Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: VMjxq99dNUnlnz+9Y2Mjt7T0vfpotg3hrN/CUIA/5y8=
Subject key identifier: A3:4A:BC:1A:B0:59:ED:D6:D8:5B:B5:27:53:C2:C7:59:9D:3F:97:0D
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 019FAB9A44276523A24883F9EA1C691F6911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 19E2
Signing time: Wed 29 Jul 2026 02:00:41 +0000
Manifest this update: Wed 29 Jul 2026 02:00:41 +0000
Manifest next update: Thu 30 Jul 2026 02:00:41 +0000
Files and hashes: 1: 0bqo0bUAXv_4CI9l73mqbhE8a2g.roa (hash: iEe2NrJePiOEkt4y1MNa7WFWziQ9517Q5QJMPLgLqF0=)
2: RT27iS5dmX-RpCR1NpzNSn8n2Uw.roa (hash: qBi2ogY38ZEBaQkYgKwRqyPlrZuDmr1aSjBSW1/pXdo=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: dQF+Chm8pVBDlQn6sdlvJwUWbLP06CNHLv9tOvaDH0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:44:27:65:23:a2:48:83:f9:ea:1c:69:1f:69:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Jul 29 02:00:41 2026 GMT
Not After : Jul 30 02:00:41 2026 GMT
Subject: CN=a34abc1ab059edd6d85bb52753c2c7599d3f970d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:b0:12:95:aa:4d:96:90:fc:a1:cc:44:98:
c2:aa:76:65:ed:c7:b6:fe:b4:ae:0e:f1:91:91:dd:
70:c7:03:16:af:88:11:b1:65:86:61:a0:ba:19:1e:
d4:82:38:38:9c:12:4e:09:ff:23:02:72:d3:df:9c:
f1:e0:e6:52:06:54:2f:25:65:08:ee:81:24:2d:51:
4f:a8:b0:07:01:21:d7:3a:96:af:55:96:73:2f:40:
d0:19:1e:1b:64:e5:d6:83:e3:8e:50:7d:55:74:b4:
cf:61:0a:f0:7d:0a:50:d6:e7:03:c7:f7:ef:87:0e:
a6:f9:72:67:b6:fb:ac:33:c6:a5:94:d7:17:43:8b:
e5:ae:99:37:6b:59:9a:9b:26:57:f9:7d:86:f0:19:
0e:84:61:3c:11:9d:ec:1e:9e:84:0e:74:3b:db:06:
b1:e5:b4:41:53:5b:fb:5a:e0:23:80:ff:1b:0d:8b:
7d:c3:6a:8f:0a:0d:1b:b7:c1:68:4b:98:6b:d2:a5:
44:b9:8a:47:af:2a:b1:c8:1b:c8:55:12:18:f7:f4:
b1:0c:a0:63:dd:77:d6:61:5e:5f:eb:0b:f2:26:cc:
c7:8b:85:43:b6:02:a3:6f:c9:b7:59:55:05:a6:5a:
e7:74:64:13:63:81:ea:34:5c:30:bc:b7:d7:6d:01:
d8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4A:BC:1A:B0:59:ED:D6:D8:5B:B5:27:53:C2:C7:59:9D:3F:97:0D
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e3:7c:ac:8d:82:b6:fc:b3:b8:d2:80:e6:46:96:61:55:96:
48:50:cf:b5:93:f6:4f:f0:3d:8b:46:0c:8e:2d:e6:3e:84:0f:
12:16:97:eb:d1:af:0f:67:a7:f5:05:eb:7a:61:d1:9d:cd:a0:
98:5a:97:05:95:65:02:af:f7:b5:0a:bd:c1:2a:7e:d5:3f:50:
bc:f0:d2:51:b3:81:3d:c3:94:7a:e6:e0:2d:24:86:f5:b2:9f:
e0:97:47:a3:74:0d:c8:77:ff:b0:80:24:b1:9c:12:29:fd:74:
92:2d:9f:17:9a:39:50:58:b2:75:73:a3:01:ee:40:5e:be:03:
45:e4:6d:80:db:87:73:31:54:75:5c:55:cc:6d:48:14:3c:76:
eb:27:21:a3:4b:47:95:68:fc:00:57:46:e6:a7:04:c0:60:dc:
51:83:88:20:d3:37:80:e6:85:a2:93:78:8c:20:53:a2:95:2f:
11:ff:93:9f:2e:d7:d7:0c:5c:7f:5c:09:17:e3:35:06:14:90:
25:9a:9f:2b:a3:74:b1:58:f7:b2:7c:f0:13:bf:c0:ea:af:b0:
34:ae:11:16:6f:5e:36:3e:b3:6a:8b:c8:b3:c4:ce:e8:39:5d:
05:1f:d7:b1:cc:7e:a2:d7:3c:9a:de:98:36:11:c9:c5:37:f9:
f6:7a:72:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:22 2026 by rpki-client