
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
File: GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft (raw, json)
Hash identifier: fZOIR45SQXK9HypvkY2DFxjO8UA3c3nsbD1SgFn9CRw=
Subject key identifier: F4:45:E8:A2:E9:5F:4D:6E:C7:9F:A3:D0:83:1E:15:80:C6:AC:28:FD
Authority key identifier: 1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
Certificate issuer: /CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Certificate serial: 019FAC083CC40FC3D76B095E9BCF52573905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
Manifest number: BC
Signing time: Wed 29 Jul 2026 04:00:48 +0000
Manifest this update: Wed 29 Jul 2026 04:00:48 +0000
Manifest next update: Thu 30 Jul 2026 04:00:48 +0000
Files and hashes: 1: GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl (hash: cB6ChofFxG5DwQN3vwlKGCPo97ZM8ZBYEj44W6GSpcQ=)
2: zr6qOC2iZhYMAkfVEjFaWAW3Gdg.roa (hash: rfGt0EQo3cdc8IHh8jz9o2EgRv1qNBw2XAoGV+8jWOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:3c:c4:0f:c3:d7:6b:09:5e:9b:cf:52:57:39:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Validity
Not Before: Jul 29 04:00:48 2026 GMT
Not After : Jul 30 04:00:48 2026 GMT
Subject: CN=f445e8a2e95f4d6ec79fa3d0831e1580c6ac28fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:1a:22:db:e2:47:12:d3:52:3c:b5:96:85:
e3:73:dc:54:2e:e8:0c:10:1a:dd:df:74:60:b2:9b:
db:78:92:cf:eb:82:c0:8e:3b:db:30:f9:a3:e9:42:
27:07:47:5a:1c:1b:02:7d:75:60:3f:de:ef:57:1f:
d7:d0:ef:82:8f:2b:92:5b:07:ac:6d:0f:4d:d4:fb:
5e:81:aa:3d:fb:33:99:18:7b:d5:65:c3:4b:d8:0a:
39:ea:e9:cf:7c:b7:f6:6c:04:48:fe:0e:b6:96:f2:
78:2d:b9:61:58:72:87:69:04:c3:0e:db:5d:51:39:
1a:31:96:db:db:f6:ee:10:3b:3a:0f:58:0a:2c:44:
50:77:7f:f9:2a:a8:ba:7b:ea:99:b2:55:02:a7:65:
64:6e:96:c6:60:1e:16:a8:00:88:3d:c7:6a:04:7c:
54:4b:ae:74:d6:81:d2:65:72:65:c0:99:43:4f:a2:
80:41:cb:d7:d3:38:85:e7:d1:0c:6b:5c:06:25:f6:
05:87:09:8e:a3:ee:84:25:3d:2d:84:94:54:91:b1:
b0:66:5d:18:02:b5:39:6b:19:55:ca:22:b3:4a:bc:
59:21:b5:72:b8:c3:5b:26:9b:3b:c9:37:8f:d0:13:
8a:3a:62:8a:8b:fa:64:84:b6:9b:ab:e3:be:0b:2e:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:45:E8:A2:E9:5F:4D:6E:C7:9F:A3:D0:83:1E:15:80:C6:AC:28:FD
X509v3 Authority Key Identifier:
keyid:1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:82:a9:12:63:d6:0b:4e:c8:c5:dd:e5:d6:12:6b:47:19:84:
f0:18:c3:dd:b0:61:ba:8f:e8:65:79:72:c6:1a:b1:7a:be:fc:
d0:9a:d9:08:9b:a7:22:b2:7f:98:32:53:96:f0:bb:4e:1f:f7:
20:e5:4b:f9:0f:de:2a:d0:24:1d:f8:11:ef:11:ab:63:7c:c7:
a6:ec:1d:dc:a8:35:71:d4:b7:11:30:eb:03:a6:66:0a:19:06:
fc:f1:9f:1d:47:80:d1:60:74:8c:2d:a3:4b:68:1f:5c:5f:64:
ff:02:13:70:ae:fa:10:4d:4d:36:52:a2:91:aa:d9:6a:0d:28:
7d:bb:89:71:cc:3b:cc:e2:79:57:9d:7a:11:a5:78:a7:4a:cc:
7c:c7:6a:48:59:19:6b:0e:f0:6a:25:b8:af:1c:71:9f:37:5e:
fb:88:4b:36:16:c3:5b:0d:42:ee:12:73:ad:41:c9:7d:47:de:
1c:3b:7b:06:f4:19:65:af:e3:11:1e:0e:22:3e:dc:63:26:50:
f9:51:34:29:af:48:92:eb:0a:77:e7:2c:68:35:02:a7:15:e9:
b0:c6:64:74:8a:5c:bd:8b:f3:4d:e5:fc:e7:c3:39:07:4b:05:
81:2d:50:82:1a:b6:5d:b4:21:40:a2:90:f0:4a:1e:32:8e:99:
8f:9f:31:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:02 2026 by rpki-client