Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: kcqTYNgqgOd0H5l7+Ss7NJJqFSrI2kQcSNPDfnmrs1U=
Subject key identifier: 0A:E9:7B:41:75:D6:F6:7F:AA:B6:8F:38:AF:1B:5E:8C:2D:7F:B0:B8
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 019F8267B60B61F9AA5C6C6B887201A4C318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: 055F
Signing time: Tue 21 Jul 2026 02:01:02 +0000
Manifest this update: Tue 21 Jul 2026 02:01:02 +0000
Manifest next update: Wed 22 Jul 2026 02:01:02 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: wrMpep0yxJiqYV3EtRRJXGANAe6pEq49MDxN4gIvTz0=)
2: ps8p5Yxss_yS4gX9BmkqFddX40Q.roa (hash: nYuC3F6vhPJEBCLmfMqrTPfplxmjR9SoiZf1ZnDUcP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:67:b6:0b:61:f9:aa:5c:6c:6b:88:72:01:a4:c3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: Jul 21 02:01:02 2026 GMT
Not After : Jul 22 02:01:02 2026 GMT
Subject: CN=0ae97b4175d6f67faab68f38af1b5e8c2d7fb0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:4f:46:31:98:10:3c:71:81:76:03:00:bf:
8c:54:17:26:a9:b4:5b:54:48:2b:6b:99:ff:60:15:
1a:14:40:bb:fa:be:43:ec:5d:04:86:2a:8a:27:1a:
a4:b8:b4:76:34:8f:01:ae:e9:51:e3:22:84:fc:91:
f7:fc:0a:3b:46:e8:1a:68:ca:e0:c9:82:a7:c3:de:
17:08:9e:25:fa:96:bb:b9:63:fa:68:ee:0a:67:96:
6f:f0:99:c4:f4:85:56:59:12:8a:89:b0:7d:4c:e2:
5f:64:59:5d:7d:8f:fc:25:fa:ae:9e:24:31:31:14:
5f:d9:ee:4b:2b:a7:ee:62:74:60:7a:69:e8:62:08:
60:bc:c8:0b:6c:05:85:5d:70:b6:c0:a8:63:7e:c0:
04:44:1f:37:e4:01:bf:ad:9f:17:ff:74:45:77:d0:
41:1f:22:32:ec:78:a0:d6:74:3c:59:07:d7:67:7b:
cf:6a:37:58:8d:dd:1c:0d:2f:30:bc:5f:7c:2d:e7:
96:96:2f:90:68:d4:4a:9d:1b:22:66:af:ac:ad:3c:
54:09:86:a9:59:ee:7d:80:16:1f:e8:e7:6e:0e:7a:
1f:a2:77:23:48:75:7b:46:71:9f:e1:a5:f4:44:48:
3f:28:22:bb:fd:35:69:0c:3e:07:08:0b:3b:78:c4:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E9:7B:41:75:D6:F6:7F:AA:B6:8F:38:AF:1B:5E:8C:2D:7F:B0:B8
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:28:94:df:a8:30:67:4a:81:49:fe:50:b9:2f:48:9b:b7:fa:
8c:f9:f1:9f:7a:9a:46:2c:2e:13:dd:94:a2:90:f7:29:6d:3b:
c4:e9:89:7d:dc:9f:ec:e8:56:3d:0b:52:69:78:69:80:48:e2:
02:5d:6d:f4:b0:8e:6e:e3:40:c0:fe:60:43:0c:b3:6d:47:4a:
25:96:3b:23:04:df:7a:02:0b:70:3a:57:f2:97:6f:d8:8f:46:
da:8f:b8:a7:82:a1:d7:06:09:b5:fc:50:0c:6f:50:37:b0:eb:
e9:0b:e7:2d:53:f0:1d:ff:00:18:fa:0f:f5:05:6d:ed:77:bf:
58:23:f0:86:77:67:b6:5f:7f:b5:34:7b:33:15:e0:ae:34:32:
c4:ab:5f:92:53:c2:c3:48:2a:5a:d9:6d:7b:25:5d:66:2e:97:
c3:23:8f:7b:7b:ab:93:90:75:bb:76:2d:07:d0:2b:40:fe:e9:
f4:26:8c:af:a5:f9:f3:da:26:f6:3f:0e:68:08:2f:f6:fe:00:
7c:df:e5:a9:95:ce:8c:07:7f:2f:f2:e0:6c:b2:f8:3e:d5:e2:
a8:e8:b5:fa:e2:37:12:9d:e4:5e:c1:d1:8c:2e:fb:c8:0f:c2:
e9:1a:73:54:ad:ef:e8:ad:06:13:a4:a8:53:d1:d8:34:98:37:
86:d3:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:17:09 2026 by rpki-client