Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: 3GfshCkKAYbFN85MSGQI519l3ytzFJyrTwg/FS6TdwY=
Subject key identifier: 84:A1:6E:4E:06:83:63:5B:21:4A:8A:31:8B:B9:31:1E:4D:E5:30:0F
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 019FCE5E1627807B510E59DD58687C800AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0BCB
Signing time: Tue 04 Aug 2026 20:01:40 +0000
Manifest this update: Tue 04 Aug 2026 20:01:40 +0000
Manifest next update: Wed 05 Aug 2026 20:01:40 +0000
Files and hashes: 1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: SkscGgXJK7eGHGwyF/qVlHhn6ItcImgIQD7NeDoQ5cw=)
3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:5e:16:27:80:7b:51:0e:59:dd:58:68:7c:80:0a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Aug 4 20:01:40 2026 GMT
Not After : Aug 5 20:01:40 2026 GMT
Subject: CN=84a16e4e0683635b214a8a318bb9311e4de5300f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:1e:f2:b0:8f:8d:d2:ba:24:3d:d2:ba:bf:
59:de:13:d6:60:7a:7f:6c:ce:fa:27:bd:c8:6f:36:
e8:e1:d8:6f:ba:bb:0b:3e:d7:23:02:77:a8:81:f5:
24:8c:af:b9:1b:43:9f:72:f0:78:bf:96:08:56:59:
73:16:22:b9:19:dd:b1:93:c1:18:8f:f4:7c:7c:72:
58:59:9b:d4:14:3a:bd:4f:77:77:a3:71:f9:9b:05:
bd:eb:8e:ce:4c:c9:f6:1c:39:e0:b7:16:25:42:41:
52:c8:fb:da:ff:8d:6b:f1:44:05:02:44:5c:92:b9:
e0:45:ed:13:10:b3:fa:f2:0e:2c:e0:b9:93:dc:13:
b9:a8:a4:ed:7f:4b:29:2c:05:5c:fa:24:c0:b2:31:
37:62:dc:f5:2b:3b:0d:63:7b:9c:15:1b:b7:ad:f9:
6d:a0:bb:bd:a0:77:11:c3:05:14:dc:e3:17:79:3c:
9e:27:3d:1a:52:aa:fc:23:ce:6c:95:95:cc:dc:c2:
63:4a:85:c5:82:08:91:3e:e9:28:9c:7f:db:df:ee:
99:1b:ed:9d:f5:9e:b1:a7:8d:78:54:c8:40:8e:c9:
4d:2c:ef:32:d7:7d:41:af:3d:11:ce:ff:be:6a:94:
31:60:49:7f:01:81:11:aa:eb:0a:fc:ac:be:14:1a:
db:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A1:6E:4E:06:83:63:5B:21:4A:8A:31:8B:B9:31:1E:4D:E5:30:0F
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ad:99:61:ab:b0:0a:8c:fb:7c:d3:d3:75:d7:8d:62:d0:d3:
58:ba:4a:4d:a1:aa:81:7c:eb:09:2a:c8:7a:9f:0f:fd:4b:3d:
11:02:d0:ff:ba:a6:cc:e3:be:cb:fc:30:00:e0:59:6e:84:c8:
25:68:bb:d0:a6:f4:73:e0:5f:a9:84:20:81:56:af:e0:9d:bf:
78:e9:2a:7b:d3:e5:cd:17:f7:85:6a:ee:b6:eb:ef:62:66:d1:
f9:8d:68:02:21:08:35:ab:55:32:b1:c4:ed:3e:17:3b:e6:42:
be:87:16:b7:d4:49:02:fe:fc:f3:c3:90:59:19:dd:c0:ad:55:
ed:32:c2:82:00:3c:3a:ac:ca:57:d9:8c:cd:31:54:2f:ea:45:
78:ad:17:a2:e6:49:98:9c:fa:0b:93:54:32:ba:b5:2c:c8:b8:
63:73:8e:0d:fb:1b:72:24:65:f8:a7:28:14:2d:8f:22:34:e6:
01:3b:58:8b:10:1a:80:43:ff:ca:67:6c:5c:e5:89:1c:93:a4:
0d:cc:35:7d:cb:65:61:95:5a:57:ca:30:1b:bc:47:c9:1b:60:
9e:75:ee:c3:b2:e5:43:9b:e8:68:62:06:07:b3:73:09:9a:a0:
17:1f:9a:17:8b:3d:f9:7b:e3:3b:76:a1:84:c6:c2:d7:0b:dd:
ae:f8:e0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 23:50:31 2026 by rpki-client