Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.mft
File: gFTM2r30q23tum5-vGuFVhIWp8I.mft (raw, json)
Hash identifier: BEAzcFYKkwCoUQjsVlgyouwL+y507aJvnO99RWEhOp0=
Subject key identifier: 64:89:14:A1:AF:87:D2:57:5F:5B:31:0C:EA:F0:9B:EB:0B:9B:95:65
Authority key identifier: 80:54:CC:DA:BD:F4:AB:6D:ED:BA:6E:7E:BC:6B:85:56:12:16:A7:C2
Certificate issuer: /CN=8054ccdabdf4ab6dedba6e7ebc6b85561216a7c2
Certificate serial: 019FA0E0FE2178EDDAFFF18075E8C866895B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFTM2r30q23tum5-vGuFVhIWp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:02:07 +0000
Manifest this update: Mon 27 Jul 2026 00:02:07 +0000
Manifest next update: Tue 28 Jul 2026 00:02:07 +0000
Files and hashes: 1: cSrvIBBg9Bs2xIkNy9xHTScyMPc.roa (hash: qTMbAxvVKSY9LQIKpalsM/DeRx12O22u83d40FQyhIo=)
2: gFTM2r30q23tum5-vGuFVhIWp8I.crl (hash: 2KPVGg5gIkIH8NsL4ZueZUPJ+3rE/Is7ShO3Lb0NCnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFTM2r30q23tum5-vGuFVhIWp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:fe:21:78:ed:da:ff:f1:80:75:e8:c8:66:89:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8054ccdabdf4ab6dedba6e7ebc6b85561216a7c2
Validity
Not Before: Jul 27 00:02:07 2026 GMT
Not After : Jul 28 00:02:07 2026 GMT
Subject: CN=648914a1af87d2575f5b310ceaf09beb0b9b9565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:30:07:64:b3:25:35:a6:30:0c:88:d0:1a:
a7:3b:7f:a7:8d:1b:d4:68:d5:4b:d5:a0:81:a3:5a:
55:74:c9:1d:38:1f:67:1f:09:c8:80:d0:a5:58:04:
95:52:7a:ac:93:eb:8f:08:5a:4b:04:e5:7c:e0:9c:
e8:d1:74:a7:5c:dd:4c:ba:56:59:2d:06:02:d0:ac:
14:2b:90:b7:e1:85:d5:aa:29:0f:5e:fb:b9:47:28:
63:85:d9:ba:c7:c5:63:02:91:74:22:f9:83:09:60:
3c:82:97:ad:1c:db:d9:65:39:f7:41:f0:2e:95:df:
13:31:5d:cf:94:2b:ce:9f:7c:c0:43:13:5c:6b:38:
61:0d:7c:58:f4:26:dc:92:c2:71:e9:3f:b9:53:ef:
91:e6:fb:ef:a1:78:08:8e:83:cb:80:97:39:d2:d1:
31:1c:1c:54:ea:6a:db:8c:43:62:24:7c:14:e8:95:
db:6d:3f:0d:74:d5:0f:30:ff:8e:75:a1:4f:50:c0:
da:c8:78:06:90:76:f8:d1:83:b2:61:89:33:66:9c:
7b:83:d9:83:d4:ee:0e:47:dc:40:d6:d4:c3:8e:60:
12:f7:36:da:52:ee:b4:35:cd:ee:ed:9f:62:bb:bd:
7c:d4:b4:e9:cb:74:da:01:bf:4b:d3:d1:bd:52:61:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:89:14:A1:AF:87:D2:57:5F:5B:31:0C:EA:F0:9B:EB:0B:9B:95:65
X509v3 Authority Key Identifier:
keyid:80:54:CC:DA:BD:F4:AB:6D:ED:BA:6E:7E:BC:6B:85:56:12:16:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFTM2r30q23tum5-vGuFVhIWp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e2:de:a4:f2:25:25:4a:c9:62:61:70:98:a2:bf:7d:78:b0:
a6:47:fe:d0:a5:db:b8:c8:df:25:f0:20:89:ea:7b:7d:23:24:
0d:d3:23:ed:02:bf:fd:96:3d:fe:d4:fe:be:d4:55:8f:d1:06:
7d:8d:22:3a:6f:57:c8:a8:cf:71:7f:c5:1f:75:ec:1d:02:98:
29:6c:ec:7b:e8:40:b9:30:21:34:02:c8:3e:55:09:f3:8d:eb:
89:26:ae:4f:68:fe:d2:e0:4d:24:3a:5e:da:84:96:fe:0b:5c:
0a:ba:9f:51:ee:12:c5:9d:79:28:50:54:6b:d5:5a:c5:8d:c7:
74:d7:0c:e0:67:b2:10:be:94:1e:03:b1:39:8d:cf:79:ac:0b:
d3:76:45:c4:17:5b:a6:f4:33:ae:c5:7a:b2:54:7c:38:ef:29:
c5:cf:e2:e9:28:8b:c7:67:fa:55:2b:7a:dc:03:f5:3b:b4:61:
58:58:ef:73:82:0b:96:9b:97:6c:0c:5e:8c:76:88:bf:1a:b2:
97:2c:ac:01:ce:6d:3f:42:69:6a:5c:8c:37:de:c3:7c:55:49:
a7:83:ad:1e:36:f1:c3:ea:b5:e5:7f:eb:86:d9:c0:4d:8d:99:
90:b9:88:5d:81:b4:89:ab:5e:63:b0:48:a9:73:cd:ff:fd:9e:
a8:53:76:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:24:22 2026 by rpki-client