Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: 1gTSJQsjrltKU/W5BBCGvSkFyDkfUNx9Dra0tR2/InU=
Subject key identifier: B4:2D:E3:3F:CF:7A:5E:0A:DC:D0:DD:C4:43:B4:F1:F8:0D:18:99:05
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 019FA2CE2463D231302DF772AA62DF84BF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 09:00:46 +0000
Manifest this update: Mon 27 Jul 2026 09:00:46 +0000
Manifest next update: Tue 28 Jul 2026 09:00:46 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: bbw3feRmzyMcSEJL+3GZ2ZHL/KcZqm9qBXH2cMhDCfg=)
2: N_t0iSjnQlMLmJZKqbJJB1AKECI.roa (hash: CLalor9+rY0MRNCFPs5EzzFZ6W1RHuYiyZymjFGnJuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:24:63:d2:31:30:2d:f7:72:aa:62:df:84:bf:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: Jul 27 09:00:46 2026 GMT
Not After : Jul 28 09:00:46 2026 GMT
Subject: CN=b42de33fcf7a5e0adcd0ddc443b4f1f80d189905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:9a:99:57:5d:69:bb:b8:64:a4:3b:c6:f0:
cd:9e:3f:99:2d:05:c9:62:69:42:48:aa:cf:e8:93:
11:c8:72:77:5e:9b:c6:19:e7:59:aa:56:5f:91:2a:
24:18:3c:4d:d0:f9:ec:f6:84:41:b9:66:af:80:ba:
43:be:7d:e1:cc:88:c5:6b:f4:eb:85:a0:97:91:ee:
70:f1:8c:93:84:9c:84:77:b1:5d:73:d1:97:0e:13:
0f:9c:b5:a9:c7:7e:b3:9a:ae:5c:9f:c1:59:b9:a4:
06:a1:c7:20:2f:52:5e:f8:62:d5:2b:8b:8f:d4:fc:
33:df:61:ec:89:d9:29:6b:87:08:53:0c:4f:c9:d2:
d8:5a:94:e8:be:ba:ad:d2:18:52:8b:19:3a:8c:7f:
13:e3:c1:d9:6a:3d:9d:5d:1d:54:3b:8a:68:75:75:
87:4b:14:d0:b8:57:c9:35:07:ce:e9:3b:64:1c:20:
d4:bd:4c:57:99:2d:da:27:09:9b:d9:3d:e3:af:0c:
b5:c3:c4:89:c7:ec:73:72:85:66:5a:2f:2f:23:95:
01:1f:df:c8:a5:a4:74:e9:8b:7c:40:56:18:a0:b6:
67:c5:70:24:74:ba:f6:36:de:86:1f:c2:19:f9:c5:
27:2b:61:3d:fa:c6:ce:8f:e3:b5:3d:65:92:f8:7e:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2D:E3:3F:CF:7A:5E:0A:DC:D0:DD:C4:43:B4:F1:F8:0D:18:99:05
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3b:02:f4:64:f4:8f:ee:57:ce:16:0a:ac:22:22:3c:ae:c7:
33:fe:26:74:c6:2a:71:ff:06:52:84:ec:9f:f6:0f:2a:73:00:
84:57:5b:b1:f2:06:50:c3:7e:cd:a4:c5:0a:82:77:bf:03:80:
21:32:81:c8:43:a3:33:93:9c:47:10:01:63:9b:2c:b3:0b:43:
7a:61:8b:87:62:d5:22:a5:0e:a8:dc:43:0a:f1:d1:4a:af:91:
27:f8:e2:ee:70:03:8a:79:55:c1:a8:26:a5:d9:99:f7:79:76:
90:2f:c9:29:0a:bb:47:3a:f4:92:3a:53:e8:be:bf:cc:47:ea:
57:e0:b0:27:8d:d3:80:99:b0:ea:97:39:02:33:82:9a:ed:cd:
4c:a1:45:6a:78:70:04:82:e9:58:09:9a:11:17:1e:b5:97:3e:
2c:53:14:2e:a8:83:05:a3:a6:c1:26:92:00:d9:66:a7:f6:1d:
3b:5c:97:03:3c:37:65:ba:69:1f:e5:93:8e:c3:c6:02:a5:3c:
6e:d2:26:91:f7:0f:fe:e9:a6:b4:44:65:3e:e1:2f:f7:49:68:
3a:a5:1f:d9:e6:37:2e:7c:ec:c7:ee:8b:e1:90:74:fc:8d:0c:
cd:a5:c0:b2:ed:ce:e2:f9:67:76:e8:d6:d9:c5:c7:be:0d:fc:
a7:70:df:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:03:37 2026 by rpki-client