Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
File: GfRzuqwkYD6teVw6ot6t-G01H8I.mft (raw, json)
Hash identifier: 0e4I5fg59JW3V+J3OkmKV7tbw5o81RNKR7pyS3DEEL4=
Subject key identifier: 85:5A:CD:0F:06:BD:33:3C:D2:98:1D:30:0E:43:B2:8B:78:59:1A:0D
Authority key identifier: 19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
Certificate issuer: /CN=19f473baac24603ead795c3aa2deadf86d351fc2
Certificate serial: 019F8644C8347F818F5FDF25F5DC15CD6087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
Manifest number: 17
Signing time: Tue 21 Jul 2026 20:01:22 +0000
Manifest this update: Tue 21 Jul 2026 20:01:22 +0000
Manifest next update: Wed 22 Jul 2026 20:01:22 +0000
Files and hashes: 1: GfRzuqwkYD6teVw6ot6t-G01H8I.crl (hash: iqiYNkW/gtV5lJnv2ACew+DNh4VCtLjKjEiaSz2gTxQ=)
2: gNE4IPEZB9u0WmCsF4Pfsq8nHMA.roa (hash: xyIv1xmiMjTFOEwHYgnbJZRjv1TpjuI5f7fPV5Q1SEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:c8:34:7f:81:8f:5f:df:25:f5:dc:15:cd:60:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f473baac24603ead795c3aa2deadf86d351fc2
Validity
Not Before: Jul 21 20:01:22 2026 GMT
Not After : Jul 22 20:01:22 2026 GMT
Subject: CN=855acd0f06bd333cd2981d300e43b28b78591a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:0e:37:33:15:5a:34:68:1c:6e:86:5e:92:
d7:2f:07:6e:7f:98:f1:1e:69:25:75:0b:07:d0:c4:
3b:27:12:18:da:72:4c:c3:58:3c:bf:b5:8b:b0:0f:
6e:d8:3d:8d:e8:40:46:1f:c1:a1:7c:0a:8d:cb:89:
53:45:ec:a9:cf:8d:ca:d2:ff:70:d9:ee:e8:86:c2:
9e:91:69:5c:3d:b4:a7:ff:f0:13:d7:ac:51:e8:51:
2c:97:d3:6e:09:9f:7c:b1:ac:b1:d8:1a:12:cd:38:
12:77:f9:05:14:dd:88:16:5f:77:ed:f3:f4:f1:dd:
e4:9e:57:58:84:de:54:87:3c:cb:8f:92:1a:97:98:
48:14:02:3e:58:e0:47:af:4e:6a:b9:fd:37:07:50:
f8:9d:22:de:85:27:bb:03:83:31:37:42:f2:34:88:
5b:21:dd:e7:60:09:3a:5c:51:28:66:9d:dc:9d:cd:
83:19:30:c4:cc:cc:f3:77:85:dc:49:c1:a8:f1:63:
53:e4:65:78:9e:89:71:d0:d8:e6:bb:bf:2d:f0:f4:
47:6e:fa:b2:8c:70:fa:95:6b:d5:30:e4:5d:6d:4f:
18:1b:e6:f5:01:30:57:c5:8b:c4:ae:5d:25:3e:77:
31:69:ed:bd:7c:f4:82:b1:93:5c:e6:e6:28:ad:63:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5A:CD:0F:06:BD:33:3C:D2:98:1D:30:0E:43:B2:8B:78:59:1A:0D
X509v3 Authority Key Identifier:
keyid:19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a4:a5:f5:90:7d:d3:c5:1d:1c:02:79:51:14:d9:26:76:01:
dc:00:68:55:62:e8:04:28:6b:b5:a4:95:94:48:1d:80:06:4d:
