Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
File: gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json)
Hash identifier: oKPM/4RiFFNUEhxH9vzka74uyVB6by/VnJTkJRo1xaU=
Subject key identifier: 52:CB:14:5E:38:77:1F:0D:91:69:38:7D:9F:01:B2:A3:36:53:F8:C7
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 019FD1285388367DC3C105A8BA006E65A224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
Manifest number: 19E8
Signing time: Wed 05 Aug 2026 09:01:48 +0000
Manifest this update: Wed 05 Aug 2026 09:01:48 +0000
Manifest next update: Thu 06 Aug 2026 09:01:48 +0000
Files and hashes: 1: bCfnN8Cs-rhA4Q1_kWGUzS2fAKc.roa (hash: KNO75JkgNbMb91A1hmTO0xTL3a65pxvLADRxVDguCYw=)
2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: O/K4D1lPTm1oTSjPPMdSqqrP8k5YtCqT5p8NkVvYKR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:28:53:88:36:7d:c3:c1:05:a8:ba:00:6e:65:a2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Aug 5 09:01:48 2026 GMT
Not After : Aug 6 09:01:48 2026 GMT
Subject: CN=52cb145e38771f0d9169387d9f01b2a33653f8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:03:94:41:75:40:ef:7c:9e:39:ec:a0:47:
db:2c:f5:de:9f:94:94:1c:aa:cd:59:f5:92:1e:81:
4e:78:1d:db:59:d5:34:04:f5:ff:36:19:c4:56:88:
28:59:9e:18:16:8f:27:87:16:aa:5e:7f:4c:1f:63:
c0:0f:eb:db:1c:9a:4d:2f:2e:79:ff:fa:c7:f8:55:
3f:53:14:7d:40:37:0c:77:45:ed:92:b0:ef:66:10:
e4:da:fe:40:82:6b:a3:6f:c7:64:5d:10:d5:3c:73:
5e:b5:9c:6b:c6:a5:04:55:c8:6c:40:9d:66:9f:dd:
b5:60:71:45:a9:a1:70:23:29:1d:b2:8f:e4:63:5c:
19:11:41:17:3f:d5:b3:ad:fe:a1:22:1c:32:c4:05:
1e:e9:e7:dc:b2:47:2b:75:de:9e:a1:4d:da:4e:6e:
a8:1c:b4:8b:cf:c0:16:d2:c6:95:69:c3:17:26:30:
0c:bd:c6:1e:bb:83:e9:9a:93:e5:e9:30:3e:ec:dd:
4d:01:57:cf:eb:3f:54:cb:f4:bf:b5:d5:61:8e:49:
da:7e:bb:a5:f1:a0:75:05:d3:94:26:aa:e3:a0:10:
a2:13:45:89:85:35:79:87:6e:f5:82:ca:69:61:f6:
c2:fd:5d:48:df:6b:e6:73:c4:29:4a:7d:e0:70:ba:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CB:14:5E:38:77:1F:0D:91:69:38:7D:9F:01:B2:A3:36:53:F8:C7
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e7:c6:e1:3f:06:b3:5e:be:28:cc:dd:18:e1:bb:5a:50:00:
fe:28:31:11:30:c7:29:83:9f:04:72:18:f6:bd:8b:b1:4e:1d:
d0:f7:1d:56:b5:a1:5b:3d:1e:62:d3:ad:c5:5b:07:f1:14:27:
a0:2b:67:3f:6a:64:ac:e1:25:65:4e:62:90:ea:90:b5:c4:0b:
29:75:53:c9:7b:91:b9:9c:f6:2d:4d:55:b3:eb:fe:7e:f9:f1:
e3:5e:c6:a9:9c:68:76:fc:81:9d:f3:70:fe:64:48:34:b8:1a:
72:ab:33:1e:06:60:7b:f8:c9:a9:1a:1d:df:ad:96:59:6b:16:
8c:f6:b7:e0:66:80:a2:0b:f9:17:42:34:61:73:ee:15:e5:c2:
2c:27:78:2f:1c:e0:5a:86:bf:1c:f9:1d:8e:f4:8c:13:15:f4:
c3:c4:0c:7a:3a:a7:b0:18:d5:88:41:79:cb:83:2e:ba:d1:a7:
5c:48:21:1f:54:7c:4b:6f:2c:5a:a0:bd:47:b4:e9:49:5c:42:
ed:4f:fe:13:53:da:22:8d:ee:dd:83:d8:aa:d0:e7:02:99:14:
4f:95:96:38:c6:a8:41:7c:da:4f:b0:65:a7:24:da:f7:10:36:
d6:71:41:79:9e:ab:fa:92:54:94:8f:9a:9b:01:29:3f:af:14:
de:d9:61:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/RKFOINn3DwQWougBuZaIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDY5YzA5NTUxYjNmZTNiYTJjOWE2ZTU1ZDhlMDU5YmJh
MGIxODYwHhcNMjYwODA1MDkwMTQ4WhcNMjYwODA2MDkwMTQ4WjAzMTEwLwYDVQQD
Eyg1MmNiMTQ1ZTM4NzcxZjBkOTE2OTM4N2Q5ZjAxYjJhMzM2NTNmOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbgDlEF1QO98njnsoEfbLPXen5SU
HKrNWfWSHoFOeB3bWdU0BPX/NhnEVogoWZ4YFo8nhxaqXn9MH2PAD+vbHJpNLy55
//rH+FU/UxR9QDcMd0XtkrDvZhDk2v5Agmujb8dkXRDVPHNetZxrxqUEVchsQJ1m
n921YHFFqaFwIykdso/kY1wZEUEXP9Wzrf6hIhwyxAUe6efcskcrdd6eoU3aTm6o
HLSLz8AW0saVacMXJjAMvcYeu4PpmpPl6TA+7N1NAVfP6z9Uy/S/tdVhjknafrul
8aB1BdOUJqrjoBCiE0WJhTV5h271gsppYfbC/V1I32vmc8QpSn3gcLoedwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLLFF44dx8NkWk4fZ8BsqM2U/jHMB8GA1UdIwQY
MBaAFIEGnAlVGz/juiyablXY4Fm7oLGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FhY0NWVWJQLU82TEpwdVZkamdXYnVnc1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mMzc4ZDMtMzk0Ny00N2Y5LTgwNWQt
ODI5YWNlYmMxMTY5LzEvZ1FhY0NWVWJQLU82TEpwdVZkamdXYnVnc1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9mMzc4ZDMtMzk0Ny00N2Y5LTgwNWQtODI5YWNlYmMxMTY5
LzEvZ1FhY0NWVWJQLU82TEpwdVZkamdXYnVnc1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXefG4T8G
s16+KMzdGOG7WlAA/igxETDHKYOfBHIY9r2LsU4d0PcdVrWhWz0eYtOtxVsH8RQn
oCtnP2pkrOElZU5ikOqQtcQLKXVTyXuRuZz2LU1Vs+v+fvnx417GqZxodvyBnfNw
/mRINLgacqszHgZge/jJqRod362WWWsWjPa34GaAogv5F0I0YXPuFeXCLCd4Lxzg
Woa/HPkdjvSMExX0w8QMejqnsBjViEF5y4MuutGnXEghH1R8S28sWqC9R7TpSVxC
7U/+E1PaIo3u3YPYqtDnApkUT5WWOMaoQXzaT7BlpyTa9xA21nFBeZ6r+pJUlI+a
mwEpP68U3tlhNw==
-----END CERTIFICATE-----
Generated at Wed Aug 5 19:02:11 2026 by rpki-client