Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
File: gvolsvyxRoEUtziSirINh2G_iDE.mft (raw, json)
Hash identifier: lH9vnGwPGuYSLJYfKulG1ILIscfeRxCI+6WlKIdx5BA=
Subject key identifier: AA:A2:6E:FB:09:2A:50:C2:A3:86:DC:34:AC:65:39:28:DE:11:EC:32
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Certificate issuer: /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial: 019FA0E0F3E975AF9D95C2D6BD9EDC0C43BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
Manifest number: 1621
Signing time: Mon 27 Jul 2026 00:02:04 +0000
Manifest this update: Mon 27 Jul 2026 00:02:04 +0000
Manifest next update: Tue 28 Jul 2026 00:02:04 +0000
Files and hashes: 1: fd1xrTIYmkH8h8_zV14R4Xwx3xA.roa (hash: DuMMp6iWusBZnJRack5skbisuXs/1s70bXxQ0VM4qus=)
2: gvolsvyxRoEUtziSirINh2G_iDE.crl (hash: LhpRL37IHmCoSeAAxqYa9tr/xUHUvh3U2RQSwgUm4Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:f3:e9:75:af:9d:95:c2:d6:bd:9e:dc:0c:43:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Validity
Not Before: Jul 27 00:02:04 2026 GMT
Not After : Jul 28 00:02:04 2026 GMT
Subject: CN=aaa26efb092a50c2a386dc34ac653928de11ec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:ee:1b:91:2d:f7:ba:80:2a:9f:70:97:b1:
ca:66:90:96:b5:31:cd:d4:bf:7a:ad:fd:ec:2d:0a:
64:ba:1c:65:94:bb:89:8d:56:f3:9c:7e:63:2c:39:
3e:25:9d:61:6d:3b:41:12:50:b8:c6:5b:6e:f3:c4:
ac:fb:dd:81:5b:2c:9b:d6:76:54:81:94:59:b9:8a:
dd:02:50:cf:70:15:36:e7:ef:8e:cc:15:f4:5e:33:
dd:41:a8:71:73:1e:00:1a:e5:d8:44:99:b4:6d:42:
b6:d0:51:7f:a3:32:ad:63:bf:ea:65:4b:29:38:4d:
a0:98:78:6d:7b:a7:4f:d9:23:ac:02:c4:87:5e:91:
a1:ba:6c:18:24:6f:22:2d:9b:8f:62:4f:95:30:1c:
ff:b7:fc:f4:f2:f2:61:c4:52:34:e8:1e:d4:b5:54:
e9:eb:62:76:6d:8f:60:e6:c3:60:c0:03:bb:a8:26:
5a:1d:ac:83:3c:f4:85:fc:e1:88:ef:ae:a7:4a:06:
dd:56:20:4a:50:bf:43:77:68:02:dc:b3:f8:b8:26:
74:7b:50:8d:f3:01:67:3f:39:c8:fb:e2:d7:7a:aa:
84:17:8d:8b:29:0a:76:f2:96:27:04:d3:c4:0a:fb:
d2:a9:3f:13:51:c1:17:52:16:76:dd:64:69:c2:aa:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A2:6E:FB:09:2A:50:C2:A3:86:DC:34:AC:65:39:28:DE:11:EC:32
X509v3 Authority Key Identifier:
keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4e:91:63:cf:4a:13:73:25:d7:48:e4:19:a4:a0:69:aa:70:
e5:ed:bb:7c:00:67:d9:a7:a7:62:5c:dc:10:58:a9:4c:9b:f4:
71:4a:7c:13:a5:b7:6d:9d:dd:f5:02:50:0c:4e:b2:ad:b0:11:
c4:5a:c0:9d:61:af:02:a4:bb:24:d2:77:b5:5f:f6:e5:b5:5f:
c8:2c:f5:db:9b:df:6d:28:83:25:39:cf:5c:e7:7a:a7:da:42:
e8:b2:eb:63:83:37:af:96:9d:1e:c4:53:f0:99:49:06:eb:ce:
cf:d2:7e:7d:d4:54:66:d1:7e:13:d9:3d:aa:1d:2c:65:a6:fa:
f4:44:b8:bf:b6:6a:fe:b1:bf:b7:66:4c:6d:65:57:6b:d7:ac:
5c:ad:2d:42:f4:e4:c7:62:0b:7a:06:7e:5a:3d:9c:ad:00:48:
be:54:dd:0e:54:76:11:77:68:0e:d0:6d:0f:fb:8b:64:21:e6:
1d:3a:df:e6:26:db:9c:f1:9a:48:34:8d:5b:fc:f6:05:00:ba:
28:02:e3:32:65:5d:61:50:3d:7d:4c:7a:6e:cb:a2:c1:25:45:
1f:b0:c2:0b:9d:3c:ef:79:d1:64:d9:0e:f2:05:ab:3a:35:75:
ac:72:06:37:c1:1b:72:f2:9b:23:bf:8c:ea:7b:5b:5a:51:c1:
d7:5c:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:53:54 2026 by rpki-client