Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
File: gh8Shdd1qfWJJD6shErcWridl8k.mft (raw, json)
Hash identifier: dRgICZ5Si37+lFzEOlu/iX0/+xL64jeH3+FkTu/4DWc=
Subject key identifier: B0:F8:0B:B4:85:82:62:38:14:EA:7C:55:80:22:E7:DC:97:3F:03:EE
Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
Certificate issuer: /CN=821f1285d775a9f589243eac844adc5ab89d97c9
Certificate serial: 019FAC07F2461125590CE3ECDE8B690F678C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
Manifest number: 0E79
Signing time: Wed 29 Jul 2026 04:00:29 +0000
Manifest this update: Wed 29 Jul 2026 04:00:29 +0000
Manifest next update: Thu 30 Jul 2026 04:00:29 +0000
Files and hashes: 1: Ken1-UyKUV7K-ivTPRx21HrB1go.roa (hash: SzlYiDowE9Ts27wto98BsM6+plGlLtF6xf2nTMUOAKI=)
2: dGmTMuCLcokZ_dpzsnFglotPhbE.roa (hash: xS9B/n1G06zo3aHFhFfNBhI/mXvOeeGrRH7j7PtD+Q0=)
3: gh8Shdd1qfWJJD6shErcWridl8k.crl (hash: w3ZCwoIXO+VlV2GEg0wSS2tEKGyt22Ou/xiJ/cYpFTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:f2:46:11:25:59:0c:e3:ec:de:8b:69:0f:67:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9
Validity
Not Before: Jul 29 04:00:29 2026 GMT
Not After : Jul 30 04:00:29 2026 GMT
Subject: CN=b0f80bb48582623814ea7c558022e7dc973f03ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:80:13:70:4b:0d:51:56:41:63:e2:8c:ca:
5b:b9:08:e1:c6:e8:42:77:36:81:dc:46:f3:d7:34:
40:c8:df:a0:88:dc:d0:77:c2:a7:eb:4a:d3:32:0a:
ac:f3:b2:9b:d4:39:2b:67:a6:98:27:fc:75:3d:7b:
bc:7d:0c:b1:49:b6:9d:6b:32:d5:99:8e:98:23:2b:
c7:b6:44:f8:85:5d:f7:f7:8c:ad:1e:f2:d3:72:dc:
da:8e:49:90:bc:84:b3:d8:d6:09:fb:36:e7:ee:12:
ce:6c:15:c1:61:bd:9b:2f:0b:f1:97:a9:ac:f1:92:
08:f7:c9:c1:5a:0c:f5:71:d4:84:96:03:93:7b:42:
85:04:b1:7d:c5:07:31:c9:99:49:7c:a8:f1:d6:6f:
6c:94:36:ee:a8:77:a6:b2:60:8e:b0:24:64:b5:64:
ab:61:3c:4f:59:c3:c9:4d:c6:ff:99:21:29:8b:64:
36:38:be:8a:59:d0:c3:78:31:44:60:0c:cf:b9:42:
1e:3c:6a:a8:ad:e7:3e:f9:05:63:fe:9c:77:e1:a3:
1a:a3:41:2b:7a:d3:12:0b:90:eb:c8:45:ff:23:28:
9f:59:fa:07:fc:02:02:d7:ac:08:f7:19:e6:e9:97:
1c:46:39:ea:73:75:a5:3e:cd:d9:2c:a9:c1:b6:4f:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F8:0B:B4:85:82:62:38:14:EA:7C:55:80:22:E7:DC:97:3F:03:EE
X509v3 Authority Key Identifier:
keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cc:a9:1b:e8:e7:ba:fb:ae:fb:a8:86:de:8d:a6:b1:b6:d3:
ca:76:91:89:45:31:a2:2c:03:e2:9f:e2:8b:22:cc:b0:18:f6:
e1:15:6a:d4:2c:0e:e4:65:cc:d3:ba:48:40:71:dd:38:96:de:
9e:03:ef:4d:4c:81:ce:65:f5:a9:3c:a3:7b:82:b9:7f:be:ba:
21:46:04:dd:fa:10:d6:0b:f7:3a:03:2d:97:4a:1c:41:17:59:
cb:7c:3e:30:31:a3:7e:da:a0:c6:33:83:49:e1:81:a9:c7:44:
d1:33:a6:5a:11:19:22:6e:8c:14:ff:29:19:c1:35:b8:f5:18:
3a:9f:e8:b4:8c:90:e2:89:ff:26:29:57:d4:06:ec:df:d5:9a:
73:56:4d:38:91:09:fc:37:01:5b:d4:ce:32:50:b3:fe:4f:73:
4f:68:cb:4d:4e:eb:1e:81:00:11:e7:52:5e:76:53:e6:57:71:
c0:93:e0:e7:0d:59:14:d6:c2:e4:d1:11:18:96:62:0f:e3:e3:
75:e2:ce:c6:c5:5c:fb:3c:d6:5e:a8:59:e4:4e:28:21:c9:e7:
c2:0b:7a:f6:78:4c:2f:b4:7f:d6:48:f8:cc:9d:9f:25:b2:c8:
b8:06:79:46:fa:87:ee:19:66:0d:4f:2d:71:a5:53:5a:b5:e2:
85:1b:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:30:50 2026 by rpki-client