Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File: _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier: ve2SH5srB66T7cXuzzXOy8VgsfE5RoFHEVFgWpqj2Tk=
Subject key identifier: 59:E3:90:BC:54:B2:7E:1B:07:D6:D6:DF:2B:8C:30:2C:EB:D8:0D:35
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 019FA14E491EDCF4E75DECBCFE77FEE73A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number: 171C
Signing time: Mon 27 Jul 2026 02:01:30 +0000
Manifest this update: Mon 27 Jul 2026 02:01:30 +0000
Manifest next update: Tue 28 Jul 2026 02:01:30 +0000
Files and hashes: 1: _b-rE_2TVoYhUbNxE3eqPIAbO4s.roa (hash: /pEVtx61pqjHCNe27pdlrCZMoRpMRCiAqlKVxrQNLe0=)
2: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: P35XkWXyrfCDUVe1Za1WdXeZtSP4Qx7Kfg6x/RQyXCk=)
3: bbj-gHI_NSxgfeUm9R2oZee2H7A.roa (hash: hYp+ief1ADpooPFUk5v8X2N0IMdf0TC4s8sF6EqLPy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:49:1e:dc:f4:e7:5d:ec:bc:fe:77:fe:e7:3a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Jul 27 02:01:30 2026 GMT
Not After : Jul 28 02:01:30 2026 GMT
Subject: CN=59e390bc54b27e1b07d6d6df2b8c302cebd80d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:18:bb:1b:4c:84:cc:5d:85:ca:73:4d:b4:
d5:fd:c7:34:5d:01:d6:44:9f:7b:c5:0d:ce:11:48:
3c:e3:98:f9:8b:b5:9f:0c:7f:ce:4a:86:69:ac:ad:
9f:4d:e2:5c:a5:cb:bb:44:83:12:bc:2d:d2:20:01:
9a:31:6c:52:d6:c0:bf:e0:3c:04:b8:27:3b:99:5c:
92:a3:dc:f2:27:d9:9a:3c:27:ff:bd:50:49:c6:f1:
48:f5:f8:f4:d3:83:b1:4b:e9:d0:38:1f:2a:bc:f5:
fa:b9:40:be:bd:cd:42:73:be:5c:4d:d1:8f:1a:c5:
d6:e0:7c:2b:e6:a3:18:f2:c5:f4:24:e6:b6:57:d2:
da:4e:66:31:3b:b6:41:8d:a5:f0:02:22:18:02:d4:
81:30:cd:1b:12:d6:f2:a8:e3:b5:88:b9:62:69:38:
a5:48:07:c3:16:b0:1f:5b:fa:f3:03:ff:b7:73:35:
80:9d:7f:18:ad:e9:63:3a:7f:a4:56:33:50:a4:32:
c0:85:9b:89:42:5e:8e:1c:f1:28:43:e2:c4:50:15:
f8:d0:58:b5:d9:f3:ae:c6:ff:2a:4e:6a:b5:fe:24:
b2:ea:d6:72:90:f7:0b:b7:85:f5:a8:a2:ef:c9:75:
46:45:56:45:34:ac:d8:a7:30:71:5d:6b:cc:8c:aa:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E3:90:BC:54:B2:7E:1B:07:D6:D6:DF:2B:8C:30:2C:EB:D8:0D:35
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b0:33:a0:ba:08:71:c9:14:43:b0:c5:36:f3:dd:aa:be:75:
d1:5f:51:31:7d:d0:5d:f6:5b:80:04:ac:20:1a:af:67:ca:73:
21:c0:b8:2f:16:ce:fe:66:db:62:2b:53:7a:b2:b1:54:44:44:
e5:d0:34:61:ad:b1:65:46:b3:fe:7a:11:af:9d:96:74:55:ce:
24:b6:fc:ee:73:40:8f:b9:1b:b3:23:00:ff:2b:74:f7:7e:ac:
7f:2b:e2:0c:a1:fe:2a:12:c3:96:a0:dc:a1:2c:d4:43:d7:cd:
89:39:45:f6:17:99:51:1b:e1:90:40:ad:1e:0f:87:f6:04:dd:
e7:2f:01:68:a3:39:ac:12:14:50:b1:93:33:72:8f:99:8d:a6:
b3:e3:d9:d0:a4:4c:61:6b:da:eb:3d:f2:4d:99:25:a9:13:bc:
a3:11:13:87:ee:57:9b:6b:6b:e9:8a:c6:55:60:3b:1f:10:56:
ef:0f:cf:84:42:c3:f1:78:90:fc:36:9c:08:01:6f:dc:f3:36:
35:b6:fd:4c:b2:dc:56:00:0a:d0:aa:2c:68:a7:17:a9:ea:73:
24:d9:43:ce:e0:fb:80:eb:ad:a9:fd:80:84:81:de:57:bf:e4:
36:72:07:67:34:92:9f:a8:03:10:b1:e7:8e:49:2b:c3:39:a7:
97:1f:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:05:10 2026 by rpki-client