Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier: tGbosXEaOVn2uuqmG66wmuLCi1GnrJlI2IfWSGlq1YY=
Subject key identifier: 94:9D:B9:6E:B4:79:39:BB:51:94:71:A7:AA:14:60:F6:FA:45:56:7C
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 019FAA882B96175322AF4A32D5A840E22DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 21:01:18 +0000
Manifest this update: Tue 28 Jul 2026 21:01:18 +0000
Manifest next update: Wed 29 Jul 2026 21:01:18 +0000
Files and hashes: 1: 75SRw9aNyewbtPYAMH8et8hfSr4.roa (hash: Ef79opNAcjrl49Rm2x5OxhpX27NyaA68e2jdXKrtpHA=)
2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: q/AFdhcApZRaBqAL4dB2Wn0ehUBz876OTwK2axkBfU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:2b:96:17:53:22:af:4a:32:d5:a8:40:e2:2d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: Jul 28 21:01:18 2026 GMT
Not After : Jul 29 21:01:18 2026 GMT
Subject: CN=949db96eb47939bb519471a7aa1460f6fa45567c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:85:5b:47:79:14:14:c9:fc:ac:2d:e0:0f:
22:36:6b:1a:55:38:42:4c:28:19:b4:f8:47:61:37:
cf:a1:5d:97:85:2d:68:99:b6:cd:03:cc:ac:bb:c6:
fd:05:23:49:39:31:c7:7b:cb:66:61:cd:da:0b:15:
22:d0:a6:3e:57:77:cd:76:07:35:0e:67:4e:60:0e:
0d:16:25:81:c9:19:50:9a:53:18:0e:e9:4a:51:83:
2c:86:b6:64:ed:5a:2b:71:8a:94:6b:a0:fb:a1:76:
2a:9d:19:00:c1:b2:ce:44:9e:f6:9c:47:ed:78:59:
ff:66:8d:fd:a2:78:30:4a:7c:fc:77:dc:56:79:f9:
6a:ae:f3:5b:01:47:dc:24:c6:2c:3f:59:da:d9:d8:
30:e7:7c:16:a2:1e:f9:fb:76:69:f7:d1:89:d3:2a:
cd:d4:18:2c:0b:d2:62:2b:1b:92:0d:15:14:81:aa:
9e:bb:63:38:96:a6:08:2c:4e:57:ee:78:d5:e1:bf:
7d:8a:58:69:cd:67:97:a0:0c:b7:8f:1e:d0:2f:fd:
d2:3d:00:27:da:20:3b:c9:dd:bf:d9:2f:29:84:5c:
9b:15:78:f8:23:72:09:ef:6d:17:ff:15:c9:f6:c5:
25:54:92:2f:5a:68:09:77:af:d3:c7:8b:b2:b3:10:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9D:B9:6E:B4:79:39:BB:51:94:71:A7:AA:14:60:F6:FA:45:56:7C
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:da:aa:3b:6e:2b:ea:7d:78:22:80:55:cf:06:5f:78:68:0e:
f4:d8:28:78:88:a6:f1:62:61:73:23:ca:8e:76:92:4c:50:b3:
6c:c5:a6:ad:b0:00:78:03:03:7e:31:6c:64:c4:9e:2c:e0:ac:
86:81:5d:5a:32:8f:c7:db:b5:65:8e:a6:c3:3d:7b:a1:df:84:
b5:d3:61:05:94:d3:ce:01:6d:62:93:21:0e:ac:2c:42:c7:61:
a2:64:59:d1:37:84:15:bd:10:da:8c:a4:12:74:f2:e3:cb:e8:
48:e8:6f:d9:88:b8:e2:66:86:0e:70:c9:54:c8:ca:e5:4c:74:
30:75:db:90:18:bd:33:e9:cb:b7:74:b2:94:03:31:a2:2f:4f:
13:d1:c1:79:70:22:40:f7:c4:30:69:c9:22:1c:68:4f:f0:b3:
de:e5:3b:53:85:d7:98:b3:a3:87:82:11:85:19:f2:8a:33:53:
19:39:1e:41:c7:04:50:ab:11:6a:56:47:4d:c1:23:7b:36:04:
57:27:16:48:c4:f8:f9:f2:80:b7:91:84:e7:5f:e1:a3:66:20:
0f:e6:75:85:28:ac:0b:69:ab:1d:87:73:24:36:b2:35:d5:7f:
06:fd:a4:c7:13:48:17:d5:c9:a6:46:dd:a8:72:6a:8f:21:bf:
c3:7a:dc:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiCuWF1Mir0oy1ahA4i3DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjAxNTJlZGQ0NzZiMzE3MDg0MDQ0NTI5NTg2MTViNjVk
ZGNiMGEwHhcNMjYwNzI4MjEwMTE4WhcNMjYwNzI5MjEwMTE4WjAzMTEwLwYDVQQD
Eyg5NDlkYjk2ZWI0NzkzOWJiNTE5NDcxYTdhYTE0NjBmNmZhNDU1NjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiKFW0d5FBTJ/Kwt4A8iNmsaVThC
TCgZtPhHYTfPoV2XhS1ombbNA8ysu8b9BSNJOTHHe8tmYc3aCxUi0KY+V3fNdgc1
DmdOYA4NFiWByRlQmlMYDulKUYMshrZk7VorcYqUa6D7oXYqnRkAwbLORJ72nEft
eFn/Zo39ongwSnz8d9xWeflqrvNbAUfcJMYsP1na2dgw53wWoh75+3Zp99GJ0yrN
1BgsC9JiKxuSDRUUgaqeu2M4lqYILE5X7njV4b99ilhpzWeXoAy3jx7QL/3SPQAn
2iA7yd2/2S8phFybFXj4I3IJ720X/xXJ9sUlVJIvWmgJd6/Tx4uysxAinQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSduW60eTm7UZRxp6oUYPb6RVZ8MB8GA1UdIwQY
MBaAFIJgFS7dR2sxcIQERSlYYVtl3csKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21BVkx0MUhhekZ3aEFSRktWaGhXMlhkeXdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80OWY0MGMtNTQ0OC00MjE3LTk1NmYt
Y2NmOWIwZjBlMjI3LzEvZ21BVkx0MUhhekZ3aEFSRktWaGhXMlhkeXdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80OWY0MGMtNTQ0OC00MjE3LTk1NmYtY2NmOWIwZjBlMjI3
LzEvZ21BVkx0MUhhekZ3aEFSRktWaGhXMlhkeXdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9qqO24r
6n14IoBVzwZfeGgO9NgoeIim8WJhcyPKjnaSTFCzbMWmrbAAeAMDfjFsZMSeLOCs
hoFdWjKPx9u1ZY6mwz17od+EtdNhBZTTzgFtYpMhDqwsQsdhomRZ0TeEFb0Q2oyk
EnTy48voSOhv2Yi44maGDnDJVMjK5Ux0MHXbkBi9M+nLt3SylAMxoi9PE9HBeXAi
QPfEMGnJIhxoT/Cz3uU7U4XXmLOjh4IRhRnyijNTGTkeQccEUKsRalZHTcEjezYE
VycWSMT4+fKAt5GE51/ho2YgD+Z1hSisC2mrHYdzJDayNdV/Bv2kxxNIF9XJpkbd
qHJqjyG/w3rcfw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:58:28 2026 by rpki-client