Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: /Qpb3fwWS8vNjNhlXEDFSwEP185S1eA4TvTAvo2wemQ=
Subject key identifier: A5:9E:D4:A6:D7:A0:86:FE:DA:56:A4:C0:67:6D:A2:F3:8B:92:29:59
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 019FA898D32D584DDFB40B0612FFE9F57FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0DEB
Signing time: Tue 28 Jul 2026 12:00:15 +0000
Manifest this update: Tue 28 Jul 2026 12:00:15 +0000
Manifest next update: Wed 29 Jul 2026 12:00:15 +0000
Files and hashes: 1: TtXo5-QRvXwKIgknKnZ4_4t2vL8.roa (hash: mXHeMxujxsacK8/QlflktbO+DxAXX0UCko2MtIwDM0I=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: diUvLFx1TZ8wIil1OQc7thwcYwJSaKH1rdesM5XuSRY=)
3: pbTK5peLIyvXvbiyDRGHdQgVdNA.asa (hash: Wtfdhvq2K7gS1UXNM4URBttcFhHoJO+q7bKyWG4w/Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:d3:2d:58:4d:df:b4:0b:06:12:ff:e9:f5:7f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Jul 28 12:00:15 2026 GMT
Not After : Jul 29 12:00:15 2026 GMT
Subject: CN=a59ed4a6d7a086feda56a4c0676da2f38b922959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b1:17:3f:67:0f:04:0d:ac:3b:64:7a:f5:3f:
e8:16:e8:54:05:1b:68:a6:c9:50:37:48:9d:4d:80:
21:04:e5:d7:5d:e7:26:78:40:ec:00:4d:60:26:ab:
f6:b1:9f:e2:df:c4:0d:24:38:08:80:6a:75:02:25:
d1:b8:29:51:e1:a6:ad:1f:88:c7:52:83:ca:82:c3:
f1:d1:3c:71:e3:92:eb:12:2e:52:bb:1e:d2:66:39:
15:db:59:1c:90:c7:51:f2:99:21:c2:c0:f7:31:0c:
49:fd:3d:20:d6:36:75:e8:47:e1:70:8a:c1:28:27:
25:c7:c3:8d:13:d5:6a:40:64:59:a9:19:6a:cf:03:
d0:a2:ae:a7:58:68:57:a4:08:7a:16:2f:da:61:a2:
e1:de:ee:61:19:37:70:4a:54:11:d5:17:3a:eb:c9:
11:ba:57:85:2d:4a:ca:3d:59:ec:48:19:db:67:78:
35:1c:2f:45:12:42:ad:a9:25:95:0c:1e:e4:d9:b8:
ce:31:ca:77:9a:3a:4a:c5:f9:fd:03:d4:a3:7f:50:
67:27:45:dc:eb:87:62:b5:fc:41:a9:40:77:e5:e6:
77:08:a3:eb:81:fe:c9:4e:ac:6e:41:79:ad:39:e5:
f3:78:7a:7a:8f:d8:f0:b7:1d:63:c6:6a:79:c1:ca:
8c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9E:D4:A6:D7:A0:86:FE:DA:56:A4:C0:67:6D:A2:F3:8B:92:29:59
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c0:0a:1e:a8:a6:f2:cd:cd:eb:cb:68:63:fe:6c:c5:15:be:
8f:25:11:bd:d4:a6:31:53:ba:74:97:d5:40:48:00:6f:31:b0:
99:c3:85:8f:11:76:9b:85:6a:35:97:d8:58:43:3a:f5:f3:48:
e7:1d:fb:18:a0:df:05:53:a5:e4:23:d5:80:dd:10:4a:11:57:
59:40:cb:e1:a7:c7:e0:38:ff:19:33:e6:14:56:68:ac:4c:e1:
6a:cd:a3:1a:76:44:d3:5b:2f:8c:30:48:42:79:67:af:e4:9e:
fa:ae:e7:79:46:54:74:24:3b:98:12:65:eb:18:51:43:fd:f5:
15:63:8f:2c:aa:0a:42:4d:d9:7f:8e:5b:b2:8f:0b:2f:0f:fa:
cc:6f:21:c2:d2:a1:93:3d:e6:3a:58:83:0b:1b:9a:f3:71:46:
bf:02:1f:67:39:4b:e0:d6:38:74:43:c3:5c:81:40:28:f5:e6:
c2:a5:9f:29:3d:dc:75:32:ed:0e:25:6c:fe:c1:49:c1:ba:fd:
da:a0:a8:46:7e:4e:e5:d2:6e:45:b6:9d:f7:0d:47:b5:04:2d:
20:43:96:7f:db:1e:45:99:a4:68:7b:d2:d6:fc:67:06:89:30:
70:d8:5f:1b:f3:a1:73:52:a9:4c:a6:e9:a1:e9:aa:13:3b:fa:
a2:c8:27:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:23 2026 by rpki-client