Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: ItHh2jXbF8vkVfkYhwUYXJmSm1mnzDOPjfGdVl50VuM=
Subject key identifier: 46:5C:63:3D:8C:99:A9:F2:55:66:A6:51:AB:52:C5:E6:95:65:36:39
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 019F11F77FC67E062D005A854E5FDA271B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 06:01:00 +0000
Manifest this update: Mon 29 Jun 2026 06:01:00 +0000
Manifest next update: Tue 30 Jun 2026 06:01:00 +0000
Files and hashes: 1: 84Vy4QZqvQZUIRmhoX03xS6PmHg.asa (hash: mu6fp0Fipel740MCIXuJN9FB1rFnZw35tGJ95/rLm3o=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: 0sCaQ9pyHE4p1ugNcdNaNBbFVTWlNlFHhgr5+0p3a/E=)
3: zfQjLRUyouMoxd3eQ6QBiqQWAMo.roa (hash: fytzxgaA8VilTty70xA4ueAmIkMerr/peaUGm58YXCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:7f:c6:7e:06:2d:00:5a:85:4e:5f:da:27:1b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Jun 29 06:01:00 2026 GMT
Not After : Jun 30 06:01:00 2026 GMT
Subject: CN=465c633d8c99a9f25566a651ab52c5e695653639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:b4:da:94:22:6b:80:5b:e3:a6:be:fe:a4:
dc:a5:1e:c4:ad:de:c1:9c:ae:84:04:0b:19:00:5d:
7d:d4:c4:ac:ec:ec:07:aa:7b:48:f3:ec:20:02:85:
02:b6:ec:a9:4f:3d:64:17:1f:bf:8a:cf:97:12:eb:
72:23:77:32:0b:42:b5:58:9c:b2:6c:27:3e:7f:ba:
7c:6d:7f:89:d2:06:94:ad:44:f8:28:5a:30:ca:ce:
18:aa:83:f4:23:ce:cc:34:98:f1:97:fc:60:0c:88:
57:3e:46:ad:70:7e:19:00:61:f7:12:16:ea:1b:08:
36:6a:79:d4:79:c6:57:9a:eb:85:59:64:cb:06:0a:
ec:77:0c:d0:20:f2:08:de:bc:8e:ae:b5:ca:e6:a5:
4a:d8:8f:3e:d4:31:e9:06:3c:db:01:17:13:29:85:
e9:28:14:0d:d0:cf:e5:51:53:84:d4:4d:48:7c:4a:
48:3e:d5:72:f9:92:d9:d4:19:45:d7:d2:e9:15:bd:
36:c6:80:1a:ea:25:d8:55:05:a9:bd:4b:c9:9e:f6:
28:4a:5f:7a:5c:80:3c:08:11:44:6d:93:44:4d:90:
53:14:aa:a5:82:ff:4b:41:32:d6:2b:58:a8:06:d3:
bb:4a:34:dc:4b:80:0d:49:fd:b1:48:b0:e8:37:07:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5C:63:3D:8C:99:A9:F2:55:66:A6:51:AB:52:C5:E6:95:65:36:39
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:72:b4:1c:43:05:d8:14:87:5a:20:eb:ae:8f:41:4e:11:92:
37:b4:3f:82:09:a2:a7:d7:d2:e2:4d:8c:c5:54:98:4f:31:f3:
42:ce:0e:5b:94:a4:3f:21:e6:02:1f:84:62:3d:9f:af:4c:ea:
dd:cd:4d:13:c6:13:ca:44:d9:4a:3b:c5:a8:34:7a:a2:89:80:
12:ee:e6:22:7d:8c:5f:68:4c:ab:47:c3:21:fd:79:04:56:97:
ec:64:d5:a1:3c:51:10:b0:41:b6:fe:18:af:ec:98:1b:b1:51:
48:0d:12:a6:c0:42:80:6e:1e:16:e0:44:04:0d:33:99:00:5e:
32:1e:43:69:84:b8:d8:97:dc:d0:60:6b:bb:3a:e3:03:79:e7:
a0:51:fa:92:13:a0:7b:f5:78:ba:08:d1:ea:fb:9a:02:3e:b6:
ce:1e:1c:6b:74:91:84:99:cb:24:9b:fd:df:10:06:a8:7b:3e:
6d:5d:82:15:bb:d2:96:42:d3:24:84:0c:dd:8a:db:31:b0:b1:
1f:20:e4:db:68:24:22:b4:f4:ea:67:fc:db:c5:ab:2e:33:35:
7c:12:40:31:f6:73:24:72:03:b9:e2:8d:17:90:e0:03:b2:ce:
cd:4c:df:0a:04:86:a8:e8:17:39:f1:af:dc:dc:8e:02:7d:7f:
f9:88:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:01 2026 by rpki-client