Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: XKsp7ZYTZ9f3+kdS/d3srdaHUbhzmVesiSkJgyvC1N4=
Subject key identifier: 25:BA:37:7F:0D:40:25:AB:72:5A:42:5A:71:3C:FC:6A:F2:78:BC:FF
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 019F954A25B41F61BD7A6E86DBE5446AA608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 18:01:32 +0000
Manifest this update: Fri 24 Jul 2026 18:01:32 +0000
Manifest next update: Sat 25 Jul 2026 18:01:32 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: ORnX5++73wn2J5ihTQ5eHPZxqFNG98E4Z9X0oV9NW9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:25:b4:1f:61:bd:7a:6e:86:db:e5:44:6a:a6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Jul 24 18:01:32 2026 GMT
Not After : Jul 25 18:01:32 2026 GMT
Subject: CN=25ba377f0d4025ab725a425a713cfc6af278bcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:74:c0:cd:0c:e4:2d:91:87:c0:66:0a:e1:13:
8d:21:c9:52:35:16:09:d3:26:96:08:5f:d1:d9:1c:
af:4e:99:8f:95:46:b1:49:93:28:fc:3c:fb:8b:06:
4c:ac:4b:7d:3a:9b:82:e8:7e:5d:87:1e:9d:8b:de:
73:93:2d:4b:06:7b:1e:84:1f:30:dc:c1:4a:87:9c:
fa:9a:3c:c2:ab:2b:c8:bc:22:31:d0:84:a2:c3:64:
6f:4f:1d:ed:fa:0a:c1:b1:c4:92:64:51:47:12:53:
4d:87:be:a7:94:7e:38:b5:00:db:35:61:77:99:fe:
fc:3f:9a:cd:fa:4f:ae:a1:7c:71:ec:df:4c:6d:47:
f3:0b:29:e5:99:b9:8a:c7:7c:1d:62:46:2e:14:a4:
5e:34:16:39:07:a1:02:c5:81:08:63:c3:3d:50:b4:
9e:5c:1b:75:9c:bc:19:1e:79:ec:bb:c7:3b:3f:9f:
ad:2b:da:f5:cb:8c:68:1d:08:3f:3b:98:f9:1d:69:
98:5a:3b:c6:72:ec:c6:4e:1a:24:72:3e:11:f9:dd:
e4:54:a3:50:08:bd:a0:6d:b9:ea:a7:7a:e3:77:b7:
dd:e6:d1:a9:f5:84:d8:a5:45:60:3a:e1:38:a9:1d:
79:47:80:51:82:d6:d7:8b:c6:80:52:6b:6c:98:01:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BA:37:7F:0D:40:25:AB:72:5A:42:5A:71:3C:FC:6A:F2:78:BC:FF
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:7c:f6:4f:ea:9e:96:de:33:3e:44:c0:49:66:67:0e:66:38:
cf:35:5b:6a:ed:3c:25:80:07:12:19:bf:f7:b7:ff:dd:c7:71:
14:de:45:ee:12:34:02:58:ba:92:56:87:c2:39:a6:5d:78:cb:
e3:c7:af:67:55:86:8d:ec:eb:da:91:da:1f:2b:ed:04:39:37:
cb:f2:b5:0e:a8:1a:45:c0:81:ab:6c:c3:68:da:17:a5:54:ad:
a0:f3:06:a5:0a:f2:fe:93:65:bc:bd:4d:9e:02:55:9d:46:ac:
ea:ed:9f:b1:a9:2b:cd:ef:23:41:f8:4f:85:b0:47:27:d4:97:
92:ad:98:3a:ce:8e:52:13:ea:e8:35:df:e4:db:61:d5:43:f1:
4b:32:cb:d1:d2:3f:82:e6:99:03:2f:53:d6:19:2d:20:a5:4d:
ab:e9:a4:4a:78:19:1b:4f:a9:15:02:27:52:e7:f3:c3:35:2f:
b5:dc:d9:6f:f7:a3:49:44:13:ee:8c:7e:92:83:62:8e:70:eb:
1e:75:cc:c1:52:70:3c:9f:08:ae:1a:78:ef:f1:57:c3:32:40:
09:a1:f0:49:27:74:7c:a8:a4:c9:7d:49:08:35:f8:4c:8a:39:
80:bd:8c:56:7c:cd:20:e4:a3:55:9f:45:13:3d:b0:a1:07:a9:
6d:21:09:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:54:00 2026 by rpki-client