Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: Z+8YeDRb4Wz5BUF+OZ51u0NlYgsP7JWm8w9xcci1l2w=
Subject key identifier: D9:00:20:F7:8D:62:73:A0:77:FD:5D:EE:1F:2A:23:F2:5E:B6:24:4B
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 019FA0A8DAF603FA9693BBE2F9EA2DD5FEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 23:00:48 +0000
Manifest this update: Sun 26 Jul 2026 23:00:48 +0000
Manifest next update: Mon 27 Jul 2026 23:00:48 +0000
Files and hashes: 1: _gHdc_o1Sg4bPmajOZmaGT6ZXNU.roa (hash: fbP0Eisnj7ta1eL91x/ykjZ4/I+oNZYVlLK/j2viYek=)
2: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: iPS4fj8INaIe7pKr3TvFQa1asw5l8Eaee/m2mFDNlFI=)
3: xfg6ND62VE_NEsRerQpNDEtguWY.roa (hash: jV8up19wMmKrYo3rkVmGEitD0urDFX1Xvcb39PAZzRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:da:f6:03:fa:96:93:bb:e2:f9:ea:2d:d5:fe:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Jul 26 23:00:48 2026 GMT
Not After : Jul 27 23:00:48 2026 GMT
Subject: CN=d90020f78d6273a077fd5dee1f2a23f25eb6244b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:39:41:2a:f5:e9:ba:fc:62:ae:90:36:12:
29:7a:f0:86:ba:b6:f9:8b:5f:94:d4:c6:fe:1e:63:
ac:fd:39:24:e4:ba:47:9c:1a:31:5c:c3:ac:aa:92:
91:ec:f1:eb:11:b2:f4:69:14:68:94:02:a0:b4:16:
46:2d:12:e6:86:55:f8:06:fa:5f:98:e1:58:00:d8:
42:63:44:1f:0f:42:e5:dc:de:61:1f:13:d3:2b:2c:
f7:20:9e:b4:a0:21:7f:fb:f6:c1:a6:64:cd:c8:27:
fc:14:28:e6:3d:a8:30:4d:d4:29:73:d6:31:16:be:
9f:1a:d9:d7:d8:00:ba:1a:c2:3f:85:8d:ba:7c:a5:
6f:d5:ad:ef:ec:35:44:69:5b:4f:7d:18:8c:a7:14:
74:b7:da:20:02:e1:95:47:e3:90:61:c6:be:99:8d:
b4:0c:a3:41:bf:55:f0:b7:ec:e8:e3:37:34:9c:c9:
6e:cc:67:df:d2:82:74:ca:41:a0:53:71:06:26:c4:
0b:8a:f8:c1:ec:cd:2d:1b:33:4a:84:ce:61:e3:f1:
80:9f:b5:57:43:57:36:d5:c0:00:28:4e:94:9b:77:
71:17:48:41:cb:05:6e:11:45:ae:66:05:88:4f:66:
47:3e:cd:80:8d:c9:59:76:02:c8:b1:30:96:e3:4f:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:00:20:F7:8D:62:73:A0:77:FD:5D:EE:1F:2A:23:F2:5E:B6:24:4B
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:88:ef:25:40:49:c5:04:17:de:e9:27:a0:15:1a:cd:58:4a:
02:75:76:00:40:dc:78:2f:26:08:d9:69:c0:2b:74:85:ad:fa:
e0:b4:bb:06:53:4b:2f:72:b8:13:b0:71:f4:59:64:8b:bd:bf:
58:df:28:62:98:60:d8:95:de:e6:1f:4f:4c:45:ca:32:87:e4:
12:05:ea:80:16:df:d1:85:0a:ad:13:86:ac:c0:dd:28:64:ce:
6d:11:8c:4b:51:4c:bf:bd:8d:17:0a:b8:d9:05:cb:38:df:6c:
d3:2c:0e:ef:ef:02:7f:b3:44:1c:44:fd:de:d1:96:0b:ee:70:
29:a0:be:da:f6:95:95:54:6d:29:db:cc:95:85:0c:9e:36:41:
7d:3f:79:b8:37:b3:88:8d:45:7d:da:06:b6:7e:13:7f:6b:13:
68:1e:79:3c:89:5d:6d:8b:60:5b:cb:19:d2:cb:b8:15:09:4a:
ee:0e:12:0f:15:1d:fa:79:58:39:cc:04:5c:2b:dd:f4:b2:e9:
d8:b6:b0:30:b5:8a:19:03:3a:6b:13:59:9f:c0:97:c5:27:bd:
93:07:3a:b2:8b:d0:2b:35:7d:bf:a5:3d:72:09:c0:f9:1c:b4:
f7:5a:a0:ac:c5:d4:2d:54:51:73:ee:9c:2d:c0:97:ec:3c:bc:
6e:74:58:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:38:10 2026 by rpki-client