Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier: W48jxdvT6XhL02RPEitfeNMsUPQNY5EkZo+00uPVUAk=
Subject key identifier: 63:4E:DB:5D:A7:C6:C6:1F:24:52:60:14:4D:85:B9:1C:B9:6A:16:AC
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial: 019FA14E02F9AC70DB0E3D3A94334755DC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 02:01:12 +0000
Manifest this update: Mon 27 Jul 2026 02:01:12 +0000
Manifest next update: Tue 28 Jul 2026 02:01:12 +0000
Files and hashes: 1: RhRiCLu3V9nkc3JU2Ejeh0r6z3A.roa (hash: /FQPmAw2IpNKrgFt00mOhh1pZSgkOc3LG4d41GRZWyA=)
2: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: iFD/ROOXX+VN0LFh80HIFJaWD9D2S2I0bBx99v+jack=)
3: pZJL0eNksfaHvSe4LIDTMSzvlCY.roa (hash: w14PGsWnAom/plqZ5dIIMe8RiKKn/dXWpdjVTgkHyCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:02:f9:ac:70:db:0e:3d:3a:94:33:47:55:dc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Validity
Not Before: Jul 27 02:01:12 2026 GMT
Not After : Jul 28 02:01:12 2026 GMT
Subject: CN=634edb5da7c6c61f245260144d85b91cb96a16ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:ff:0b:34:23:7d:a3:ec:73:ea:bf:94:eb:
a6:e3:13:ae:c6:c6:1c:d2:be:39:84:e6:c4:50:4b:
d7:f1:cf:06:74:f8:9c:83:6d:f7:51:d9:53:dd:b4:
5b:7f:97:b6:6c:25:de:d4:64:28:97:f9:de:9a:cf:
87:33:79:cd:24:17:0b:43:42:5b:84:34:b5:95:8d:
1e:33:40:18:4f:b0:39:e4:e4:a3:67:3f:67:cf:ec:
35:77:97:fe:13:ec:86:fe:e3:94:5e:1a:15:b9:e0:
56:f1:8d:46:93:56:dc:e2:28:02:fa:7e:93:76:1e:
73:fe:66:30:55:8d:24:de:5d:c7:42:36:64:72:e1:
05:bb:80:e9:9a:b1:ad:2a:05:e4:5a:37:79:5f:eb:
45:22:36:21:77:b4:eb:cb:0c:51:7f:73:77:ff:18:
e3:41:b5:05:1f:bb:6c:51:c1:d3:f5:80:95:f9:04:
ff:4d:7f:3f:41:02:55:9c:97:35:7b:25:d4:5e:7c:
1a:62:48:a8:8a:c5:1f:c5:88:f4:97:d4:2b:1b:6e:
1f:b4:e2:eb:9e:81:fc:19:8d:d7:de:e7:8a:a5:61:
7f:1a:a6:e8:ec:54:d6:f8:e3:33:40:b3:21:a3:97:
92:16:7f:ce:3d:64:47:52:74:fb:05:0a:fa:06:ac:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4E:DB:5D:A7:C6:C6:1F:24:52:60:14:4D:85:B9:1C:B9:6A:16:AC
X509v3 Authority Key Identifier:
keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:88:b0:ca:c7:75:4e:1c:6e:6a:5e:21:e2:f7:19:3c:7c:02:
bd:ca:e9:db:c0:4c:be:1e:e4:c4:46:fb:f3:fe:f4:54:f6:14:
2a:73:a7:d9:02:9b:d6:6d:13:2a:e9:6d:e6:73:f5:81:bf:36:
85:46:e3:ea:3e:f0:4a:17:93:95:13:14:63:6b:38:2f:14:15:
9d:a6:48:65:9c:d1:17:dc:42:a8:6e:e4:92:1c:4a:0d:4d:90:
31:e7:e3:4f:f4:66:8d:d7:60:3c:c7:3e:c8:86:0f:8c:95:be:
60:c8:a3:22:3f:5d:a4:41:a9:47:49:d9:c5:69:ba:a4:5a:31:
06:a2:fa:b2:23:2d:dc:2a:d4:2b:e1:da:f1:1e:09:3e:70:fa:
c4:3e:1b:a9:dd:6e:12:ec:15:fd:fc:89:4d:10:86:91:69:cd:
45:ec:4a:48:88:5c:69:5f:eb:43:35:e0:55:9f:50:9d:17:e1:
69:69:1f:36:e4:dc:43:10:a1:b7:b9:af:88:5a:88:f0:99:a9:
7a:51:6a:c0:d1:8d:e9:63:df:c1:d0:b5:c9:b0:1f:6c:36:2b:
c7:e9:a6:76:2c:a4:96:d1:75:10:84:9c:8a:3f:97:eb:60:62:
01:7a:60:95:c8:4f:c7:fd:86:ef:8f:58:3b:8a:96:1e:c8:45:
b7:3e:ea:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:17:53 2026 by rpki-client