Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
File: gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft (raw, json)
Hash identifier: TkapHKyTxKrR221mEc54EpxZALfEKsXkddxIYMI5ezo=
Subject key identifier: EF:89:DA:22:9B:32:CB:DE:62:EA:B8:8F:DC:A0:42:7A:5D:63:6F:87
Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
Certificate issuer: /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Certificate serial: 019FA899755F4623CBC9A134618179C18194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
Manifest number: 0210
Signing time: Tue 28 Jul 2026 12:00:57 +0000
Manifest this update: Tue 28 Jul 2026 12:00:57 +0000
Manifest next update: Wed 29 Jul 2026 12:00:57 +0000
Files and hashes: 1: 8RuluZQlRmxS5liK5WCiaw4-rPs.asa (hash: 0elw691q/DOTcT4KkqOkd4B3/A9WMyuwKne0j6qHRw8=)
2: gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl (hash: sswQqEDOEot6ar6FupMEfEbqeLnaQtv5hAp6I1RYX5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:75:5f:46:23:cb:c9:a1:34:61:81:79:c1:81:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Validity
Not Before: Jul 28 12:00:57 2026 GMT
Not After : Jul 29 12:00:57 2026 GMT
Subject: CN=ef89da229b32cbde62eab88fdca0427a5d636f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:43:99:fe:d0:92:7f:2f:b8:c0:cd:08:b9:
86:94:8c:1a:85:f2:53:44:06:50:26:e5:5f:63:98:
e8:ef:2b:b9:09:ba:0f:ca:dd:fb:63:09:58:bc:3d:
f9:3a:03:11:e1:f4:d7:ac:f7:a5:0b:5f:e8:d6:87:
fa:da:d7:26:38:b9:d6:bf:29:ec:60:28:9d:f8:7b:
eb:a6:fb:8a:00:90:dc:33:f3:4f:3c:08:a4:67:4c:
90:2b:ac:ec:a0:b9:ba:70:5a:a6:65:b8:50:6c:f4:
89:b9:ed:62:56:91:23:da:14:85:e9:be:1c:fa:8c:
81:a4:2d:4e:7d:1b:6f:f0:50:3e:c0:91:47:08:eb:
0b:dd:c2:13:23:4a:53:a4:a4:32:cd:76:28:62:e0:
3a:6c:58:9f:cc:c9:5f:e9:e5:3e:4c:4d:94:de:b4:
21:86:df:9c:b5:04:30:2b:81:a9:21:1d:23:4d:fa:
8e:5e:83:14:66:79:21:d3:ad:f1:14:6f:1b:95:f7:
ea:88:14:63:dc:ce:c4:aa:62:2f:c5:28:ae:78:f3:
86:48:b7:2a:86:6f:41:6e:50:0c:96:f8:6b:f5:19:
e3:bc:dd:e2:a5:25:27:0d:05:6f:a1:04:70:28:34:
9c:ed:4d:8e:d6:4f:44:75:7d:4a:af:ba:c6:d9:6c:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:DA:22:9B:32:CB:DE:62:EA:B8:8F:DC:A0:42:7A:5D:63:6F:87
X509v3 Authority Key Identifier:
keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f0:d6:c6:dc:7e:c1:3b:7b:7a:e4:bb:d3:a1:8a:42:89:f3:
ac:ca:53:c5:aa:8b:39:86:22:33:61:62:da:14:f4:45:df:bb:
08:99:be:e7:29:09:0a:cc:4e:5b:4c:02:7d:71:d2:75:94:8b:
35:bc:a9:8e:bc:7a:54:9d:55:a9:5f:1f:37:23:c0:ae:9d:67:
72:82:6d:b2:85:bf:f6:5d:72:be:a7:a0:87:29:3a:b0:c3:99:
f2:16:2d:3d:a9:f3:aa:86:26:c1:3b:02:cd:e8:77:ed:73:1c:
53:b8:05:81:ef:81:07:26:73:1c:96:4e:e6:3e:9f:c2:e0:ad:
b5:fa:31:38:af:c2:74:76:15:e2:0c:c9:27:29:1c:ad:91:0d:
e7:e3:9b:91:42:91:62:02:ba:46:f9:6b:f5:63:66:05:25:f9:
dd:d4:b5:ef:c1:df:f0:93:a4:e4:28:15:e2:08:ab:f8:df:60:
1d:a9:b6:d1:b9:82:3a:c2:34:c3:02:5b:5c:de:b6:17:a6:0a:
7a:ad:f2:99:76:41:b2:db:d4:bc:2d:b0:71:a3:14:5d:56:bd:
6c:3a:b5:29:ee:61:0a:00:fa:21:4c:68:95:76:9c:d4:b3:f2:
01:76:50:2e:53:df:86:51:25:b3:5c:9b:cf:22:5c:03:6b:ab:
c1:5c:40:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:33 2026 by rpki-client