3e:03:43:ce:c3:d7:ec:23:ce:32:a1:c6:11:d3:c3:2b:2f:a3:
55:08:ff:83:cb:97:26:69:da:36:88:30:fb:dd:10:da:9f:b3:
7b:3d:01:06:f0:76:34:99:36:ba:0a:4b:0a:0e:1d:a7:82:4d:
d3:2b:f2:da:e5:e5:25:66:9c:1e:03:b3:9a:7e:51:51:9b:a8:
20:42:24:27:32:ec:cc:41:b6:d2:46:0f:a0:04:c9:83:a0:8c:
d2:84:f9:7a:c7:43:85:59:f6:ab:c5:bf:32:4e:6d:b1:cb:4d:
2a:14:9a:af:c9:c3:b4:73:95:f4:2f:27:96:5b:87:33:43:3a:
1e:b9:43:5e:cf:83:94:cd:f8:bc:58:ff:bc:88:70:ab:60:61:
c4:89:69:3e:bb:cb:4f:47:a9:2a:91:04:40:b7:d3:a1:c0:ca:
76:22:9d:61:24:b9:53:41:17:f0:90:19:1e:d5:4e:9b:db:6a:
14:d1:4c:a9:05:24:54:34:08:83:a2:23:cc:40:a2:8b:a4:97:
9a:76:12:90:31:1f:26:1c:0a:47:45:64:95:b1:e6:12:6a:dc:
86:40:d8:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GRMg0f4GPX98l9dwVzWCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjQ3M2JhYWMyNDYwM2VhZDc5NWMzYWEyZGVhZGY4NmQz
NTFmYzIwHhcNMjYwNzIxMjAwMTIyWhcNMjYwNzIyMjAwMTIyWjAzMTEwLwYDVQQD
Eyg4NTVhY2QwZjA2YmQzMzNjZDI5ODFkMzAwZTQzYjI4Yjc4NTkxYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9IONzMVWjRoHG6GXpLXLwduf5jx
HmkldQsH0MQ7JxIY2nJMw1g8v7WLsA9u2D2N6EBGH8GhfAqNy4lTReypz43K0v9w
2e7ohsKekWlcPbSn//AT16xR6FEsl9NuCZ98sayx2BoSzTgSd/kFFN2IFl937fP0
8d3knldYhN5UhzzLj5Ial5hIFAI+WOBHr05quf03B1D4nSLehSe7A4MxN0LyNIhb
Id3nYAk6XFEoZp3cnc2DGTDEzMzzd4XcScGo8WNT5GV4nolx0Njmu78t8PRHbvqy
jHD6lWvVMORdbU8YG+b1ATBXxYvErl0lPncxae29fPSCsZNc5uYorWPyowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVazQ8GvTM80pgdMA5Dsot4WRoNMB8GA1UdIwQY
MBaAFBn0c7qsJGA+rXlcOqLerfhtNR/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZSenVxd2tZRDZ0ZVZ3Nm90NnQtRzAxSDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jNGViYjItNzRmYi00OTdjLTk3MDct
NjBmYThlMGFmMjA0LzEvR2ZSenVxd2tZRDZ0ZVZ3Nm90NnQtRzAxSDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jNGViYjItNzRmYi00OTdjLTk3MDctNjBmYThlMGFmMjA0
LzEvR2ZSenVxd2tZRDZ0ZVZ3Nm90NnQtRzAxSDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKSl9ZB9
08UdHAJ5URTZJnYB3ABoVWLoBChrtaSVlEgdgAZNPgNDzsPX7CPOMqHGEdPDKy+j
VQj/g8uXJmnaNogw+90Q2p+zez0BBvB2NJk2ugpLCg4dp4JN0yvy2uXlJWacHgOz
mn5RUZuoIEIkJzLszEG20kYPoATJg6CM0oT5esdDhVn2q8W/Mk5tsctNKhSar8nD
tHOV9C8nlluHM0M6HrlDXs+DlM34vFj/vIhwq2BhxIlpPrvLT0epKpEEQLfTocDK
diKdYSS5U0EX8JAZHtVOm9tqFNFMqQUkVDQIg6IjzECii6SXmnYSkDEfJhwKR0Vk
lbHmEmrchkDYHg==
-----END CERTIFICATE-----
Generated at Wed Jul 22 03:30:51 2026 by rpki-client