Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: /TKUKRSjVhxjF9Ly6oYl4X6Noev0MefaR2NTnMtbu08=
Subject key identifier: 91:B0:D0:76:77:F5:4B:F3:A6:3B:74:97:DB:9A:BB:5C:5A:5B:F1:4E
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 019FAA879C47B04AB4EED0A02BB1FB396992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 21:00:41 +0000
Manifest this update: Tue 28 Jul 2026 21:00:41 +0000
Manifest next update: Wed 29 Jul 2026 21:00:41 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: wB2Zw9jSzlmSI9H6mMYS5Zrq0i9GlMGftA06xXwgWZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:9c:47:b0:4a:b4:ee:d0:a0:2b:b1:fb:39:69:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Jul 28 21:00:41 2026 GMT
Not After : Jul 29 21:00:41 2026 GMT
Subject: CN=91b0d07677f54bf3a63b7497db9abb5c5a5bf14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:62:2e:26:0b:89:ca:61:3c:43:a6:34:2d:
31:cb:45:97:8d:f9:d2:1d:ca:57:04:5f:03:c4:77:
fb:ea:86:e6:fd:8a:cc:4f:db:fb:09:48:bb:0f:a0:
d9:36:7a:d9:0c:85:c9:96:0c:40:7e:32:e2:1c:75:
c7:de:a4:16:f7:b9:bd:e4:cc:90:c3:e8:0d:ae:e7:
33:be:68:1d:35:bd:0f:09:73:65:86:00:8e:95:46:
17:9a:ac:19:f5:36:8c:3f:6d:81:64:d8:ce:04:e3:
bf:91:33:65:81:6f:30:21:f0:46:e7:0c:fa:1e:1b:
0a:c0:9b:21:0e:88:28:24:40:e0:dd:05:89:ca:bd:
c9:9b:6e:d6:da:9a:c7:67:0d:68:f2:16:5a:5a:c4:
a0:93:93:49:be:0d:46:30:a7:08:67:22:d9:a2:69:
55:26:d8:b4:5b:6c:d7:91:c9:c9:9f:e3:2d:81:5f:
23:ea:a7:99:1e:af:19:c0:cb:6a:96:3e:dd:e1:ce:
bb:a3:fd:1f:b1:3b:ab:07:00:0f:92:5c:6d:4a:ba:
67:d6:95:38:af:14:86:30:36:03:4f:1b:0f:2a:1b:
ca:60:bb:d9:d6:39:58:76:2e:48:a3:14:0e:5c:8c:
09:64:a6:a3:03:6f:56:20:e0:ae:c1:c8:0a:49:3a:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B0:D0:76:77:F5:4B:F3:A6:3B:74:97:DB:9A:BB:5C:5A:5B:F1:4E
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8c:43:a9:1f:32:6a:57:fe:59:87:23:16:e5:15:43:ce:c5:
4b:72:06:17:42:9d:54:52:d6:5f:52:66:99:d5:e0:ca:60:c1:
b6:3c:ff:e8:b4:ad:f1:8e:44:6d:2b:85:54:82:57:47:9c:4e:
4b:6f:a6:e9:10:3a:2e:85:6e:20:f1:5d:4a:b5:3d:60:f1:da:
b6:73:b2:a3:f5:1b:a7:11:50:64:de:00:82:b6:47:4f:86:26:
45:25:50:e3:ac:58:49:94:c2:68:8d:1d:12:49:66:a9:f4:1b:
98:4c:b2:62:f2:b7:10:9f:ab:26:83:6b:14:73:f0:b1:b3:23:
5a:c0:f6:9c:b4:5a:24:60:53:33:69:30:43:51:4a:53:73:23:
b5:d5:15:f1:ce:84:9e:8f:f8:e7:64:4e:51:16:89:bf:3b:ae:
7b:5b:5f:4f:06:8a:12:bc:9b:ae:a3:b0:59:1a:1e:e6:7a:6d:
d1:58:37:da:76:93:cb:8a:1a:80:30:98:b6:bd:64:f6:fa:b8:
bd:35:ad:ad:33:30:b5:23:3c:27:42:40:27:8b:39:d5:40:84:
54:3b:aa:3a:ab:40:1d:3c:e1:35:df:e2:5e:4c:9f:99:c0:09:
6b:48:cd:6a:f4:d6:8f:b9:28:5b:30:0f:02:97:17:79:f4:5b:
31:da:79:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:19:28 2026 by rpki-client