Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: 86fuMBpzNfmSCB59DhjdbKaVIsFbjv5QP35dGQzvvGo=
Subject key identifier: F2:59:C6:74:21:D4:1A:49:F0:85:D5:54:5E:E5:64:6C:AF:82:65:07
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 019FA0A8F77078EF4F7E91039539AE31CA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 19D1
Signing time: Sun 26 Jul 2026 23:00:55 +0000
Manifest this update: Sun 26 Jul 2026 23:00:55 +0000
Manifest next update: Mon 27 Jul 2026 23:00:55 +0000
Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: S+OWGmAP0Ibb/THZAJoE+LyRpoY9+C7ZStH/gnM+3c0=)
2: xQLXNMGtJIEmbmsa0yimk8gh264.roa (hash: 681EcZV9/rvtEn+cL3EpnhUhg/0vWlpEsupf9xZzDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:f7:70:78:ef:4f:7e:91:03:95:39:ae:31:ca:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Jul 26 23:00:55 2026 GMT
Not After : Jul 27 23:00:55 2026 GMT
Subject: CN=f259c67421d41a49f085d5545ee5646caf826507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:34:fa:af:1b:aa:34:38:96:f4:68:8f:1b:
91:c3:f3:0b:c8:33:0e:e5:9d:a2:72:1b:62:b7:fd:
f6:62:1b:32:03:83:86:f5:ed:dd:49:30:e4:c6:0a:
a9:cb:3d:1d:93:45:bb:31:d5:3d:73:c8:66:a0:bb:
5b:b1:2d:e6:5d:00:7b:29:34:2c:58:9b:d5:70:9b:
0d:27:ad:5d:58:ed:0c:01:4a:c2:d9:11:3b:43:07:
50:9a:b4:39:b4:ef:ae:c0:a9:aa:43:32:51:97:9f:
b6:6b:6f:b7:a6:a1:5a:8d:18:82:65:9a:43:5e:83:
9e:bb:c2:53:0e:bb:37:e2:93:92:06:fd:45:fb:a0:
a5:ab:f9:72:79:3c:58:53:8a:b8:54:88:75:5f:a7:
cc:a4:98:a2:44:9d:bd:b8:92:71:64:d4:c1:1f:99:
85:8a:5b:37:1a:30:12:60:dd:3c:9e:4d:29:02:16:
03:b4:dd:ea:a8:b0:e5:39:c0:46:3a:f5:5e:53:6a:
dd:e3:6d:b9:29:7d:4a:64:cd:41:41:ff:47:b5:33:
96:68:8e:37:90:f5:80:25:58:a5:ae:b2:2e:93:07:
de:63:cc:cf:89:cc:60:88:5b:15:6c:38:a9:ff:87:
ad:c2:ac:5e:0a:80:3b:fc:d1:7d:a4:07:ad:d4:59:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:59:C6:74:21:D4:1A:49:F0:85:D5:54:5E:E5:64:6C:AF:82:65:07
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7c:01:e3:20:08:47:c2:db:a6:53:bf:89:86:73:db:ad:c6:
26:53:91:bb:99:92:a5:c3:8c:b4:4d:b7:4e:e7:95:1a:98:52:
bf:bf:ac:5b:f2:2b:bf:82:e2:a9:4c:f0:2f:e6:31:aa:59:34:
03:7c:1e:5f:03:0f:19:46:16:40:1b:5c:9c:cc:77:06:3e:c6:
cd:24:8a:6e:4a:72:f5:c2:5c:ea:f6:37:65:f1:8f:4e:b9:f0:
7a:c4:5f:08:43:9e:f4:15:78:6b:89:5f:56:89:d6:77:6e:69:
91:ce:91:18:96:6b:aa:dc:2d:58:e0:4b:7d:0b:e3:b2:ef:45:
5e:c7:3e:b7:ad:cf:34:e1:c8:52:29:cf:d8:4b:30:3c:79:39:
e8:81:84:ca:af:34:fe:cb:5d:a2:fc:54:a1:4f:e0:c9:7d:35:
26:45:24:4c:f6:11:44:0e:3b:2c:bc:cf:57:e6:93:3a:54:62:
f1:04:fa:c2:0a:5e:cb:9c:2c:0d:16:6a:e2:c2:ea:10:46:c0:
68:12:ee:30:34:20:7b:62:76:34:75:8c:63:51:e7:99:90:d2:
a3:aa:6f:ed:e6:b7:33:00:c9:90:1c:9a:bf:1c:44:d3:f2:71:
24:e3:b9:40:8f:b1:67:1e:8a:4e:24:28:6d:e8:24:4f:df:20:
53:80:1b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:09:50 2026 by rpki-client