Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
File: gIBkPxusC6RJkhdbr7bFlTxz3iw.mft (raw, json)
Hash identifier: DPej1k3xaMiFsfRqPrkqq0AKXOdi4AgXXyE6Nv8F1lQ=
Subject key identifier: 52:3C:81:86:AF:48:E7:6B:F8:FC:21:34:F0:0F:BA:9F:E1:DF:80:CB
Authority key identifier: 80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
Certificate issuer: /CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Certificate serial: 019F867B2DFB648B4A7CAA8DF845DAAD44EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
Manifest number: 0280
Signing time: Tue 21 Jul 2026 21:00:47 +0000
Manifest this update: Tue 21 Jul 2026 21:00:47 +0000
Manifest next update: Wed 22 Jul 2026 21:00:47 +0000
Files and hashes: 1: gIBkPxusC6RJkhdbr7bFlTxz3iw.crl (hash: Ne3d1j7gWqDlkRxTK9R9Kicsm8t0fd5nOlrUhSawnP0=)
2: yeVF8Df3VPcnjSBNmqzoVDfx_BA.asa (hash: q/aLmgYWUuh1D94V+T+v2Y5wHbMtBtOfdm/5xzlYGS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7b:2d:fb:64:8b:4a:7c:aa:8d:f8:45:da:ad:44:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Validity
Not Before: Jul 21 21:00:47 2026 GMT
Not After : Jul 22 21:00:47 2026 GMT
Subject: CN=523c8186af48e76bf8fc2134f00fba9fe1df80cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:ec:cc:33:b2:72:66:1a:c6:0e:d5:34:ee:
f8:e7:c8:27:66:17:4b:77:aa:40:58:a3:16:d4:cc:
c0:c8:65:41:a7:da:56:5f:8a:c4:cf:fc:fb:3f:c6:
0f:0b:59:76:e6:6c:ca:83:de:d7:8c:c7:ea:47:34:
cc:a2:8a:08:01:52:dc:1b:cf:a4:16:fb:c6:18:7f:
1d:aa:38:8a:5b:4b:01:f9:ff:bb:8f:94:a5:35:d9:
fc:46:24:df:28:26:b2:fd:1b:c7:09:f7:16:3f:f6:
4a:40:07:8f:7d:61:f9:bd:82:82:70:23:67:35:bb:
0c:66:53:8f:41:60:be:3e:73:82:cf:f9:1b:e6:03:
72:b8:d3:ff:a0:e0:bc:84:7c:33:f4:39:40:5f:07:
7c:89:c9:24:fb:a2:83:15:6c:23:a0:57:55:51:fd:
d7:73:8b:dd:52:61:d3:9a:ba:7a:8c:8e:d6:74:1c:
b9:90:b5:b9:2b:88:ce:32:20:01:64:0e:8e:53:9c:
c9:56:46:87:69:46:55:07:47:77:a1:7d:4f:09:fd:
ff:b4:76:8d:2b:e2:c9:b1:91:be:31:9e:bd:56:c9:
c2:b9:a4:bb:65:55:b2:82:e4:fd:13:38:a8:c3:2b:
02:8e:71:6b:41:f7:e2:ff:af:a1:e3:f8:b1:03:72:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3C:81:86:AF:48:E7:6B:F8:FC:21:34:F0:0F:BA:9F:E1:DF:80:CB
X509v3 Authority Key Identifier:
keyid:80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:96:ae:ce:a1:ab:61:cc:2b:c2:2e:ea:bd:47:1f:36:06:ea:
41:7c:04:9a:4a:d0:2b:26:1b:d8:90:53:71:d3:24:64:e6:73:
5f:dd:63:17:c1:fa:47:9e:f8:06:e0:6a:b9:37:35:d2:2e:c0:
f7:41:c4:01:d3:3c:bb:7b:33:a6:d4:f9:c0:e5:b1:85:60:ba:
a4:69:55:39:7d:17:77:8e:07:10:23:dd:44:d9:88:80:fb:5f:
84:44:6d:a8:cf:1c:7a:25:71:68:25:07:8a:9e:15:b6:de:28:
b1:df:12:fd:48:e4:ae:58:39:56:0a:2e:66:8b:12:bc:6a:12:
21:7d:51:53:66:e7:29:20:78:b9:80:cb:b6:7d:68:56:fa:e3:
92:0f:b0:da:47:16:53:46:e1:57:b5:0b:1c:a2:4f:85:18:74:
50:68:26:b7:b2:3e:a3:6b:0e:42:66:b7:ad:c8:2a:4d:09:12:
d9:14:e1:1d:eb:58:e3:40:67:df:e1:37:2e:cf:a3:22:f4:8a:
c4:13:66:97:9d:ad:2a:e4:ed:13:28:14:5a:61:a0:f3:30:0a:
7e:b4:19:99:dc:b5:5d:15:a5:c8:57:ef:d9:ae:ef:79:ca:0d:
83:c8:3c:36:86:9f:1d:8c:00:c1:47:60:b6:46:46:c2:7a:76:
36:1d:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:15:28 2026 by rpki-client