Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: /LLmbGiPGfCJXLTe5WQBG5afc+vYzv4qVwFm9EOJAog=
Subject key identifier: E3:D4:6B:DE:C3:A7:59:C4:F3:40:F1:A9:6A:05:96:34:30:9E:08:FF
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 01A08B30EC428011FC7F53B8BED735381758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 19DA
Signing time: Thu 10 Sep 2026 12:00:34 +0000
Manifest this update: Thu 10 Sep 2026 12:00:34 +0000
Manifest next update: Fri 11 Sep 2026 12:00:34 +0000
Files and hashes: 1: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (hash: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ=)
2: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: iA7iMCOBgbwWS/RyzTr6ImyH++8MIj+mNIaSCdqFH9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:30:ec:42:80:11:fc:7f:53:b8:be:d7:35:38:17:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Sep 10 12:00:34 2026 GMT
Not After : Sep 11 12:00:34 2026 GMT
Subject: CN=e3d46bdec3a759c4f340f1a96a059634309e08ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:e5:10:0c:5f:37:8a:60:73:ac:d2:06:af:
60:03:85:6c:44:47:13:41:c7:c1:fc:6d:78:88:98:
8c:06:19:1a:6c:74:d5:ca:c0:23:d5:30:da:6a:16:
d2:58:4e:45:0c:ec:3f:8b:b1:02:a4:e5:d1:d7:15:
82:0c:ee:33:b9:48:65:80:3c:a6:58:95:ac:ea:fe:
4a:cb:1b:e2:ee:fb:49:c5:be:e9:04:07:8f:e5:22:
e4:33:ba:4c:a6:71:51:d7:d8:5d:02:c8:13:38:10:
24:3c:f0:b8:c3:a3:28:a7:5c:d7:9d:33:4d:80:04:
23:86:05:0f:2f:e4:3a:5c:11:f7:f2:9d:d9:b2:64:
8c:91:2d:1a:db:24:2a:6b:c5:be:e8:c4:31:a0:62:
96:e9:28:69:82:5f:02:79:1c:8b:1e:cc:5b:0f:4f:
fd:c6:ba:11:47:27:5e:be:0b:a2:ff:b1:37:7c:dd:
d9:6b:63:d7:d9:3d:2e:0b:b8:0d:e0:f8:e1:79:5f:
fa:e8:5a:c8:8c:ec:c1:89:c5:b2:d5:3d:bd:66:8d:
13:74:b9:e8:35:74:a3:ed:e5:36:db:fc:76:f1:da:
b9:9c:56:39:14:0f:fd:47:37:cb:93:0c:a5:66:af:
61:a3:c6:3e:60:be:4a:54:f8:0e:f8:33:9c:1b:23:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D4:6B:DE:C3:A7:59:C4:F3:40:F1:A9:6A:05:96:34:30:9E:08:FF
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b3:0b:b7:03:a5:d9:16:2c:09:7d:f1:10:b1:26:54:bf:d2:
2f:98:ba:e3:22:21:35:4b:c0:7e:7c:15:65:1d:4a:af:7c:c6:
ed:ed:95:6a:a6:20:79:28:31:91:03:57:58:04:70:4b:c7:48:
f6:4a:f1:af:f4:50:c2:f8:57:b3:0a:43:da:ba:a6:ef:47:5f:
f5:3e:cb:a0:11:d6:0f:e8:a0:9b:21:bc:a7:81:47:db:7a:b9:
0b:4f:39:48:c9:02:20:bb:de:06:a0:55:cb:21:6a:43:72:65:
f2:82:76:88:2d:19:ad:e2:f5:b4:37:8e:23:f0:44:27:62:ed:
a7:3a:1c:db:81:a9:e8:4b:e5:1b:c9:66:1b:eb:77:27:5f:7e:
87:d4:dd:56:58:9f:7a:b1:32:a9:df:8e:22:fe:67:af:ff:60:
b3:71:5a:96:2f:a4:97:0c:1c:bb:6d:ea:d1:48:5d:1a:59:67:
9c:75:03:5f:84:45:2f:26:5d:c7:75:e8:66:a8:c9:44:13:94:
62:ba:45:e8:c5:a1:90:05:28:9a:0f:af:b5:b6:f0:e4:20:83:
de:69:11:68:9f:0d:ca:fe:42:a7:3b:d3:8e:3c:c9:1b:e7:5a:
d9:91:08:03:01:6f:6e:05:ee:0d:03:ed:22:1e:03:36:d4:fd:
a1:23:7d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:34:44 2026 by rpki-client