Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: zDjHxfxqjxk+tyVg1CViFFGVTyEFd5Eh185j5+jMikY=
Subject key identifier: F4:74:F2:BA:44:D4:07:2E:89:1B:7F:13:AF:81:18:37:DF:E9:6B:0B
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 019FA0E066F44B1017F8565C80A48D729D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 109F
Signing time: Mon 27 Jul 2026 00:01:28 +0000
Manifest this update: Mon 27 Jul 2026 00:01:28 +0000
Manifest next update: Tue 28 Jul 2026 00:01:28 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: aLqKH+BXO1n/MyyCkGl5yTs36sfzJgvwpcyjCmW11d4=)
2: oKpdyGhKwucvVbjfDmdQz3gb4YI.roa (hash: 9OjwGsmzo/fuyo74pyHihTisees7cSNinSvlluRB8YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:66:f4:4b:10:17:f8:56:5c:80:a4:8d:72:9d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: Jul 27 00:01:28 2026 GMT
Not After : Jul 28 00:01:28 2026 GMT
Subject: CN=f474f2ba44d4072e891b7f13af811837dfe96b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:b4:9a:f3:bf:4d:f5:c4:e8:6c:50:81:15:
25:88:c3:71:9b:97:b1:93:b5:4e:5b:c1:1e:3b:2a:
e5:71:65:f4:da:6a:9a:18:94:12:ee:30:ac:3f:da:
8b:5a:70:02:ea:24:cf:7a:ff:eb:ac:46:70:12:d3:
a0:c2:e0:f1:b4:7b:e3:cd:d1:53:1f:50:c9:b8:68:
27:c1:55:ed:67:76:ef:6e:99:b6:b9:f4:79:05:56:
cc:ed:cc:50:1e:6c:41:a0:d2:60:b3:bf:a6:c9:84:
34:eb:48:42:55:61:46:96:6e:d1:14:6e:6a:10:d5:
f4:df:d4:f5:85:ec:81:e8:10:52:77:86:42:3b:da:
c8:b9:aa:d8:d8:ac:43:db:d0:e1:3f:4d:50:ea:a6:
52:6a:c6:79:86:5f:fe:86:67:d3:de:2e:9a:d6:93:
9a:4f:fe:c5:f7:87:f1:67:8f:92:dc:5d:28:61:9a:
06:bc:64:f2:0d:f3:14:db:e4:f2:bc:d3:4c:43:fa:
3b:9a:89:99:91:fa:e3:f1:57:d9:c7:34:3d:1f:03:
27:a2:3f:b6:a1:57:a3:6c:53:9a:da:2f:fb:48:05:
f1:19:62:ec:ad:96:0d:a6:e6:13:00:d3:a8:85:eb:
87:5e:1a:7f:0e:bd:a6:8b:64:51:63:9c:e2:74:f7:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:74:F2:BA:44:D4:07:2E:89:1B:7F:13:AF:81:18:37:DF:E9:6B:0B
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:60:49:a1:09:85:f4:44:cf:8d:75:e2:b6:94:ad:51:79:74:
28:13:3b:3d:0d:30:30:85:d7:53:91:81:aa:33:b9:89:db:c2:
f1:98:a1:a3:dd:14:4d:c5:bf:15:c6:84:3d:19:86:f4:fd:42:
26:38:32:34:46:b9:d7:5c:62:d9:d5:59:4a:47:49:34:6f:7f:
89:43:dc:bb:a8:d2:ac:d1:fb:46:6d:7f:da:80:c4:04:c6:36:
57:44:b4:b4:16:c4:db:af:ca:d6:a5:3b:83:c3:be:9d:d2:b0:
92:a6:be:4d:26:f3:6b:b9:86:05:30:a1:cb:43:06:83:00:0c:
c6:b6:f9:a5:d2:f6:bd:9f:81:27:d7:7b:ce:46:8d:c6:35:8d:
50:05:ef:ce:98:ed:30:c5:ef:a6:dd:24:9b:eb:8b:e2:4b:29:
b7:a5:18:70:e4:1f:07:97:0d:5b:f5:c4:4b:e2:5f:9a:0c:2f:
c4:36:33:c6:94:e7:53:6f:9a:44:da:fa:a1:d7:18:9a:a0:98:
be:7a:2f:b7:73:b6:11:6a:f6:c8:64:3c:05:0c:3b:98:9f:70:
c0:59:5c:08:bf:13:08:77:18:1c:60:e7:cc:84:0f:de:0c:82:
aa:0b:99:03:5a:50:b6:28:b7:73:a0:f4:76:d5:24:6e:e6:8c:
81:cb:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:50:08 2026 by rpki-client