Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
File: gh8Shdd1qfWJJD6shErcWridl8k.mft (raw, json)
Hash identifier: 6NJsHtR89ss4D9IarkQzc/neJoFJQXYfhyLAnqbiBvA=
Subject key identifier: 57:F1:FD:BC:62:56:F7:86:97:89:EB:54:8F:DC:D3:5C:F4:58:1D:38
Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
Certificate issuer: /CN=821f1285d775a9f589243eac844adc5ab89d97c9
Certificate serial: 019FA0719C193E4E97AF3DAFEE2B2FC9CEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
Manifest number: 0E73
Signing time: Sun 26 Jul 2026 22:00:27 +0000
Manifest this update: Sun 26 Jul 2026 22:00:27 +0000
Manifest next update: Mon 27 Jul 2026 22:00:27 +0000
Files and hashes: 1: Ken1-UyKUV7K-ivTPRx21HrB1go.roa (hash: SzlYiDowE9Ts27wto98BsM6+plGlLtF6xf2nTMUOAKI=)
2: dGmTMuCLcokZ_dpzsnFglotPhbE.roa (hash: xS9B/n1G06zo3aHFhFfNBhI/mXvOeeGrRH7j7PtD+Q0=)
3: gh8Shdd1qfWJJD6shErcWridl8k.crl (hash: Vce0HulNrkpx8gijPgMH3jEFSDLG7BUekGxFw18CZM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:9c:19:3e:4e:97:af:3d:af:ee:2b:2f:c9:ce:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9
Validity
Not Before: Jul 26 22:00:27 2026 GMT
Not After : Jul 27 22:00:27 2026 GMT
Subject: CN=57f1fdbc6256f7869789eb548fdcd35cf4581d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:5e:b0:98:78:da:d1:c6:76:b4:8e:ca:35:
a2:4b:19:32:e5:99:b1:e2:11:b9:4c:dc:22:47:40:
cb:cc:6d:61:f8:57:e2:c0:fd:01:7d:9f:b1:48:61:
d4:c6:1c:62:d3:80:1f:39:0b:4c:3e:70:a3:96:01:
ff:a8:d9:bc:b6:dd:9f:2d:96:ea:e8:fd:0b:9f:3e:
c8:3d:8c:43:14:bf:28:19:0d:36:fc:e3:c4:75:96:
8e:b5:35:2d:f2:0e:bc:5e:fb:b2:92:6e:56:44:76:
9c:88:82:63:c7:2c:19:6e:e7:b2:a0:0e:72:74:4f:
98:37:15:ae:d3:8b:17:37:39:ba:b1:2a:c6:85:45:
a4:4c:fc:0c:4d:b9:4d:ee:ba:69:96:90:01:2d:37:
3a:75:54:2d:94:df:57:98:46:04:fd:49:d2:e7:ef:
63:fd:f7:1f:54:a7:59:c5:d8:d1:12:30:bc:91:d3:
c4:ba:39:b5:7a:5e:4a:e4:6a:0f:b5:7f:f5:a2:41:
d1:4b:54:55:ea:23:72:bf:12:ac:ac:3a:c1:80:9c:
2f:63:26:35:a2:60:de:58:c1:dc:de:d3:c9:f2:17:
ff:20:23:80:66:51:cc:95:08:eb:a0:d9:61:97:75:
e8:36:21:a8:ef:39:4c:d3:97:e8:61:c7:9a:c6:46:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F1:FD:BC:62:56:F7:86:97:89:EB:54:8F:DC:D3:5C:F4:58:1D:38
X509v3 Authority Key Identifier:
keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:13:99:ab:2f:4b:b2:99:52:40:d3:ea:5e:77:9c:4b:66:a2:
25:33:e7:77:ae:8b:82:29:1d:60:cb:83:c8:0e:e2:57:5e:2e:
df:0a:a6:dd:4b:2f:86:76:54:ba:c8:d0:6c:97:03:bb:6e:ab:
93:26:22:95:cc:b5:0f:70:8a:61:7c:11:c1:47:92:2f:5d:64:
19:e9:62:fe:e1:49:e6:33:37:54:6e:f4:6e:5e:60:28:db:47:
74:ac:e1:87:28:f2:c1:44:f6:01:2e:ce:ca:92:ec:e5:69:5a:
a1:76:26:dd:2b:00:47:fb:d6:bf:98:6b:88:3f:e9:7b:f0:db:
d0:16:47:53:cf:ef:41:d6:87:55:65:1a:16:a5:0b:4a:15:57:
b4:df:00:45:e8:ab:56:fa:46:4b:f9:0f:b6:c7:94:28:ad:ec:
25:83:57:da:2d:7d:57:c3:3e:10:b4:09:35:f0:df:43:84:fa:
16:bb:ac:26:e1:f5:86:e7:f7:cd:d4:39:3f:22:17:93:ac:47:
da:92:e9:7f:e7:31:c2:74:24:21:6e:1a:ff:94:bd:43:27:5b:
01:cb:3a:d1:5f:02:14:62:4e:f0:b6:a0:7c:fc:52:fe:97:1e:
66:93:6f:40:e8:a3:69:75:e5:7e:9b:ca:f3:36:10:ec:71:e0:
8b:c9:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:54 2026 by rpki-client