Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: US5ODCD0JnBSS1fliw4IS3viAdoaNYoAmzz16sEWvdQ=
Subject key identifier: 5B:6B:B1:90:43:C3:C2:6C:67:5F:6F:76:41:9D:E9:59:25:BD:0B:07
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 019FA03A979A6FA88D8761D9426B7A298BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 21:00:22 +0000
Manifest this update: Sun 26 Jul 2026 21:00:22 +0000
Manifest next update: Mon 27 Jul 2026 21:00:22 +0000
Files and hashes: 1: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: Glx8iLjKISndnGQuEHunhmHC8rVR7kbfZHvaB5lNLeA=)
2: NYfYWYZMa_439o1QRYF0WdRM5MM.roa (hash: 8UO+Z6kVQhD/teXdacx0W8x4zMZ5SdEkPaLtrfrmHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:97:9a:6f:a8:8d:87:61:d9:42:6b:7a:29:8b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Jul 26 21:00:22 2026 GMT
Not After : Jul 27 21:00:22 2026 GMT
Subject: CN=5b6bb19043c3c26c675f6f76419de95925bd0b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:17:b0:ec:47:d7:71:8c:a4:b0:f6:3b:0f:
06:d4:67:85:10:44:19:bd:8f:0d:c1:a7:a0:52:5d:
72:58:61:fd:a7:4a:3c:81:53:d0:d5:3a:56:f4:6d:
c3:5e:ae:89:d0:09:d5:7c:d8:90:d8:b0:bf:44:24:
31:47:34:0d:94:95:44:0e:c8:00:21:ee:29:bc:5a:
2d:a1:09:c4:12:50:7e:cb:b6:2f:d0:92:3c:8f:8b:
e3:77:2f:10:05:42:fa:83:b0:5d:bc:78:4a:f5:ab:
80:56:93:8e:29:fe:24:71:37:57:70:fe:c0:27:f2:
de:c1:af:fd:b2:9d:50:63:33:ae:2b:9a:21:89:f1:
09:40:69:e7:43:27:27:e7:43:0c:80:4b:0f:4a:76:
2c:5d:08:e2:e9:22:f4:18:43:b1:3b:7f:e0:12:e7:
34:81:70:b8:53:9f:37:e6:9c:af:bd:66:22:4e:bd:
80:53:24:04:af:7c:ec:2b:ef:12:55:97:34:ab:19:
ab:a6:4c:73:6a:73:c0:b0:9a:29:c8:62:4f:0e:a9:
f8:16:69:06:c3:57:3e:7a:7a:b3:2f:c7:85:61:5a:
56:cf:a2:b2:10:06:f5:51:14:c7:1d:5a:4f:c6:dc:
b5:43:e4:d8:5c:01:3d:58:f0:29:0d:2d:90:4a:35:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6B:B1:90:43:C3:C2:6C:67:5F:6F:76:41:9D:E9:59:25:BD:0B:07
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b0:3e:e1:20:9c:7b:df:6c:90:12:5c:a0:a7:b5:05:34:ce:
19:00:b1:a5:5b:60:73:fd:49:c8:cc:c7:cd:16:c8:fd:26:87:
b5:d9:6e:1a:22:fb:0c:8c:d8:f2:da:7d:16:48:98:69:72:68:
0a:07:ba:28:b7:3e:13:c7:50:5b:c5:2b:1d:b5:f1:5c:de:a7:
d0:76:11:26:e5:71:c7:c0:66:e3:80:67:e7:17:bb:33:7d:83:
ab:de:2f:8b:ee:7c:e0:e5:b4:79:ce:a5:d6:8a:fb:a2:6e:93:
78:4f:d6:2f:08:c5:ff:e0:70:37:61:97:8d:1b:ff:d6:e6:19:
f9:9d:0b:a7:42:37:1d:f3:84:9f:b3:ea:0a:6a:cf:b1:e2:c6:
a9:24:7a:6f:bd:ab:ff:ee:8c:2c:be:2b:83:a0:45:1d:0f:a2:
45:05:48:f5:ad:f5:dc:62:d3:0c:93:c2:df:7e:88:67:e9:3e:
1a:53:da:5c:aa:7b:3d:04:a8:07:1c:56:76:a7:9c:56:1c:49:
6e:ef:a8:e0:97:8a:e3:c3:f6:f3:78:3b:20:07:97:65:bc:b6:
b6:b8:69:69:b0:6c:bf:79:b7:0f:7b:87:f4:78:91:2b:c1:67:
ea:3b:e1:58:c5:c4:48:34:47:06:6a:62:8f:99:f1:30:01:f4:
96:b7:14:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:14 2026 by rpki-client