Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: ZL9XiLTDNICaAfqa9xTrOxATZfhtPebPO70hS3EHw44=
Subject key identifier: 32:A3:6D:CD:02:05:39:6C:5F:E3:42:C2:19:3E:B1:8B:65:89:20:66
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 019F1A5654B324B2B2A7B46F334662F12840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 21:01:33 +0000
Manifest this update: Tue 30 Jun 2026 21:01:33 +0000
Manifest next update: Wed 01 Jul 2026 21:01:33 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: fITdH+Sa+s8xDv8f+IHiuU8XjyefVGvOi03kmQ55JlM=)
2: _LIMNGBB_bM1l_RNh7Jn1ke8Z1Q.roa (hash: Y1Vdc4Bk2253+dyiXjTYX2rbKWMSURyUVb6exyc6X4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:56:54:b3:24:b2:b2:a7:b4:6f:33:46:62:f1:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Jun 30 21:01:33 2026 GMT
Not After : Jul 1 21:01:33 2026 GMT
Subject: CN=32a36dcd0205396c5fe342c2193eb18b65892066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:83:2c:55:75:c0:73:8c:63:1f:6f:04:cf:
fd:d1:e3:0b:f5:3c:72:03:34:a3:2c:6f:57:ce:b9:
35:fb:82:41:17:94:a7:4e:cb:99:f8:96:99:b2:75:
75:7c:3c:a7:c2:5b:a9:c1:f7:51:3f:17:44:9d:53:
91:b5:33:5d:5e:ff:08:d8:ca:db:12:da:bd:7e:8f:
ea:ac:34:8b:70:de:c8:6c:41:16:f4:42:ee:06:9f:
5c:b3:26:2e:75:bc:ef:ad:5f:e6:9b:62:4a:1c:5b:
d9:e9:7f:5d:a7:25:c2:13:e8:0e:29:01:cf:c3:72:
98:fe:5e:30:7a:3a:b7:c8:d7:82:d2:9f:c6:01:0d:
19:4b:f1:e5:23:5c:00:ab:d9:a0:04:1a:55:28:8b:
93:a1:20:cb:78:c3:64:9d:26:31:d4:28:be:3c:99:
37:68:e6:8e:97:23:5c:8f:5c:3e:4e:0f:48:f4:31:
5f:a5:6c:13:e9:da:4f:21:88:9b:c5:63:a6:de:4d:
c8:62:31:5b:28:97:1f:a8:52:7a:57:51:63:99:65:
a5:3a:cf:48:78:33:e4:23:3e:c8:f4:57:60:c3:a8:
f3:8d:33:81:d6:ec:28:63:28:f2:d3:6c:b4:b5:fd:
da:39:cf:35:5d:bf:b3:53:14:35:59:8e:05:82:07:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A3:6D:CD:02:05:39:6C:5F:E3:42:C2:19:3E:B1:8B:65:89:20:66
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:92:f6:d9:2f:99:df:c3:a2:da:3d:d7:a4:cd:a8:56:5a:28:
44:dc:78:d7:47:e0:46:ae:d2:5d:8e:62:05:49:d0:cf:39:44:
aa:1f:49:cf:bb:5a:18:cd:06:4b:18:38:d8:29:5f:57:b4:c0:
55:9b:55:91:2f:e4:aa:18:0a:e4:77:d9:1b:8a:e6:96:c6:a6:
bc:45:b8:d2:fb:40:11:c1:83:80:f1:4f:56:a5:91:33:0a:73:
0b:a1:b0:25:fd:10:0d:d8:e9:89:9e:3a:f7:af:85:bf:d1:b7:
bf:d4:39:87:9d:73:a8:11:d0:2b:a1:5b:9c:aa:ef:59:85:7f:
36:d3:e2:79:75:d3:ac:58:3c:9b:e3:c9:c1:51:f7:07:03:2e:
6f:e6:6e:34:f7:9e:2f:b6:e0:a2:d1:79:eb:6b:2c:7f:de:31:
45:36:c6:69:e6:c4:fa:7a:76:84:c6:e2:01:50:4a:e8:0a:f4:
b3:ae:08:96:0b:b7:51:94:68:58:95:55:29:04:e6:30:b0:cb:
82:8e:2b:91:34:d6:c0:c2:8a:fc:0a:54:1a:4c:bb:5a:e7:41:
ed:9f:48:8b:94:b1:c7:58:62:33:d5:d4:68:98:79:c3:f7:b0:
dc:39:7f:c0:77:e4:d7:11:e4:5e:76:55:ef:41:73:2a:f3:7f:
10:86:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:39:54 2026 by rpki-client