Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
File: gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json)
Hash identifier: nu7945U7iZ+NgF1r84/exJoxv7+/jh8k1/o+q1fmxnA=
Subject key identifier: D3:91:59:72:9D:B2:9C:DE:B9:56:D9:FD:C2:C9:A9:6C:CC:F8:A2:07
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial: 019FA30533B294E8FE5089C8A904896D17B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
Manifest number: 14F3
Signing time: Mon 27 Jul 2026 10:00:54 +0000
Manifest this update: Mon 27 Jul 2026 10:00:54 +0000
Manifest next update: Tue 28 Jul 2026 10:00:54 +0000
Files and hashes: 1: 3CKrmM_5W9qGNwDPT707OalHLD8.roa (hash: 2NaLVNwjCsDKmG9seV4wmBk1JF4GhywwWN0SoFKjTJk=)
2: 8QowToFWOkypHOOmOlay9H9m3cI.roa (hash: FEurkgF3+aXJgB8qUw5KyF+e2MK/WZfbCLqpt4IVc9o=)
3: FV-pMv8EGTaMa6CCbtYT2e9XnxQ.roa (hash: oCIb8FIypKIz4AB8jOeyTjsmMStjtBdK3bvDo7a5vjg=)
4: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: Ds625yC3/UaY9GYAHgnwsHjlvRqSXrlVCorgdW5S6SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:33:b2:94:e8:fe:50:89:c8:a9:04:89:6d:17:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Validity
Not Before: Jul 27 10:00:54 2026 GMT
Not After : Jul 28 10:00:54 2026 GMT
Subject: CN=d39159729db29cdeb956d9fdc2c9a96cccf8a207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:8c:d7:05:73:b0:47:23:91:fc:dd:d4:21:
5c:39:00:0a:6e:28:9c:a7:f1:95:3b:36:43:5e:0a:
2f:4b:6d:b5:f0:7f:53:2e:7a:7c:45:bd:70:77:6b:
7c:8a:dc:97:3c:43:95:33:26:bc:4a:fb:3a:f1:6f:
72:f3:68:ec:8d:70:c9:a1:00:84:9a:44:13:ce:14:
4e:da:71:48:bd:cf:d8:51:0a:c8:dd:81:d1:35:12:
e1:6b:bf:8c:4a:8e:db:0b:f4:22:2a:ce:a2:90:ba:
0b:5b:c0:c0:e7:89:15:83:a6:b8:0d:16:e4:06:bc:
78:20:88:db:e9:bb:c4:54:eb:38:41:b5:71:32:49:
00:f7:a0:9a:5a:83:a6:e6:fd:97:32:55:53:34:5b:
0f:89:fa:61:b3:b6:2d:ba:ae:2a:76:9e:ad:14:f5:
a3:48:b7:f1:e0:9b:0d:67:a1:77:96:cd:1f:a4:cf:
b6:64:60:72:44:d5:77:7a:2b:84:e9:3f:5a:ed:3e:
01:c4:da:24:d5:01:87:2a:2b:8e:33:7d:78:4b:dd:
f4:cf:95:33:8d:fb:72:92:78:97:4f:41:27:2e:e2:
e3:ee:86:60:2b:84:61:66:32:2b:08:da:88:30:12:
af:ab:e6:2f:73:ac:7c:d6:c8:c9:7f:dd:0a:a5:e6:
42:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:91:59:72:9D:B2:9C:DE:B9:56:D9:FD:C2:C9:A9:6C:CC:F8:A2:07
X509v3 Authority Key Identifier:
keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:75:d7:06:5e:95:b4:60:59:38:ba:d2:af:31:53:15:9a:e3:
d6:90:52:88:2b:67:4d:db:6c:46:a5:c8:9c:49:80:32:03:fa:
e7:90:b1:53:6a:71:e7:1a:c4:01:77:82:ce:24:d2:cf:28:9a:
31:6b:7f:2e:11:57:5d:dc:27:19:a1:3f:af:13:a8:a7:cb:c0:
46:c8:e0:9f:32:1a:00:45:e0:6a:62:3a:05:31:c1:de:cc:1e:
3c:2f:d8:bd:ff:d3:ca:cf:c2:30:a8:ea:9b:b6:a4:71:19:3d:
a0:db:fe:68:58:93:57:3c:20:23:25:a8:c5:b4:29:25:8f:72:
cf:d8:3a:79:c7:cf:3f:f0:d7:14:c4:b6:c7:3f:61:37:4a:86:
05:e7:6b:04:cd:28:8d:c7:4c:d9:82:2c:30:95:d3:fe:06:47:
93:ae:2a:e7:42:9f:7c:e9:9a:da:c3:92:c3:33:63:be:c5:58:
0c:25:c0:6a:ce:17:89:4f:7b:cd:e4:d7:9d:2f:6d:d6:26:56:
29:00:ee:b1:bc:42:52:82:94:0a:a1:d1:63:6b:3c:5d:bb:42:
2f:bf:63:e9:83:ce:84:7f:14:5a:2a:77:c4:2b:ee:7e:97:ef:
be:23:34:a1:56:e7:fa:99:0e:e5:bb:ab:1e:32:b4:53:d7:f0:
79:91:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:04:25 2026 by rpki-client