Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: em1kxkkwULd7MlOKxbQumytmkTCQAOL/rZQ1SDVsakc=
Subject key identifier: 96:8A:BB:96:5B:58:88:38:30:8B:C8:77:6B:ED:A4:97:7B:8E:2B:DE
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 019FA2CF23B4D24B9F9B1814B4A0A164CC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 19CB
Signing time: Mon 27 Jul 2026 09:01:51 +0000
Manifest this update: Mon 27 Jul 2026 09:01:51 +0000
Manifest next update: Tue 28 Jul 2026 09:01:51 +0000
Files and hashes: 1: E2vGMfTh0_d3hFyTF_vwxF5KrPA.roa (hash: DBcvB5VPooiTXjGKSVqOi+hUE2hv4iu9s06iz8E2+EI=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: xLJ4eogxEhdrfrt0vQGJz/HmrBuntFf+AiomtlVvc9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cf:23:b4:d2:4b:9f:9b:18:14:b4:a0:a1:64:cc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Jul 27 09:01:51 2026 GMT
Not After : Jul 28 09:01:51 2026 GMT
Subject: CN=968abb965b588838308bc8776beda4977b8e2bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:eb:27:0c:35:73:9a:11:c8:60:00:43:c7:
4d:68:be:4b:30:3d:f1:6d:ae:19:7d:c2:44:3b:80:
19:b0:22:3d:92:35:19:f9:df:00:49:0f:fd:f7:c2:
8b:97:2e:0e:f1:63:94:f6:94:f3:c6:88:47:a2:0f:
80:68:4d:3a:67:fa:e7:2c:b6:04:7f:76:09:25:35:
7c:45:7a:f8:b5:c9:1f:1a:f2:07:53:42:5a:e8:ec:
1a:91:0e:3b:57:86:f2:8f:b1:0a:24:c1:2b:78:ff:
9a:4b:2d:d5:21:dc:b7:76:1a:2e:2c:f9:6d:b2:b7:
d0:2a:a7:2f:f7:92:8f:0d:3d:be:ef:b4:66:8f:ee:
7b:26:8e:1b:30:80:ee:d5:45:5f:2c:86:9f:9d:fa:
02:4c:44:31:da:b6:e1:c4:c2:c9:e3:59:ff:96:1f:
01:5c:ce:fc:89:b6:31:de:b0:9c:a5:d1:01:40:20:
53:7d:39:49:62:ec:a1:30:37:73:6d:d3:fb:8c:a0:
90:e7:90:15:95:3c:ca:8c:ac:b3:96:c3:62:a2:b0:
8d:d9:5d:1a:72:56:6f:7d:6d:42:86:cb:e3:bd:cd:
a5:c9:08:b4:55:4b:b7:7e:0e:76:31:0e:ee:f0:49:
21:d1:5a:66:d0:98:d3:53:b7:cf:72:35:79:22:d2:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8A:BB:96:5B:58:88:38:30:8B:C8:77:6B:ED:A4:97:7B:8E:2B:DE
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0e:f5:25:d3:0d:db:ec:ba:36:51:a7:10:02:08:73:b5:84:
fe:b2:ae:24:ea:38:69:21:81:e7:3b:10:5b:ab:e7:b0:bf:ae:
53:7d:71:4b:bb:2b:99:e6:bd:f9:ac:1e:a9:ce:a8:c9:7a:a3:
6c:bb:9d:4e:16:cb:37:dc:d6:5e:b8:bd:48:3f:3f:3c:36:2d:
f2:b7:1e:00:d0:52:54:c5:9f:a4:48:3b:4a:9d:1d:7c:14:e0:
f6:4b:67:d9:0a:e1:91:9f:f5:89:d7:1d:6d:ad:2d:a1:98:d6:
76:dd:61:ef:16:16:61:d6:ee:88:5a:d6:90:ae:38:a7:25:10:
ae:e0:c4:34:4c:66:04:a3:b2:59:3a:84:7c:90:ac:5d:a3:f3:
8a:08:d2:6b:75:2f:c2:fd:01:a8:39:f9:06:a8:24:97:a8:a8:
4b:57:46:57:aa:aa:fe:10:3d:bb:35:62:87:7d:be:f7:01:96:
a7:04:4c:8a:c1:9d:0a:88:1f:44:5e:e1:41:c2:12:01:ce:16:
56:79:8d:a4:aa:5a:fe:e7:53:74:7d:7d:21:60:f4:1a:eb:c9:
ae:8d:70:6d:cf:44:c3:e2:37:b5:f4:08:d6:80:5f:ae:cc:20:
47:28:3f:05:0b:c5:f9:f5:fc:3b:d8:ef:8e:e3:08:4e:16:2e:
02:21:f6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:01:29 2026 by rpki-client