Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: MZnP0ElHGDrDm0II94hgV7i5ozuETmJb4Pho+B1OLR0=
Subject key identifier: 43:B4:64:42:BB:0D:15:EC:E4:D9:A5:A3:20:D4:68:11:22:B3:D1:50
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 019FAA88BD2E793BD97E0B86DF625B253AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0BF7
Signing time: Tue 28 Jul 2026 21:01:55 +0000
Manifest this update: Tue 28 Jul 2026 21:01:55 +0000
Manifest next update: Wed 29 Jul 2026 21:01:55 +0000
Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=)
2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: sI9SSeyAolrPCaPRhVHxtYcNreQSq/cBS9nbwiNeY5A=)
3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:bd:2e:79:3b:d9:7e:0b:86:df:62:5b:25:3a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Jul 28 21:01:55 2026 GMT
Not After : Jul 29 21:01:55 2026 GMT
Subject: CN=43b46442bb0d15ece4d9a5a320d4681122b3d150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:39:9e:74:2f:74:b3:30:16:f4:c6:5a:ce:
73:15:6f:3e:67:67:aa:58:d4:c8:47:a4:38:0f:60:
d9:80:74:46:9b:8f:b6:77:83:a3:98:59:33:ff:74:
4d:d0:55:20:64:37:c9:dd:56:a5:a8:1b:25:05:2b:
15:c7:86:19:84:56:67:b2:e8:a5:e1:84:6d:84:72:
4d:68:f8:58:fc:44:6c:a8:9c:66:ce:c1:3e:9c:f7:
53:ae:12:1f:e2:c0:53:4e:2d:94:aa:de:13:7e:19:
4f:b9:b6:28:93:bd:06:65:24:0d:5d:b9:2a:8e:5b:
56:fb:d1:a7:f0:7f:d9:16:f9:b7:ee:5e:25:de:34:
98:32:aa:11:18:7b:82:72:fd:5c:a9:9f:c8:df:ac:
9b:45:2e:6b:9f:0c:9f:99:1d:47:7c:f5:65:d2:a9:
37:b3:35:14:00:eb:c2:69:ee:13:d9:83:3f:70:d0:
33:40:09:d6:3f:b4:98:bf:7f:83:92:f5:6f:eb:57:
03:a8:6e:ad:f1:27:f0:33:26:e1:f0:d1:cb:6b:e8:
e7:35:47:a1:5e:18:b3:2c:ba:72:2a:8e:05:3f:64:
69:d0:c5:33:45:81:7f:2b:b0:a8:b9:e6:1d:da:23:
b3:6c:a8:bc:4f:10:ce:fa:69:c7:ca:04:2b:22:8f:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B4:64:42:BB:0D:15:EC:E4:D9:A5:A3:20:D4:68:11:22:B3:D1:50
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:92:5d:67:e3:a5:64:98:cf:0e:42:51:1a:65:dd:43:61:d5:
fd:e7:dd:9b:b7:ea:98:4f:fc:57:2e:b1:5c:29:58:43:2d:04:
58:a9:ab:19:4b:ba:71:31:51:95:b4:9a:3d:5e:40:9c:56:8f:
db:e2:d5:87:04:69:66:de:89:78:fe:6f:d1:b6:f6:89:e4:8c:
77:68:b2:94:d4:ea:b3:ff:64:69:06:bb:60:ef:f8:ca:bd:5d:
60:3e:4c:44:41:d0:70:dd:10:3b:92:ec:3b:5c:f8:3d:1a:94:
23:10:1e:e9:85:da:b6:83:55:bb:2f:68:1a:c2:eb:bf:33:d3:
4f:3b:de:94:bf:65:54:63:00:4f:dc:78:1c:bf:d1:be:65:75:
4e:40:42:02:b4:ff:1c:f0:2c:1e:bb:4b:f4:87:93:2e:79:6e:
d1:36:2a:bc:24:4a:fc:af:21:18:d6:53:27:92:82:1e:ae:cb:
14:8e:92:82:65:39:79:2a:43:cc:34:f5:f8:86:c2:16:d8:c1:
5b:35:10:bc:60:67:4d:19:14:f4:dc:6b:c0:4d:5f:07:8c:25:
aa:14:cf:7e:ce:87:7d:2e:0c:6d:6e:8c:fa:17:90:f3:1e:ca:
10:0d:b4:ca:b6:ab:01:eb:59:c1:2c:5e:15:12:41:bd:e7:b4:
24:5e:87:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:41:51 2026 by rpki-client