Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
File: gLWnciaEnxty0GO-Y4mX-wnK21E.mft (raw, json)
Hash identifier: ovah2LNLBESGRjfpw6bDX3KSSB7/NcQA0vAwdodEqq0=
Subject key identifier: 27:44:0D:EE:F9:0F:BD:0F:33:5C:0F:6E:45:B0:B1:78:DE:F3:6E:46
Authority key identifier: 80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
Certificate issuer: /CN=80b5a77226849f1b72d063be638997fb09cadb51
Certificate serial: 019FA3AA1E76C460F9A5ED0B90B3BC9E0F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
Manifest number: DC
Signing time: Mon 27 Jul 2026 13:01:02 +0000
Manifest this update: Mon 27 Jul 2026 13:01:02 +0000
Manifest next update: Tue 28 Jul 2026 13:01:02 +0000
Files and hashes: 1: gLWnciaEnxty0GO-Y4mX-wnK21E.crl (hash: FFaOQG9bl9oUOroiddsRJ7mb7AL/IQsEFijfQM6eiMo=)
2: nTAeOQ1yfLeE7UobuYd95qQsnDc.roa (hash: MGx/T2ybNPO76ocB/JBxy+Dt6X73selrSnb5nBMcig0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:aa:1e:76:c4:60:f9:a5:ed:0b:90:b3:bc:9e:0f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b5a77226849f1b72d063be638997fb09cadb51
Validity
Not Before: Jul 27 13:01:02 2026 GMT
Not After : Jul 28 13:01:02 2026 GMT
Subject: CN=27440deef90fbd0f335c0f6e45b0b178def36e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:d1:0c:5a:5e:59:d9:b2:50:3b:6d:8d:b6:
d4:a6:b4:66:72:b2:e7:a1:19:04:bf:41:73:0a:1f:
28:96:4b:4a:50:58:ff:1b:80:0a:e1:4e:93:0d:2f:
96:da:de:32:69:9f:cf:32:34:63:56:99:a9:4a:c6:
4b:23:5a:05:51:67:95:bd:b6:82:7b:3e:e0:ce:db:
24:3b:ca:98:7b:f6:b6:a9:3d:de:04:fe:db:a3:d2:
46:99:53:75:aa:40:9a:8b:5b:a7:47:92:c1:a8:f8:
b5:73:73:03:e4:c0:21:84:b8:61:17:96:40:64:c3:
fd:50:11:8d:8e:e4:86:d6:37:9c:ec:05:f5:fc:4b:
90:af:60:46:21:96:61:20:48:b2:bb:52:92:c7:00:
14:3d:9b:75:0c:8c:8e:d5:4f:8c:c7:5f:7e:7b:6f:
99:8e:f4:a7:ca:3a:c6:ee:01:07:5f:df:fe:e5:83:
84:88:44:76:44:49:ac:4d:5f:2f:64:48:59:ae:04:
32:1c:d5:94:7d:01:d6:2b:e0:ea:dd:11:38:60:0f:
05:1c:74:f6:d9:6c:9f:90:63:a8:f9:c7:0a:db:5c:
74:b1:a3:76:06:22:96:6a:d9:93:e5:81:8c:39:f9:
93:f4:da:7e:c0:b5:98:cf:9b:7e:f9:9c:92:5f:c6:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:44:0D:EE:F9:0F:BD:0F:33:5C:0F:6E:45:B0:B1:78:DE:F3:6E:46
X509v3 Authority Key Identifier:
keyid:80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:34:a6:ae:00:1a:c1:a6:89:4f:86:d1:fb:e1:7d:05:ee:91:
1b:59:49:49:4d:eb:ee:7e:4f:05:a9:23:07:87:62:74:da:cf:
0d:a9:97:3c:a7:9b:ea:5e:1e:59:2e:7e:c5:c8:c1:d0:c7:82:
04:ee:35:54:6d:87:cd:12:f9:f4:3d:54:b0:55:78:16:42:e9:
df:38:fe:17:d9:ef:de:a3:87:63:97:34:dc:ca:33:48:b6:b3:
4c:08:c2:36:80:3b:98:89:07:a5:f8:df:49:ac:47:14:69:39:
b8:a1:ee:a9:b0:7b:de:a3:b8:bb:d5:c6:fa:2e:a8:dd:b4:ee:
8c:b7:4e:a0:4c:d2:17:dc:b7:71:e1:9a:41:b3:ad:2f:63:fd:
cc:f8:ee:60:c6:8d:94:0c:1c:62:a6:7a:bc:11:58:06:0f:d6:
1f:f1:8e:63:b8:e2:e2:ce:04:7c:f5:ec:88:19:3c:4d:d6:dd:
a4:d4:c9:c1:03:c2:63:e7:6d:49:e8:66:3e:fb:56:f6:36:ae:
ca:f9:24:08:c1:34:51:2e:ed:94:af:a9:76:16:43:95:be:e4:
3a:4d:5b:cf:7b:e7:0d:e4:ae:80:66:a2:53:47:a5:29:62:67:
53:26:ff:35:9b:0d:13:3a:5e:c4:e0:9b:12:2a:71:2e:71:ad:
ac:a9:8b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:39:13 2026 by rpki-client