Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
File: Gu0CBP9R8olCGFT6YrPCMcNer2w.mft (raw, json)
Hash identifier: CUFKQUvC1KD5xqw5d5ZKZs9amRTTgOg4QcTBfzRg1eY=
Subject key identifier: F9:26:65:3F:4E:12:F0:8E:09:B9:E9:F1:27:63:43:3A:6D:1E:D4:26
Authority key identifier: 1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
Certificate issuer: /CN=1aed0204ff51f289421854fa62b3c231c35eaf6c
Certificate serial: 019F3897CEB6F3E998B7DD1EFB6D8978CC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
Manifest number: 12
Signing time: Mon 06 Jul 2026 18:01:40 +0000
Manifest this update: Mon 06 Jul 2026 18:01:40 +0000
Manifest next update: Tue 07 Jul 2026 18:01:40 +0000
Files and hashes: 1: Gu0CBP9R8olCGFT6YrPCMcNer2w.crl (hash: QeI0Zh9MFkd8sEhxXJFfVax8asnIdqENSqbalL5mQ/E=)
2: MXiJymlWnPv8K0_SYeg14AvCims.roa (hash: VJrJz4Yf0xl1z5pYVZXPPsSfyBh8RWLcRUu/3SlQW5M=)
3: TSXqej0WW_9xcvEDJRvBI7pt5LE.roa (hash: ZTp/vNt08nHTq/Tb6B374ia403187ADNP0tAFEOnaq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:97:ce:b6:f3:e9:98:b7:dd:1e:fb:6d:89:78:cc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aed0204ff51f289421854fa62b3c231c35eaf6c
Validity
Not Before: Jul 6 18:01:40 2026 GMT
Not After : Jul 7 18:01:40 2026 GMT
Subject: CN=f926653f4e12f08e09b9e9f12763433a6d1ed426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:e1:e3:45:e0:2c:d3:4b:e2:38:62:92:e2:
c3:55:50:88:ed:76:04:5b:af:1b:4d:36:e4:7d:f1:
5a:d6:6a:7f:7e:d7:3a:75:8a:e1:1e:12:69:3a:22:
9f:ce:e4:88:9f:a1:31:6d:b7:1e:58:0e:26:16:b1:
89:72:60:ef:0a:2d:d7:48:49:21:63:a9:35:61:dc:
a2:96:51:a6:95:b3:ae:25:0f:a5:cf:08:e2:ef:5d:
1d:94:7a:7e:c1:56:97:c1:88:b7:59:f0:df:27:9c:
5a:8d:03:c2:d4:e3:22:7e:8e:48:86:7f:d0:ff:f1:
40:9b:d8:6a:8e:bb:83:7f:27:be:d6:bd:4a:6d:92:
42:75:54:b7:af:99:72:a6:e0:07:f2:2c:8a:c6:07:
6c:2a:0c:5d:3d:4e:53:43:18:3a:3f:6e:98:74:ae:
1c:2f:09:2a:c6:73:77:43:c0:0f:3e:1b:0b:df:92:
1a:a2:ca:88:b1:93:2b:83:09:9f:1e:b5:d5:51:e1:
89:c9:e9:9e:93:9d:db:43:63:bc:08:92:b4:32:c2:
41:5a:00:2b:26:2c:9d:c3:79:d4:9a:35:7c:9a:18:
8d:12:e6:dc:42:ef:dd:f8:a8:5d:4e:4c:f0:32:0e:
23:9c:1e:40:43:80:0c:5f:5c:9d:42:dc:52:87:1f:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:26:65:3F:4E:12:F0:8E:09:B9:E9:F1:27:63:43:3A:6D:1E:D4:26
X509v3 Authority Key Identifier:
keyid:1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:98:a0:81:df:2d:46:12:5a:a2:c1:54:f3:cb:a0:fd:66:0f:
70:d0:2a:7c:fe:b1:e8:e6:6c:68:92:ff:da:fa:90:d0:50:e9:
a7:6e:bd:8f:68:c3:7e:06:1f:c2:aa:9f:d2:d6:52:55:d1:fd:
c9:64:85:ab:81:94:cc:80:2c:41:82:35:3f:6d:ca:da:00:aa:
ee:24:28:d7:83:54:81:9f:2e:43:6d:79:ce:ef:82:3a:91:cc:
ae:67:4a:de:86:93:06:f0:b2:33:93:24:a9:c7:d5:37:28:90:
40:67:56:ae:f0:fa:8c:d0:74:d1:07:81:40:96:e3:e1:01:17:
1a:35:3c:6c:4e:65:32:2e:e9:be:62:0a:b3:c2:53:30:89:cd:
bc:b3:5a:f2:45:e7:f6:74:b7:a0:be:91:3a:73:7e:86:36:af:
13:06:48:45:bd:13:63:20:46:5a:99:a9:bb:dd:1e:a0:e2:ce:
5b:45:3a:57:08:17:e6:30:1a:84:51:c7:7a:1a:7e:4f:b7:c1:
82:7d:ca:1e:79:e5:2c:5b:f7:aa:0a:fe:8c:5e:3b:63:c3:bb:
05:28:c2:79:ba:97:41:8a:4d:58:f5:61:2f:ec:26:42:10:63:
67:db:8a:2f:7d:90:95:78:8d:2b:63:a0:fb:b0:1f:1f:fb:57:
d6:56:a1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:17:27 2026 by rpki-client