Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: 1l2u03n4yBLpW2e8lGj5s/P3E/9vPj98dhmc00q09h0=
Subject key identifier: FA:96:45:00:78:FF:81:2A:56:B9:87:D6:4D:18:C7:D0:2A:EA:75:12
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 019F856880FB1567E9FAEBE9BFF463EC1845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 0A9B
Signing time: Tue 21 Jul 2026 16:00:46 +0000
Manifest this update: Tue 21 Jul 2026 16:00:46 +0000
Manifest next update: Wed 22 Jul 2026 16:00:46 +0000
Files and hashes: 1: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (hash: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: BkQJGnNx8zsxE9VWNSOe8FXGHnnH72gHEVFZiqpaBCg=)
3: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (hash: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY=)
4: XtW69XYWfcYs9FhfW77svXCHmQk.roa (hash: +2PiuVV/xd9FID0vQ4PS/1nWqfCBv4fOx6GV++A7pIo=)
5: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (hash: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:80:fb:15:67:e9:fa:eb:e9:bf:f4:63:ec:18:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Jul 21 16:00:46 2026 GMT
Not After : Jul 22 16:00:46 2026 GMT
Subject: CN=fa96450078ff812a56b987d64d18c7d02aea7512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:3d:cc:6a:92:40:d6:ee:b0:45:56:0d:85:
7d:7c:31:15:43:db:87:f6:fe:56:53:20:83:e6:10:
c3:7d:30:cd:2b:90:80:ac:dd:a5:8b:f0:99:3c:5a:
22:4d:80:13:da:e2:84:ff:fa:43:b7:e5:8e:9f:e2:
7e:4a:dd:f0:15:ad:78:fa:d2:e8:d0:e5:29:5b:b3:
0d:c7:ef:7e:a4:1a:70:76:a6:74:fb:a6:8b:b0:67:
31:96:0c:83:9b:79:7e:65:ce:e9:29:12:fc:3f:1c:
e3:05:da:bb:c8:34:fd:57:9d:c8:b9:3d:91:b1:df:
8c:80:c0:43:63:e5:3b:c5:25:7d:00:bd:98:5d:66:
25:7f:07:ec:de:c8:07:79:fb:5f:43:4a:08:4e:03:
e7:ff:21:09:33:96:f6:e9:98:0a:4f:45:92:04:e4:
4a:9a:61:b3:57:35:de:a0:6e:e9:61:3f:5c:06:27:
1a:9e:c5:9b:6f:cc:f6:b2:43:29:b6:e2:fd:3f:b6:
10:1d:03:8e:fa:e2:7f:66:12:58:d8:cc:a6:62:dd:
5b:5a:3a:c1:88:4b:54:a0:c9:bc:c1:25:d0:43:08:
fb:70:8e:f0:97:e1:e9:6d:1b:79:6a:03:59:9d:5d:
e2:8b:eb:1b:51:9e:b1:1e:74:63:1c:31:79:6e:c6:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:96:45:00:78:FF:81:2A:56:B9:87:D6:4D:18:C7:D0:2A:EA:75:12
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fe:51:2a:e5:f3:0e:43:8e:66:2b:e1:3f:fd:d2:64:e7:8b:
6d:48:28:cc:53:ac:e7:ab:b1:30:69:e6:aa:6c:13:db:f9:c4:
29:da:b2:20:02:4e:38:e3:4d:af:0f:d3:d5:82:cf:f2:a0:e9:
c0:09:d6:a2:2c:44:7d:04:59:9a:fe:6f:c3:d2:b0:c5:ac:60:
b7:8f:17:91:09:ce:70:fb:de:69:05:22:05:84:c8:a4:35:67:
4e:99:13:7e:b5:5d:40:1f:4d:a8:a0:39:95:11:1a:b4:9b:a1:
e7:65:8e:6b:34:19:52:bf:90:ea:2c:29:4c:41:2e:de:e5:5d:
93:76:5a:0b:36:d8:f6:32:78:d9:53:41:ea:3e:36:2c:4a:ac:
35:7c:8c:85:99:51:1b:aa:98:38:fd:a6:f3:d5:82:72:be:22:
47:fc:6f:0c:fd:4e:41:b4:0c:95:c0:3d:94:4a:6c:f2:bf:7f:
45:11:2d:72:db:96:c2:6d:d6:e8:46:50:54:f9:85:dc:6f:b1:
85:72:0a:cc:d8:22:65:91:8e:c0:ee:80:75:2d:a1:fb:95:78:
99:54:53:53:64:eb:19:ba:c3:99:5d:d4:e7:a2:78:96:d3:df:
84:b8:f5:a6:ab:50:93:b6:57:fc:b5:37:be:4a:09:04:a7:cc:
0c:65:09:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:25 2026 by rpki-client