Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: /1Y8Gzr8VV/g0lLxkgb3t8D/JCII177poWhYsfQCAsM=
Subject key identifier: 18:3B:22:3C:84:74:54:FE:D1:6F:F4:EC:83:27:A0:ED:63:58:6F:13
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 019FAB62EAA064F274EF95AFEB99F862852C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 03F5
Signing time: Wed 29 Jul 2026 01:00:14 +0000
Manifest this update: Wed 29 Jul 2026 01:00:14 +0000
Manifest next update: Thu 30 Jul 2026 01:00:14 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: Kk9sxJfh2QRyQgSnE46b82IPylSBYoPmioWQfIHlsVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:62:ea:a0:64:f2:74:ef:95:af:eb:99:f8:62:85:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Jul 29 01:00:14 2026 GMT
Not After : Jul 30 01:00:14 2026 GMT
Subject: CN=183b223c847454fed16ff4ec8327a0ed63586f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a8:84:ce:c4:08:a2:35:e1:74:cd:ef:60:75:
78:8b:93:57:8e:b2:ea:fb:31:59:8a:1c:35:d7:12:
e7:b8:47:d7:0e:4e:6e:9a:bf:8d:d3:ac:2e:ab:89:
a1:4d:6d:47:3e:bf:d3:8b:01:31:2c:f1:5b:4d:5e:
d2:2a:f5:8d:af:3c:65:39:6d:8f:23:af:6a:6d:92:
b8:e3:a8:7b:07:df:41:f4:83:03:a8:39:86:5d:44:
90:a0:3b:97:b3:1b:02:21:9b:9b:b0:bc:9c:1d:ca:
41:99:80:6d:92:03:24:d0:69:a1:a3:87:eb:09:77:
e0:0a:08:30:82:0f:fb:a5:44:1b:d3:b1:88:a9:15:
41:d9:d9:78:1f:39:51:5d:df:c7:b1:2b:52:fe:b1:
c0:09:63:c1:dd:4c:9c:f6:03:59:bc:09:56:86:b2:
7b:9a:3e:46:c9:09:8d:42:e9:fa:ef:74:e5:cf:59:
dd:6f:6e:0c:b2:92:0e:44:91:e2:70:05:8f:34:a1:
94:cd:0a:50:91:63:13:ca:d5:39:0d:4a:bd:ee:b6:
cb:72:68:da:78:09:58:ed:a2:41:d8:5f:8b:80:ac:
dd:7a:f5:e7:c8:67:10:cc:24:7b:78:38:ed:5f:6e:
ff:88:4b:f9:fe:01:8b:7f:2b:cf:b9:bc:00:ec:81:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3B:22:3C:84:74:54:FE:D1:6F:F4:EC:83:27:A0:ED:63:58:6F:13
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c4:ba:df:8e:b6:59:9a:ef:e2:95:a3:46:ca:9d:d8:e5:03:
90:a4:78:7c:99:25:72:dc:cf:40:04:af:31:64:31:79:24:78:
89:06:6a:a1:10:6c:e0:de:26:c0:bf:5f:15:e0:1e:33:78:b5:
ba:c8:2c:2e:1b:61:04:54:00:af:05:91:17:3e:b4:0c:08:17:
ae:38:8f:4b:3d:73:04:2d:94:31:6a:e1:59:3f:e2:ac:6f:60:
f3:2d:38:29:c9:46:a6:47:41:98:86:ec:93:da:de:48:39:00:
33:8f:fd:a7:d7:6e:a0:36:a6:2f:41:f3:1a:91:dd:bb:79:59:
bc:2f:c0:a2:35:81:9a:e6:c1:9e:88:89:5b:28:13:0c:ba:8f:
39:5c:70:82:e2:ef:66:a4:41:ae:d7:bb:74:2d:bd:47:ec:84:
c1:46:7f:e8:01:31:46:fa:de:8b:4e:bf:c0:10:32:ce:78:de:
39:5b:33:20:bf:40:08:94:8c:ad:82:91:cd:60:a1:39:cb:0c:
37:04:46:5f:95:8c:6b:99:39:2d:58:62:e7:54:a9:13:81:e2:
e5:4d:ac:78:42:60:e0:a3:76:66:4a:9a:a8:af:c2:0b:f6:cf:
09:f1:02:60:58:13:90:11:b8:0f:6e:db:3a:6a:45:9a:d2:93:
fd:55:6e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:45 2026 by rpki-client