Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: n3lj76Ojjw/GnBIGgBrXBsGWgMIRMhZERcVPeWhyF3Y=
Subject key identifier: 2D:4D:76:6A:C8:FE:25:FA:20:7A:EE:DD:F4:E7:B1:03:14:6B:04:93
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 019FA304E261314D51E33894DD7F4085E99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 06F8
Signing time: Mon 27 Jul 2026 10:00:33 +0000
Manifest this update: Mon 27 Jul 2026 10:00:33 +0000
Manifest next update: Tue 28 Jul 2026 10:00:33 +0000
Files and hashes: 1: GHSDF2JPEye0O4AWUxBCYSEkaAI.roa (hash: 0lOTIXpj+IiF+Cvw2ZPIma45JyDvj6gDTakt2B0h2bc=)
2: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: u6kGTvbyVoKgcnTRe15nbo3OfihdhiBX3Cnu+sNMGrk=)
3: zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa (hash: 3m9rp/jqInhSmfaVC+tbC+fcAxs/SBMNeqBaNmCor5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:e2:61:31:4d:51:e3:38:94:dd:7f:40:85:e9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Jul 27 10:00:33 2026 GMT
Not After : Jul 28 10:00:33 2026 GMT
Subject: CN=2d4d766ac8fe25fa207aeeddf4e7b103146b0493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:d5:ff:af:67:7b:48:85:f7:67:bc:cd:7e:
c8:ad:29:27:14:78:07:a7:c7:26:c0:d9:13:c9:5a:
38:e2:b0:f5:17:af:8c:0b:aa:e0:8c:0d:1a:cd:b4:
d8:10:d8:87:53:43:9a:7a:57:c8:fe:f4:4e:53:61:
31:44:53:ca:f4:60:4a:f5:35:f7:84:7b:54:41:c1:
c5:e8:fa:f3:83:61:ca:77:4f:28:f1:5d:48:c0:c4:
b9:fa:bc:c0:ab:4c:8e:71:2f:7d:ef:ce:b6:44:37:
3a:3d:4a:31:da:99:c2:35:de:48:67:a9:79:6e:74:
34:1d:d5:e9:04:e4:79:30:26:67:3e:d2:1b:4b:93:
7f:cc:f6:f1:3c:cf:a0:01:c6:52:50:71:70:60:86:
23:5a:4f:fc:0f:7c:b1:40:f1:ce:08:0e:61:65:03:
af:f1:e7:3b:12:f9:b2:fb:9c:ff:1c:9d:7e:27:50:
02:e7:95:df:b8:6e:1a:a1:b1:de:d6:a5:3f:31:d6:
ac:92:4d:68:69:85:39:cc:ac:16:d9:cf:b0:6f:44:
03:77:57:38:a1:be:7e:18:a7:97:04:76:94:82:52:
32:fe:a2:00:02:48:2d:47:60:d8:fa:07:db:47:a7:
fa:6a:50:97:47:b0:51:50:2f:ca:28:97:a6:40:88:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4D:76:6A:C8:FE:25:FA:20:7A:EE:DD:F4:E7:B1:03:14:6B:04:93
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2e:63:66:74:b1:b6:dc:df:a9:5a:2f:bb:ae:e6:38:bd:41:
df:56:72:78:e2:51:80:78:5f:49:c4:8e:d2:6e:9f:23:a5:e6:
d2:c2:fb:db:21:fb:59:79:33:06:cc:29:af:99:9e:8f:ca:d4:
ef:da:c7:a3:86:cc:5c:56:b5:b1:a5:2e:85:5c:ff:f8:7f:85:
c9:1d:7d:22:32:07:13:ef:d3:55:6b:be:31:3f:3f:01:1a:3c:
b3:27:29:3a:bd:2d:9e:97:c5:b0:b7:da:c7:6c:41:de:63:f5:
56:dd:e9:87:94:59:23:ee:d3:33:dc:f8:2e:9a:39:c4:a0:b5:
38:51:4b:4b:67:4d:8d:50:1a:1b:48:18:2e:40:16:8a:d0:d1:
ae:0b:fa:0b:93:91:f2:f2:0f:ed:79:70:3d:15:8a:cb:84:19:
6e:e5:10:62:ad:d4:4b:df:76:c5:ee:ac:8e:95:5b:a3:58:7f:
44:6f:ca:3a:d9:56:fc:95:bb:8c:0d:37:1a:d6:62:64:6e:d9:
40:2d:27:d4:f0:ff:34:d9:c0:08:d2:5c:23:cb:6b:50:07:96:
dd:57:61:74:92:10:98:b3:30:3b:38:da:1a:55:21:f1:36:cb:
cb:74:25:1b:38:75:f6:e5:89:4e:ef:ef:08:2d:c7:66:01:d5:
b3:b3:7b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:17:27 2026 by rpki-client