Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
File: GfRzuqwkYD6teVw6ot6t-G01H8I.mft (raw, json)
Hash identifier: s0GA7nmhVD4KFA4apyAXy4p338uPoFbL7gAP8a0AqcI=
Subject key identifier: 34:CE:C5:32:8C:C7:A3:53:2B:32:BC:84:6E:EA:4B:05:EC:2E:39:BD
Authority key identifier: 19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
Certificate issuer: /CN=19f473baac24603ead795c3aa2deadf86d351fc2
Certificate serial: 019FACE3A0F7EE4DB45F7E22329A5B847995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
Manifest number: 2B
Signing time: Wed 29 Jul 2026 08:00:26 +0000
Manifest this update: Wed 29 Jul 2026 08:00:26 +0000
Manifest next update: Thu 30 Jul 2026 08:00:26 +0000
Files and hashes: 1: GfRzuqwkYD6teVw6ot6t-G01H8I.crl (hash: nm3w+gKJdiLF7+NbXXE4tQnbP7EA5BDsTNI02cAGFGQ=)
2: gNE4IPEZB9u0WmCsF4Pfsq8nHMA.roa (hash: xyIv1xmiMjTFOEwHYgnbJZRjv1TpjuI5f7fPV5Q1SEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:a0:f7:ee:4d:b4:5f:7e:22:32:9a:5b:84:79:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f473baac24603ead795c3aa2deadf86d351fc2
Validity
Not Before: Jul 29 08:00:26 2026 GMT
Not After : Jul 30 08:00:26 2026 GMT
Subject: CN=34cec5328cc7a3532b32bc846eea4b05ec2e39bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:89:1f:00:c4:f0:d6:22:4e:e3:77:cb:30:78:
09:95:d1:a6:36:a1:0e:56:b0:ee:61:c2:cc:64:0e:
ce:cf:46:11:a6:56:65:bd:27:42:1e:6b:47:22:30:
24:45:81:ff:8a:7d:2c:c1:2b:a0:d4:bd:2a:2a:8e:
fd:87:f7:79:cb:50:05:09:d4:56:7a:fa:d1:74:84:
b3:ad:54:1c:e1:59:53:32:74:91:99:cd:6a:2d:8f:
57:cf:7b:2b:9b:01:b6:86:05:24:a8:8c:63:ee:77:
49:47:a1:ac:a1:07:20:b7:fc:a5:6a:05:69:23:f7:
e3:14:95:b6:0e:4e:e1:d0:47:9f:ea:8f:6e:55:85:
91:71:ea:da:95:14:bb:db:9a:2c:18:04:86:19:68:
2f:d6:cb:0e:79:b3:d2:ef:09:eb:fe:1d:f2:15:a0:
24:24:ff:7d:7f:1d:f1:43:0d:80:2e:59:05:1f:92:
0c:9c:c9:1e:8c:31:df:b7:13:c2:8c:d6:b1:1f:c5:
69:19:dc:23:d6:a0:40:e2:e5:ba:91:8c:ef:f5:25:
9f:de:53:a9:21:d1:10:ae:12:4e:6f:f5:fb:02:12:
9c:d4:b3:f2:3e:c5:2f:80:d3:52:31:44:dd:49:9e:
a4:66:10:b6:0d:ea:7b:d3:20:e5:98:37:09:8c:52:
45:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CE:C5:32:8C:C7:A3:53:2B:32:BC:84:6E:EA:4B:05:EC:2E:39:BD
X509v3 Authority Key Identifier:
keyid:19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:64:7f:77:68:70:44:37:b6:ca:4b:06:d0:73:65:ef:ff:8c:
9b:40:c1:06:a7:6e:71:45:c9:a3:10:ab:25:05:d6:28:1e:17:
17:74:10:3f:72:23:12:be:9c:8f:02:39:01:f9:a6:0a:a3:f6:
1a:df:bd:0c:dc:80:97:d2:6d:76:3e:14:3f:3e:2e:93:2e:76:
4e:c8:3d:0b:9a:99:4f:12:a5:67:4c:83:58:a1:df:da:fe:21:
00:e7:48:d3:f5:90:09:45:16:8f:1e:91:0d:68:22:cd:a1:92:
de:31:4d:fb:b4:1b:b1:84:97:02:56:09:39:a1:ac:2c:3e:35:
01:8f:2e:c7:25:d5:75:da:59:3b:56:fa:59:ac:91:65:93:5e:
cc:50:07:a4:d9:c8:f1:1d:82:c9:d2:6f:9f:b3:13:bf:90:1e:
75:73:fb:b0:1e:6e:fe:f4:ec:eb:d1:21:f0:23:f5:21:1d:9b:
94:00:47:e5:5f:a6:3b:47:59:3e:82:04:50:63:99:26:0b:f5:
86:46:fa:56:a6:1a:95:6f:8b:69:40:ab:c8:94:17:4e:f7:ae:
24:d6:d8:7f:99:81:bf:53:31:dd:f2:9a:95:11:8e:bc:9f:9f:
4e:0c:82:c7:59:2d:21:1d:b3:11:c6:9a:f3:b5:69:63:81:25:
62:16:63:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:52:49 2026 by rpki-client