Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: DPjAMvAM5JaVIxbKD1BkocSzf8m3MU6TK0KoBjVew/4=
Subject key identifier: 13:9A:D7:89:6D:89:01:83:D0:DF:7C:8D:57:F1:21:FC:F8:38:A9:EE
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 019FA184765ACBD3751277D94A4DB803997F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 1961
Signing time: Mon 27 Jul 2026 03:00:40 +0000
Manifest this update: Mon 27 Jul 2026 03:00:40 +0000
Manifest next update: Tue 28 Jul 2026 03:00:40 +0000
Files and hashes: 1: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (hash: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ=)
2: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: i1a2xwXoJAycMlvBwoSXJlR5HxHnwNzl9zOmQlBHH6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:76:5a:cb:d3:75:12:77:d9:4a:4d:b8:03:99:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Jul 27 03:00:40 2026 GMT
Not After : Jul 28 03:00:40 2026 GMT
Subject: CN=139ad7896d890183d0df7c8d57f121fcf838a9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4c:20:e5:9c:0d:da:ab:01:d5:bb:23:84:9f:
29:8b:74:0f:6a:29:ff:55:7e:aa:57:ab:01:48:35:
33:d3:db:30:60:91:0f:1d:5d:ca:06:80:e0:07:37:
5f:fb:95:9d:7b:71:cf:4b:df:1f:6b:bc:b8:40:d6:
a3:b4:f7:95:be:96:fa:25:42:14:46:e8:13:58:35:
87:7b:78:40:d7:e6:e4:5b:65:4d:a5:24:51:09:3c:
46:0f:91:5a:a3:67:c6:e0:96:d2:4d:44:50:40:71:
59:c8:9a:82:3b:93:27:11:57:b0:cf:d2:c6:de:2b:
8c:b3:e2:06:be:39:a1:08:54:f7:c0:43:84:1f:f9:
37:ee:04:0f:33:d0:c6:44:91:65:85:26:77:10:16:
97:bd:4b:ed:25:a1:e2:2f:39:42:64:58:92:9e:0b:
7f:28:16:a1:ad:71:07:0f:92:af:21:ec:2b:ae:97:
50:c7:2f:c6:f1:a2:e8:32:d8:b5:09:06:b0:8e:01:
72:3a:23:f9:36:ca:a1:d2:34:68:ee:0e:54:9a:3a:
14:a2:67:50:4a:95:85:15:7e:6f:8e:24:53:98:a8:
36:1e:24:e4:09:92:e1:86:cd:2d:a7:79:5e:9a:1d:
5f:81:f5:18:e5:2f:82:5f:22:a7:9b:11:6d:02:1f:
09:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9A:D7:89:6D:89:01:83:D0:DF:7C:8D:57:F1:21:FC:F8:38:A9:EE
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:42:18:b5:a0:22:8b:15:33:87:f4:b1:e9:b3:97:2f:8d:e3:
fc:f9:7d:44:3c:2a:9a:0b:3a:e9:1e:df:61:c8:0b:88:27:4c:
7c:32:3b:48:17:4c:e2:75:99:53:a0:b0:28:5f:10:97:a2:86:
b7:64:25:f6:68:a6:f5:2c:be:05:3c:e1:c1:ff:20:2d:25:cb:
c9:f9:54:95:32:49:4c:28:83:0c:79:58:2d:70:e2:d8:32:eb:
74:b6:8c:df:5a:9b:0e:38:e7:cb:2f:3c:bd:e2:d1:e6:31:c0:
cb:58:2d:64:81:99:4b:fb:67:08:7e:99:10:81:df:ad:48:83:
60:00:80:a9:53:79:68:0f:da:8d:eb:b8:2a:cb:d9:11:db:77:
a8:5c:76:df:e8:82:d1:a0:e4:3b:96:61:c2:da:f0:7d:81:b2:
bc:36:37:d4:ab:a4:cd:4e:96:14:e6:a9:16:b1:27:9c:31:ab:
c1:1a:b8:4a:01:b3:e2:c0:fe:17:95:d6:96:43:a0:f6:49:5a:
7b:9b:0e:ec:fa:31:7c:b9:70:d9:87:31:b4:00:5b:04:83:f9:
56:75:37:0e:1b:67:6d:2a:42:95:90:3c:a1:28:fb:f2:2a:1e:
9c:c9:96:2e:1b:12:c1:ec:77:b3:b0:82:7b:56:9d:a2:6d:09:
b2:4a:18:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:31:44 2026 by rpki-client