Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier: yEbUcOQ+7LHHjpYK4XrWXv4u/PZi8nAHIAx+dzQV/iw=
Subject key identifier: 4E:96:2D:0A:98:C3:28:0D:B5:B8:86:67:D5:F9:89:F1:25:1F:B9:6D
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 019FAA50448154CCEE99B44CB280E444CEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 20:00:14 +0000
Manifest this update: Tue 28 Jul 2026 20:00:14 +0000
Manifest next update: Wed 29 Jul 2026 20:00:14 +0000
Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: PM9sAWomhhqz1PVfR0BjVXQ2CT1dzsKa/XBDVS+OcR4=)
2: cXNWLJ-fheZVPTHqnxKr5qEyQiI.roa (hash: X4rdPWY18bogslRUxkmtUVkAapWRBduOj/tJgoCH118=)
3: hwehb2jiu3a77T6FcjmviTy6QbQ.roa (hash: /bg0v2TYmrbSPAxogweq6+6+Nt4ijd19YXkzkd2haPo=)
4: i220VObPvHT4HgCF-uOpmI807FY.roa (hash: s9QayADVhAmQKcOJ9dlrMCwrdZV1G0CVNvgi0G197E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:44:81:54:cc:ee:99:b4:4c:b2:80:e4:44:ce:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Jul 28 20:00:14 2026 GMT
Not After : Jul 29 20:00:14 2026 GMT
Subject: CN=4e962d0a98c3280db5b88667d5f989f1251fb96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:87:ff:93:95:9f:26:42:10:18:cc:4c:2d:
b5:75:46:2d:8d:35:fc:d4:77:55:bc:41:75:62:cc:
a6:e9:5f:54:a7:4e:77:7f:3d:bf:77:50:cd:b4:a7:
53:40:2a:e7:55:9b:fa:af:08:3d:ff:31:d4:ec:f2:
75:53:40:64:90:27:4f:fd:91:de:8c:a6:56:62:7b:
71:b2:77:e5:b1:87:c3:05:68:ad:43:de:25:48:73:
98:5b:57:6f:a1:d2:6c:74:9b:e9:f3:89:d4:9a:7d:
c0:26:c9:14:50:8e:a2:9b:61:12:42:b7:5f:cc:9a:
6a:52:df:b2:e0:87:e9:30:95:08:39:db:e1:02:96:
2d:6b:6c:53:60:b6:a0:f0:9e:10:7f:b9:75:cb:29:
d5:6e:81:f1:f9:af:dc:f5:43:f8:c4:d4:b5:1e:11:
e8:a0:b3:6d:c6:9a:df:e6:68:bc:7f:03:41:c1:f9:
c4:8a:84:2a:f6:9e:c4:6e:3b:fc:8c:9e:ea:d4:c4:
f0:22:b7:f7:9d:3c:6d:5e:2b:8a:57:fb:fe:b0:dd:
7c:f9:c0:15:a0:cd:a9:1f:e6:99:6c:24:86:83:e0:
6a:bb:ee:fc:b3:81:8f:01:d6:75:3e:40:fd:ee:20:
d0:65:5f:ab:9e:4b:57:43:18:d4:70:57:51:f7:7d:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:96:2D:0A:98:C3:28:0D:B5:B8:86:67:D5:F9:89:F1:25:1F:B9:6D
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:73:fc:fb:27:de:b4:91:2a:30:31:f8:a6:20:95:ed:ac:b9:
cc:b1:e8:78:04:fb:49:64:23:a0:40:e1:98:c7:58:6f:33:6b:
ac:19:f4:3b:fd:da:e5:08:32:22:a7:f9:f8:5d:cc:57:cf:15:
32:57:d5:a7:da:eb:99:99:16:0d:27:c5:8f:bc:a5:1a:a3:44:
82:f1:8d:07:5a:5d:dd:74:11:98:8c:a9:f4:a0:76:47:b6:0c:
c5:eb:6f:dd:b4:07:97:6d:47:9f:4d:5b:f2:75:17:b2:a1:17:
92:01:c7:00:91:42:93:44:c7:9f:39:61:ba:95:c0:39:86:68:
fd:ca:fd:ed:91:5c:b5:e8:db:1f:e9:7d:f9:ba:14:7e:26:63:
45:2b:7d:98:52:50:82:d5:01:2e:27:9c:e5:85:da:b4:2a:50:
3c:f2:dd:de:b4:52:54:83:1c:e0:eb:3f:ed:1d:92:4f:c0:14:
f1:15:64:6b:88:a7:de:ae:57:09:78:51:92:9e:50:96:df:12:
33:bf:85:68:d9:e3:a5:17:7f:03:8c:41:52:23:64:53:04:48:
b4:b8:5b:ae:e9:1d:52:64:39:2e:16:ae:65:42:a9:3d:9a:16:
fc:86:62:14:d1:c8:37:44:46:4d:df:7e:e1:ec:11:b9:b3:f5:
d5:89:41:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:42:37 2026 by rpki-client