Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: 8Gn0BdG0wZXMpEj8hsDXAr593YwiYAA7nu5f+grL+ZA=
Subject key identifier: 95:21:35:79:C1:36:E1:0D:1D:A1:FA:4A:49:34:F0:47:AF:C4:34:96
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 019FA2CE436076D84DE78C5CCB9A73B549BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0BF3
Signing time: Mon 27 Jul 2026 09:00:54 +0000
Manifest this update: Mon 27 Jul 2026 09:00:54 +0000
Manifest next update: Tue 28 Jul 2026 09:00:54 +0000
Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=)
2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: r0MIK8lBa+lUapVmt959zp6D9zsqHYONJbzbjfalfVg=)
3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:43:60:76:d8:4d:e7:8c:5c:cb:9a:73:b5:49:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Jul 27 09:00:54 2026 GMT
Not After : Jul 28 09:00:54 2026 GMT
Subject: CN=95213579c136e10d1da1fa4a4934f047afc43496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bb:19:c6:2e:f5:7a:8e:31:b2:25:8b:64:87:
7d:d6:ba:97:07:38:24:ca:cc:54:cd:15:d5:78:53:
15:df:2f:b6:21:15:ac:45:88:26:cc:f3:4b:34:77:
78:bb:81:4b:50:48:c8:31:03:37:bb:0a:57:b1:a1:
30:43:a5:78:96:7d:c2:41:6d:18:74:ca:90:41:2a:
d2:0b:f1:5f:ab:18:91:9b:25:5a:b8:16:f9:88:1d:
a1:2d:45:56:20:30:8c:2b:ba:c8:4c:a7:20:48:1c:
ee:df:d6:75:dc:d6:0b:16:aa:64:4a:01:aa:08:0e:
6c:08:fe:78:0d:c8:89:17:0b:7e:36:f2:46:5e:d4:
5e:60:25:c9:0a:56:78:51:18:7b:c5:fd:7e:37:52:
7c:06:72:bb:3c:37:6c:34:fd:17:06:90:3a:96:5c:
28:28:c1:b3:dd:96:02:d6:5a:b8:f9:be:92:5a:5d:
2c:a2:31:ec:64:03:d1:54:92:d4:24:32:99:4f:d5:
b0:5d:b0:29:0c:56:43:41:de:40:a0:5f:1a:e0:d4:
c3:4a:1b:79:b8:db:d5:f9:bb:e6:6f:e8:91:e1:0a:
c5:b1:22:33:83:82:50:f5:0b:c4:8b:32:9b:7a:f4:
e8:3d:d5:2a:5c:fe:d8:fb:4c:83:8f:0e:da:3c:48:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:21:35:79:C1:36:E1:0D:1D:A1:FA:4A:49:34:F0:47:AF:C4:34:96
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1b:a3:4f:3e:8c:47:0c:aa:38:83:d8:46:74:29:a7:3f:d2:
48:81:2e:c5:9d:d1:9e:0b:b6:dc:32:0f:12:bd:37:48:e1:8e:
d1:49:db:67:14:10:86:b7:89:89:e7:c6:95:94:82:bd:7c:ff:
7c:d2:6a:32:78:83:97:86:ef:7b:cb:89:6d:a8:cb:c4:0a:38:
bf:d9:1c:98:b8:ef:c9:61:69:59:87:34:25:1f:37:a7:85:d0:
33:18:ad:ef:ac:2d:2b:ce:05:23:91:25:e4:51:ab:b5:a5:e6:
c0:fb:7f:b1:87:3e:7d:8b:6c:f1:4f:95:41:95:35:ca:c1:28:
17:bb:de:49:5d:0b:42:07:9b:56:1b:f7:ce:58:94:8f:d4:ae:
28:68:6e:99:a7:7e:2f:01:a6:80:91:fe:10:b3:5c:92:0a:d8:
f8:16:77:41:71:bb:65:b0:cf:77:3d:b6:5e:1a:75:c0:93:9e:
36:84:01:c6:c5:f7:c3:df:7c:12:5a:b9:6c:a4:04:31:55:f9:
0c:cc:d5:5b:23:55:60:53:82:d1:c8:04:08:14:8b:2b:2d:b5:
59:cc:91:f2:85:f4:ed:58:4c:21:76:ab:ae:32:a5:fc:eb:54:
5d:65:1d:4c:ac:3c:f7:20:4e:81:4f:8c:81:ed:78:0b:b3:16:
ef:eb:25:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:07:46 2026 by rpki-client