84:11:54:64:72:bc:e6:33:6e:
f1:70:eb:72:be:b8:0c:73:70:64:76:48:d1:f5:02:82:88:65:
e2:c7:de:30:df:ce:56:f7:3a:25:5a:ad:26:26:e9:1c:4b:dc:
f4:2a:ef:54:b1:5e:b7:29:4b:91:2c:01:73:c8:f1:84:82:08:
f5:69:15:1f:e3:2d:e3:0f:78:02:a7:01:8f:a2:ea:06:c1:bc:
5b:d5:fc:56:71:a7:da:4d:26:c1:c5:29:7a:8e:0c:18:d8:57:
4b:f1:19:92:68:85:aa:e7:e5:9a:30:6c:4e:ae:57:a8:82:7d:
eb:74:d4:b8:bb:5e:88:d4:d1:6f:1f:11:b2:a4:11:3e:6f:03:
1c:44:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:35:10 2026 by rpki-client