Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: dDA5mgAvZldc5TfEMgQFaHiH3V8gWVpjlH3rsuC6PbQ=
Subject key identifier: 81:79:B7:F8:FC:42:C7:17:69:EE:DB:47:54:18:67:04:B6:90:AA:6C
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 019FAABEDDB5BFBEE5D8EBB399B7D65531FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 126A
Signing time: Tue 28 Jul 2026 22:01:02 +0000
Manifest this update: Tue 28 Jul 2026 22:01:02 +0000
Manifest next update: Wed 29 Jul 2026 22:01:02 +0000
Files and hashes: 1: ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa (hash: DP27/a5o1Ym+vesDLFqV0Tua4ny+ds0/pH34jhmErS8=)
2: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: HNvr20goRTwvxS5jkZtK0rdNqCw3mfzAYjgHNtq8MxY=)
3: Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa (hash: KqQ8TKxBYl3JumzrSj+0qt5zeDJPsxKpAnGsc38qwpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:dd:b5:bf:be:e5:d8:eb:b3:99:b7:d6:55:31:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Jul 28 22:01:02 2026 GMT
Not After : Jul 29 22:01:02 2026 GMT
Subject: CN=8179b7f8fc42c71769eedb4754186704b690aa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:2f:74:7d:72:b9:0c:0f:dc:27:eb:29:78:
f9:09:c7:f3:21:67:59:8b:2d:dc:2c:46:3f:75:f5:
9f:2e:5e:19:4a:55:28:fd:4b:0c:c8:46:00:81:53:
1f:ad:7d:66:72:9f:97:ca:7b:fb:87:85:9f:c1:7c:
8b:9e:c2:19:98:bc:f2:fd:5c:66:73:66:87:c2:47:
ef:39:03:8c:fb:9e:0e:25:52:c6:f3:20:b1:03:d8:
e7:09:ea:1c:01:bd:90:db:55:b8:b9:82:e3:f3:5e:
7b:ed:be:fa:03:61:43:af:0d:78:a9:72:71:ec:bd:
5b:f1:a4:0d:a3:29:a5:8e:4f:48:13:f1:9f:81:ac:
09:7c:9b:51:7d:f4:2b:e2:1a:08:30:6f:2b:82:0b:
cf:52:16:ee:49:f9:4a:ff:9c:c5:8e:bd:b5:58:9c:
ca:ad:6a:f8:bc:7c:98:c9:4b:3e:c8:ff:c3:99:c2:
54:c2:0f:a4:d4:0f:30:0c:68:59:7f:68:1c:4e:83:
95:09:5e:63:41:d8:2c:32:04:b0:04:39:1f:95:98:
1b:62:c9:5a:14:04:14:42:16:fe:ff:28:74:ab:85:
60:cb:f1:fb:b8:e1:f8:a3:b5:94:be:df:2c:4b:f5:
05:fb:98:b3:25:42:8a:c4:f9:63:e2:7d:44:a6:b3:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:79:B7:F8:FC:42:C7:17:69:EE:DB:47:54:18:67:04:B6:90:AA:6C
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:88:a7:27:2f:0d:77:ba:ab:1f:9d:f4:49:5c:6f:35:32:fe:
1c:62:e4:ac:33:0e:ab:e7:e6:aa:bb:b0:e0:ca:b6:96:b4:bc:
3c:db:63:5d:a3:64:a9:7e:0f:b2:52:bd:dc:e9:51:8e:f5:57:
8a:4b:62:45:b9:59:c3:89:ac:bc:81:bc:a5:58:e0:d0:d7:fb:
88:cd:43:75:72:26:e5:ed:53:44:fc:e5:1a:fd:6e:81:0b:d6:
16:71:cd:5e:5b:52:88:1a:f1:e4:1b:ab:5b:40:cf:52:7d:4e:
64:17:61:5f:bb:c2:b8:75:af:d0:3a:0b:18:cc:3a:32:4e:96:
73:35:5a:ba:8b:4b:7f:b0:68:88:98:4d:03:cc:c4:b1:ef:86:
07:3b:cb:02:c9:54:ba:2a:3e:2c:eb:e7:d2:95:10:85:f9:b3:
34:ec:02:d6:2f:ca:2c:65:a9:52:24:4d:f3:6f:11:e1:3e:3f:
0b:2f:1f:cc:86:03:bb:74:04:b4:84:ca:f4:72:a7:c2:fe:53:
19:26:4a:40:e7:fd:cc:d5:af:8c:8a:73:c1:b7:c4:36:48:92:
fb:21:0a:3f:8b:e5:c6:91:ba:46:74:1f:b0:ed:e8:e6:78:f1:
61:73:af:85:da:d3:ec:fe:ad:6a:4c:a7:8e:59:73:15:bd:bc:
94:3b:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:10 2026 by rpki-client