Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File: GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier: 4yHIkkdu6k6irj3qVFUtzb6335Mpa1WPC9giuQ7M4E8=
Subject key identifier: E8:5E:08:E2:A2:57:40:E1:BF:9B:A6:D5:C6:05:03:32:2A:04:46:AA
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial: 019F85682A90BD032C697ED564F1A14A5206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number: 19C1
Signing time: Tue 21 Jul 2026 16:00:23 +0000
Manifest this update: Tue 21 Jul 2026 16:00:23 +0000
Manifest next update: Wed 22 Jul 2026 16:00:23 +0000
Files and hashes: 1: 9PJJMzY2oUycU8l8cSSelJBMcWc.roa (hash: oL+z5SaUyU8viR3KBSssNRDGEAldy3Dx3YEcED4SCvw=)
2: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: obRyYxOy2lFCBg0E8ure4+dbWxEAe1htKYCEV52N4JQ=)
3: sPW3SqhXQFkvyEdUczVqCrMoZZM.roa (hash: PP/JgUlM59r8wR9R5R4QZCwoOfZzBFE/FyC4nN3GGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:2a:90:bd:03:2c:69:7e:d5:64:f1:a1:4a:52:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Validity
Not Before: Jul 21 16:00:23 2026 GMT
Not After : Jul 22 16:00:23 2026 GMT
Subject: CN=e85e08e2a25740e1bf9ba6d5c60503322a0446aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:08:33:df:b5:09:6e:05:1f:04:54:60:c7:
2e:6b:68:46:67:72:d0:7c:60:0e:6d:91:a0:e8:c8:
70:14:32:83:21:ee:79:6e:47:cd:7b:16:f3:91:7f:
73:8d:0f:9f:f9:82:3f:65:aa:7f:94:85:9d:57:74:
4d:60:14:06:35:3b:3e:63:fc:72:33:90:c7:dc:85:
f4:ce:30:fa:e2:d4:1d:c0:f9:bc:59:74:b6:5a:d9:
cc:09:07:1b:d3:f6:f6:fd:a2:19:1f:0b:49:f0:37:
1b:aa:84:2c:70:19:b2:ac:93:d7:ce:85:bb:ec:6f:
79:2c:8d:d0:a6:44:5c:4d:33:fc:7f:3f:14:b0:f6:
fb:14:4f:08:81:4a:f3:7c:4c:e7:dd:e7:77:d9:3f:
59:1f:99:e3:ed:37:63:48:b6:4f:32:f9:bd:77:62:
1b:0e:d2:d9:ed:80:6a:e0:f5:b7:4c:00:46:88:ce:
10:ab:da:df:7d:c8:6f:81:fc:fa:13:77:40:6a:1c:
92:f0:d8:9d:03:b9:95:e7:e5:ca:62:d0:ae:01:ac:
02:67:48:ed:ac:c1:7a:ef:2e:f6:82:e9:58:00:c8:
9b:5c:97:fb:5d:86:c5:67:c5:6f:71:71:b4:d7:a2:
d6:7e:04:9d:96:04:c9:49:a0:1a:f0:70:80:69:44:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5E:08:E2:A2:57:40:E1:BF:9B:A6:D5:C6:05:03:32:2A:04:46:AA
X509v3 Authority Key Identifier:
keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:69:c9:9e:37:f1:a3:18:b5:de:56:73:ff:72:f3:49:cf:61:
0a:d9:50:52:c1:55:35:da:54:6d:d1:8b:db:0b:a7:d8:e5:bc:
44:1c:02:a8:c1:be:88:c4:9a:e7:e4:81:85:ae:7f:92:8e:d5:
58:c4:68:19:50:c9:84:87:f1:5d:84:27:5f:10:31:35:ad:ec:
bb:ca:39:ed:52:4c:05:f5:83:3e:9d:e6:24:d9:0e:df:48:a4:
78:70:b2:c8:01:fe:ff:d2:70:21:29:87:4f:6e:c7:9c:c6:29:
f1:be:08:a1:08:e6:1e:35:6a:5b:76:14:17:14:12:58:1b:d4:
17:fc:55:af:fb:dc:6a:8b:98:23:45:c9:f4:8c:fd:30:a0:8a:
24:a8:ee:f8:bf:4e:aa:18:b9:b4:80:16:e7:67:d4:ce:93:9d:
ff:16:a2:9a:39:f9:8c:8f:18:5c:ce:99:24:1a:d1:9b:71:35:
67:93:55:de:b9:2a:c8:fd:c9:22:b8:1b:a6:cb:1f:5a:f8:e4:
81:ea:ef:75:96:8d:c1:4b:94:ce:9e:67:eb:3e:e6:41:38:e6:
f1:a2:c8:7e:ff:be:db:f7:e2:4e:eb:6b:08:37:09:c8:56:e9:
06:ea:77:85:c8:01:1f:1a:ec:1d:f4:22:be:4d:d7:03:7b:7d:
33:e5:a7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:40:42 2026 by rpki-client