Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: quR9FTHpr0uEG6vEqoKtrAzWwVlsMa3ZKp0Bd80YlPc=
Subject key identifier: 55:70:88:AB:C8:13:38:72:0D:84:B9:E2:51:F2:17:A8:F2:80:10:A7
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 019FA296D623574BF32C592CA97A618F6085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 08:00:21 +0000
Manifest this update: Mon 27 Jul 2026 08:00:21 +0000
Manifest next update: Tue 28 Jul 2026 08:00:21 +0000
Files and hashes: 1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: X7QTkAQXYw8lgcfU5xypANWU3ofPFr52lLBKVDZS53A=)
3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:d6:23:57:4b:f3:2c:59:2c:a9:7a:61:8f:60:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Jul 27 08:00:21 2026 GMT
Not After : Jul 28 08:00:21 2026 GMT
Subject: CN=557088abc81338720d84b9e251f217a8f28010a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:64:62:87:39:74:7c:e0:e1:65:62:9e:34:
b8:e4:8f:65:04:f5:5e:5e:70:e7:e1:04:43:4d:a1:
5f:c9:c9:69:c8:50:26:12:6e:44:a3:a5:a6:c2:99:
6e:d4:d7:f9:eb:59:5d:92:e1:f0:49:46:9a:22:5c:
69:8b:f6:92:e2:6f:0c:6f:be:a1:80:72:f6:de:77:
7d:3e:fd:63:a3:64:76:15:11:88:d4:53:6f:24:29:
b7:c4:e0:9e:32:ac:38:45:20:81:26:eb:7e:c7:63:
bf:9c:e3:42:ce:fc:ad:42:f3:c5:b7:c0:a1:2d:da:
44:3e:9a:33:b8:f9:c1:09:a9:cb:97:c5:da:53:eb:
2b:d4:13:31:6d:a3:f2:d8:7e:58:7b:03:ae:c6:dd:
fd:f5:20:63:7b:b8:8b:38:66:20:4b:86:d8:da:47:
04:de:ec:62:26:97:b3:ed:1c:ab:88:66:d1:7d:39:
f3:a0:24:8a:45:46:a2:d2:93:9f:9f:1b:52:7a:48:
a6:5e:e7:49:5d:fe:d8:9e:6d:8b:da:cb:43:1b:e1:
de:f2:53:19:27:a5:68:e6:ee:07:a0:92:04:a5:a6:
44:8c:61:4b:73:30:37:57:c7:a2:d4:e6:bd:5f:62:
78:fc:ae:ea:59:c4:3c:24:e8:a8:b7:18:92:2f:c6:
62:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:70:88:AB:C8:13:38:72:0D:84:B9:E2:51:F2:17:A8:F2:80:10:A7
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f8:d0:09:35:93:a4:68:1c:ae:eb:86:80:06:e7:3b:e2:5d:
02:af:75:21:57:24:4f:94:dd:5f:64:e4:db:29:08:e3:a2:d9:
87:7e:7e:f0:1e:b7:57:00:cb:7a:5c:81:4c:81:03:a5:05:af:
55:a2:72:88:db:67:5f:a9:57:cf:e4:ea:f4:a3:53:a0:34:a7:
1d:93:a8:5c:c4:c8:94:ad:b2:d4:f1:02:29:57:37:d9:37:59:
d2:00:1a:2e:3d:88:73:d5:76:0a:d9:4b:c0:25:e2:58:14:0f:
31:30:71:53:30:a0:5c:c9:25:f2:1f:ea:88:8b:bf:f7:4e:01:
4c:69:2c:8d:32:f2:fd:dc:81:dd:d3:30:5b:63:21:41:66:e2:
17:a2:af:ee:85:b1:05:32:d7:12:c0:d5:f3:5f:a3:fa:82:f0:
c7:32:3f:67:6e:3f:59:54:af:f7:a7:04:ec:cb:dd:9a:92:bc:
dd:2f:fa:99:9e:1c:90:ce:69:5a:4d:d3:f2:39:db:44:ae:b7:
09:00:55:6e:a8:75:0e:af:de:b8:17:c7:c2:96:f5:83:60:5a:
bc:18:93:a0:87:3b:dd:f0:e6:78:f9:42:72:15:c1:4b:b0:9b:
9e:14:13:63:cd:66:77:e7:95:4c:e6:91:09:8d:8c:11:d0:f3:
19:4e:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:01:10 2026 by rpki-client