Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: /B2PTdKFEA0Sgpd3gIuf1NUVoo2VZ4cF+GAb3T/FyY0=
Subject key identifier: 59:C2:58:DA:02:8D:25:15:40:D4:D3:1E:7E:70:C1:DD:B0:6D:BF:35
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 019FAAF600F3848D7F9A323DDA3442A26268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 23:01:16 +0000
Manifest this update: Tue 28 Jul 2026 23:01:16 +0000
Manifest next update: Wed 29 Jul 2026 23:01:16 +0000
Files and hashes: 1: 1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa (hash: riRb4iPkDBtyw2U0WQzBeSsFtt3y8g90iqUigaVwK4I=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: jQXSUJzqVeWwu7IEuVZHDm7zVLor3MZ+fHup9yxrsYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:00:f3:84:8d:7f:9a:32:3d:da:34:42:a2:62:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Jul 28 23:01:16 2026 GMT
Not After : Jul 29 23:01:16 2026 GMT
Subject: CN=59c258da028d251540d4d31e7e70c1ddb06dbf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a8:5b:43:93:cf:29:28:ff:81:35:33:28:56:
3b:97:22:ec:b2:e6:13:99:26:8e:a1:d4:b3:79:01:
94:6a:b1:1e:46:ed:3e:20:76:dd:89:6a:9c:f0:ea:
23:b6:62:6b:35:da:cb:2c:e5:a6:0e:f2:23:d9:1d:
ea:a7:64:38:ba:25:12:48:bf:4a:7d:3a:cf:8f:e8:
99:01:c3:e5:09:af:25:75:1e:e0:f4:00:c7:a4:4e:
ba:37:11:d3:dc:c3:47:38:9d:13:8b:a9:72:88:2b:
52:c3:c0:8a:8d:ec:2f:f1:13:a7:44:be:a2:06:fa:
f9:59:b7:eb:5d:59:c1:14:07:dc:c4:60:b2:cc:53:
1a:07:22:a4:e9:6f:be:d5:bb:92:fe:57:23:4b:e1:
8e:e4:ce:d6:e7:ff:2b:40:b7:72:a1:63:4d:4b:ff:
c7:46:cd:81:7b:4c:db:e0:a4:c1:fb:1c:e1:b6:13:
4c:e3:30:cb:9d:f9:25:f6:38:16:2e:01:ad:21:ad:
fe:0d:d6:ac:07:05:8d:96:d0:a4:46:23:2c:d9:d4:
1e:85:3a:dc:5c:4e:38:f8:fe:98:48:86:4c:0a:83:
ef:0d:e2:d5:8f:eb:6f:10:83:a0:b9:f5:5c:24:4a:
7f:9f:30:54:17:f8:84:08:64:fa:56:bf:d5:f3:b4:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C2:58:DA:02:8D:25:15:40:D4:D3:1E:7E:70:C1:DD:B0:6D:BF:35
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:18:90:b9:34:70:2d:0d:ec:29:bb:e6:bc:68:ef:35:0a:8e:
42:50:3a:42:28:c2:99:be:e0:49:bd:7c:bd:57:dc:9a:ff:b5:
6a:d2:ad:93:80:e6:b0:36:64:61:18:1a:7a:ed:ef:5b:56:85:
a5:40:5b:d7:94:e6:e9:e7:d6:dd:5b:db:2b:d9:47:ac:9d:42:
87:39:4f:78:2c:3a:8f:b7:b0:0b:18:ce:d1:4d:18:26:0f:0c:
92:88:38:54:e1:81:de:60:2d:48:12:aa:2a:9f:97:94:bf:54:
46:f6:b0:3a:f9:11:ea:27:37:5a:69:07:7a:79:ea:ee:90:d0:
07:5b:14:cf:e9:8a:c5:7a:e7:5a:76:dd:6c:3b:1d:63:46:a2:
3e:8c:6e:db:c8:0c:47:b1:b5:36:6c:83:8e:93:f3:70:ff:5b:
b1:cf:44:1c:c2:77:56:e8:5c:a2:33:02:41:11:e2:e5:97:58:
6a:a5:4d:4f:b2:30:3b:67:ef:08:3d:65:81:3d:34:cd:6a:76:
55:e8:81:c5:f8:c9:b3:b8:19:1a:ad:63:92:40:67:0b:5e:e3:
32:82:77:8f:67:ab:4d:ac:37:5e:73:11:f6:37:b0:42:f0:2c:
0f:68:e5:83:76:2b:0d:9b:5d:f2:1f:ba:8c:ab:0c:0b:7e:51:
5f:a1:0f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:18 2026 by rpki-client