Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File: gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier: Pxh9725BR2EtG11vewTUVJfQPVFthtk5FuzGLIfjDzI=
Subject key identifier: 1B:08:85:2A:29:1A:AE:C9:5C:9C:39:3E:01:87:10:97:63:C3:31:11
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 019FA0DFDDD9AD464B078FA74B5B9F8A4122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 00:00:53 +0000
Manifest this update: Mon 27 Jul 2026 00:00:53 +0000
Manifest next update: Tue 28 Jul 2026 00:00:53 +0000
Files and hashes: 1: 60R1h-oxgPD3iJcDXQAz-94iJbU.roa (hash: Q4xOmlaV2o2SZe3E5kLrLywn0HX4BFk1d4KvQu8nLsY=)
2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: yCSXDPyC0O0VQ4a5y+8zIMGhE1vX2Dn0cf4v1BEAPJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:dd:d9:ad:46:4b:07:8f:a7:4b:5b:9f:8a:41:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: Jul 27 00:00:53 2026 GMT
Not After : Jul 28 00:00:53 2026 GMT
Subject: CN=1b08852a291aaec95c9c393e0187109763c33111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:b1:21:57:2f:31:aa:c8:94:d5:c2:f8:2a:
48:b4:04:ec:19:86:b2:bc:2e:2b:b7:64:d9:bb:1a:
95:d9:51:7a:5d:cc:70:7c:5a:92:3f:23:7b:36:0f:
cf:33:b5:5d:e6:c8:b8:47:36:21:90:be:3c:a3:d6:
a7:fd:80:7d:04:95:9e:a3:3a:5d:a9:76:76:3f:49:
4d:77:88:11:ac:c7:3b:ed:48:b8:22:02:63:00:8d:
86:48:cc:7f:84:8a:98:bb:94:23:9f:c6:ed:00:91:
e7:a6:86:1c:da:5e:64:61:d2:8c:cf:fa:fa:98:f9:
92:19:ea:37:e0:bf:0f:07:67:0b:6d:c1:68:4e:65:
13:85:95:2b:1f:d8:8e:2b:ff:de:88:a7:c2:22:fc:
3e:66:fe:20:01:26:0d:a8:92:b3:27:c6:40:bf:52:
b4:a6:4c:31:34:95:64:8e:6a:12:c2:78:96:18:55:
da:a9:ef:a3:70:9e:52:5f:bf:0a:d3:3c:51:c0:a5:
65:d8:7f:02:0d:f3:b1:81:4e:ae:44:c9:5c:ee:86:
d1:ea:db:1d:f0:ba:b2:26:be:e9:16:c5:7a:18:e2:
0d:7e:b7:d9:34:af:c9:5c:46:59:fd:01:ac:46:51:
19:b4:a9:45:32:94:4c:43:57:e7:57:6c:c0:e8:e2:
d0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:08:85:2A:29:1A:AE:C9:5C:9C:39:3E:01:87:10:97:63:C3:31:11
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:58:3f:8e:f3:c4:07:3f:e8:6a:f6:5c:21:39:63:c5:4b:69:
d1:39:d1:31:ad:58:6d:3b:38:15:10:87:89:4b:2b:3f:0d:a8:
b4:8b:d7:ac:c0:48:02:ef:8b:18:8e:23:8c:45:96:10:3e:32:
58:8c:64:27:cf:d6:9b:35:c6:d7:23:68:d6:3e:c9:9f:c5:65:
5c:f5:7c:de:3f:01:e1:9b:c6:73:73:ab:e1:e6:61:8d:20:0a:
a0:70:da:4d:a5:07:40:69:e0:40:3a:37:05:eb:c2:59:77:cb:
44:31:cb:f2:db:5b:15:af:e0:4b:ee:a2:b0:ee:00:74:8b:31:
c0:7b:60:9a:6b:90:b6:f3:e6:d1:d2:96:a3:4f:23:a1:65:dd:
b3:30:43:f9:57:d0:8c:e2:6d:27:71:ef:54:70:40:59:82:59:
f3:75:34:86:71:17:13:75:88:43:9b:1b:5e:09:e5:ee:05:42:
33:06:98:b8:12:8b:50:36:67:b6:e5:cc:0c:97:d5:e7:d0:91:
d4:7e:72:7f:bb:0d:45:f9:18:83:d1:73:ee:69:df:c9:b1:a9:
cf:de:df:b7:9b:9f:68:3f:a1:92:40:80:dd:91:b9:b9:8b:5d:
cf:88:d1:ae:2a:dc:62:06:a8:24:ca:4a:58:ca:af:db:96:86:
13:33:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:13:50 2026 by rpki-client