Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
File: gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json)
Hash identifier: yhFao3gjCoDUm6HzuFwhYSUc8rKh1zp7fCPk0wnNfP8=
Subject key identifier: 98:EB:B2:C6:28:03:9A:AD:4F:C0:04:65:75:91:75:92:D3:85:BA:DC
Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
Certificate issuer: /CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Certificate serial: 019FA26107C832E890EE71EFD1153CD6D6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
Manifest number: 1707
Signing time: Mon 27 Jul 2026 07:01:35 +0000
Manifest this update: Mon 27 Jul 2026 07:01:35 +0000
Manifest next update: Tue 28 Jul 2026 07:01:35 +0000
Files and hashes: 1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: 8eaeLVWgRlKte9kEPeJziLrdVC+X7kwyAOaLmkonlAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:61:07:c8:32:e8:90:ee:71:ef:d1:15:3c:d6:d6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Validity
Not Before: Jul 27 07:01:35 2026 GMT
Not After : Jul 28 07:01:35 2026 GMT
Subject: CN=98ebb2c628039aad4fc0046575917592d385badc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:b0:b9:0a:d8:94:e1:51:65:bc:cb:be:da:
07:09:71:f7:e4:a5:cf:21:52:bb:d2:6a:c0:6e:7b:
64:67:e0:f4:81:c7:51:51:71:e4:a7:47:53:cf:0b:
7b:e5:81:ba:8f:fa:bf:7e:39:cf:43:9c:b5:36:9c:
2d:5b:65:ea:12:42:bc:0f:59:ad:a2:3e:98:1f:62:
06:0d:e4:11:5b:09:28:d2:4b:1b:73:c9:37:ce:2c:
ff:74:e9:67:b1:12:69:27:68:93:24:51:a4:ac:4f:
b4:a3:c1:75:e1:f1:04:df:ce:02:80:5a:24:55:bd:
b8:b5:71:6d:3c:55:66:35:cb:e2:18:e3:e7:f8:11:
19:18:59:b7:fa:99:7e:93:f1:55:3a:ce:21:3b:18:
e4:0f:f3:57:80:e7:8b:d8:ce:83:37:ca:52:02:d3:
13:5b:ae:c1:38:60:73:7e:c2:15:35:23:10:09:57:
0c:ac:fa:55:58:70:41:ef:a8:1e:a6:df:5b:1f:bb:
7f:8f:62:7a:5d:74:89:8c:ce:7a:fe:03:d6:19:76:
b4:3f:5d:fa:39:4b:c2:4c:93:d1:72:55:8a:93:57:
89:9e:eb:72:65:b4:63:19:f7:b8:25:a6:52:ae:ab:
49:30:2d:8c:b8:10:93:a9:c3:a7:a9:ea:55:3f:f2:
ad:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EB:B2:C6:28:03:9A:AD:4F:C0:04:65:75:91:75:92:D3:85:BA:DC
X509v3 Authority Key Identifier:
keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ee:e0:08:51:7a:cb:89:b4:07:41:63:d0:7a:af:49:3a:7c:
83:55:4f:6c:bc:f7:1f:e8:3d:11:06:c2:c8:0c:ea:81:ac:32:
b7:0e:79:6c:d8:38:e5:bf:ed:10:8b:e8:9b:d5:26:cc:ee:70:
14:3e:0f:53:ba:2b:e4:c8:46:4b:1c:5b:8c:54:76:4e:63:e9:
f4:f2:f0:7f:e8:fa:0a:39:b7:51:03:17:35:72:ae:74:1c:aa:
15:86:5e:c6:3c:12:fe:5e:90:8c:6b:0f:86:31:01:35:e1:27:
d5:8f:66:6f:58:b3:fc:7a:e5:76:84:38:15:77:f7:67:fd:3d:
b7:3c:e0:c5:fb:a3:e8:6e:aa:19:47:74:af:28:e4:39:cf:47:
28:ae:15:2d:34:b2:4e:a2:33:9d:dd:69:42:9b:53:06:d8:3b:
6d:88:ff:0c:3c:c4:53:ac:4a:9d:88:03:fa:69:14:c8:54:6f:
9c:37:56:1c:b4:30:58:ce:c0:81:c9:48:5a:fe:d4:73:57:d4:
28:88:72:b6:2c:71:93:40:2b:d8:b3:e1:fd:1f:9c:9b:2f:3c:
a3:7c:cb:d9:d3:72:24:de:83:b8:a8:51:0b:80:da:8e:f8:a3:
34:1d:cc:23:b8:b9:0a:85:ce:89:2f:5c:85:95:59:52:52:10:
72:aa:63:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:14:22 2026 by rpki-client