Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
File: gtqmUAcIPsylkSj9XwMdNQMrV0k.mft (raw, json)
Hash identifier: A6QSuG93S1L6jkC79q+T7WrrjSjPr3ViGDbmhwtlhnc=
Subject key identifier: D2:7B:45:96:3C:61:36:62:FE:8F:9F:C5:0F:41:C6:9B:A2:64:D3:A8
Authority key identifier: 82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
Certificate issuer: /CN=82daa65007083ecca59128fd5f031d35032b5749
Certificate serial: 019F89B3BDDFE059F11774DD4A449D5F64A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
Manifest number: CD
Signing time: Wed 22 Jul 2026 12:01:25 +0000
Manifest this update: Wed 22 Jul 2026 12:01:25 +0000
Manifest next update: Thu 23 Jul 2026 12:01:25 +0000
Files and hashes: 1: Qr6lJM203NhFGKZShnscSCdGFno.roa (hash: jbJSkdqG0TP7acpwCoEzRW1DcU+dJ+gbIy2PJggIZmM=)
2: gtqmUAcIPsylkSj9XwMdNQMrV0k.crl (hash: ixrghx362PuKs91XP49rhECmP1hYYPuTMUSRN67MKVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:b3:bd:df:e0:59:f1:17:74:dd:4a:44:9d:5f:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82daa65007083ecca59128fd5f031d35032b5749
Validity
Not Before: Jul 22 12:01:25 2026 GMT
Not After : Jul 23 12:01:25 2026 GMT
Subject: CN=d27b45963c613662fe8f9fc50f41c69ba264d3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e7:2a:45:8b:b1:9a:a3:af:90:4b:03:c3:c6:
8b:90:15:07:40:f8:61:58:ee:1b:f7:99:2d:4c:0f:
96:76:4b:6a:5d:7b:ce:f7:9b:8e:d8:5c:7a:ef:63:
34:33:fe:35:c6:5d:73:1b:4a:59:e6:2c:c8:a4:92:
70:98:b4:4a:38:60:6f:26:90:7f:5c:db:de:65:ea:
fe:0d:e2:e3:81:d6:aa:da:10:18:4f:ea:a2:44:30:
ed:a2:e7:05:85:39:3f:30:94:4f:15:49:ab:2c:fe:
20:28:0a:db:d1:66:d0:0d:a6:4d:4e:40:ba:f1:87:
97:b4:81:dd:08:e3:1d:6b:62:1e:28:e5:8b:62:26:
c2:3f:d5:a5:de:19:3b:e5:e3:ea:da:d8:f2:c0:a8:
b1:bb:ae:48:0c:da:9f:a5:cb:e2:e0:89:da:3a:70:
4d:d8:b5:93:40:de:f5:80:c7:bf:41:37:e7:f8:15:
8f:92:88:84:08:99:f4:d3:14:a0:1c:e9:20:b5:51:
08:c5:7f:0f:89:d2:7b:da:db:bd:f3:a7:5d:bb:20:
b7:8e:50:d5:76:38:c2:1a:93:4a:50:0f:12:04:19:
f8:8c:6f:04:a8:ac:c6:08:43:04:16:04:2b:6f:b8:
55:0e:5b:f3:9e:43:41:dd:14:ec:8d:6b:f6:62:0a:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:45:96:3C:61:36:62:FE:8F:9F:C5:0F:41:C6:9B:A2:64:D3:A8
X509v3 Authority Key Identifier:
keyid:82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:96:a0:5f:c8:19:a8:25:0f:69:a0:42:68:8d:eb:13:eb:8f:
c8:1b:cb:d2:96:48:3a:d0:a8:b1:9b:f7:7d:4a:4f:c0:80:e3:
1d:b1:1a:45:4c:99:7b:b7:fa:11:67:84:c5:72:84:f0:18:6a:
70:e4:8c:1d:3a:f1:e8:04:c3:4c:ab:b2:a3:9a:2e:45:47:02:
58:3d:c5:07:ab:32:5f:7a:d8:5a:a8:d6:68:bb:41:b0:c7:41:
e9:f0:b1:7a:85:e7:67:8a:99:e7:ff:94:73:be:af:2c:e2:20:
15:0f:18:47:f7:78:7b:ca:16:db:3f:ab:2d:6f:dc:97:6c:25:
bd:26:e1:e2:a1:01:42:60:9e:a1:06:4c:31:be:05:1c:a2:a4:
6f:c4:d7:36:08:cb:b2:0e:93:f5:2b:cf:18:c2:fc:8f:55:b5:
f1:b0:0d:94:30:94:46:87:21:2d:33:d5:6f:f7:53:46:8f:f4:
44:ae:d5:04:46:2f:e4:6d:23:95:67:01:6a:a5:ee:0d:14:17:
76:1e:9f:74:4f:38:63:e2:02:35:3d:46:a7:7c:8a:c7:9c:a5:
c1:e0:49:cb:70:f5:5d:94:83:85:e0:36:64:b0:0e:77:c3:64:
d3:ab:28:3b:e8:2c:dc:b5:c1:88:0b:0c:da:5e:77:c8:a6:b9:
9c:0e:26:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:35:32 2026 by rpki-client