Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: 9WlXcchG4uF1F4024fIN9l8zJvVqomVKPAJP7YUkbqk=
Subject key identifier: 2C:EE:DF:EE:09:DC:D4:A3:82:B3:E1:94:C8:01:AA:CE:BB:FF:FC:7D
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 019FA8D05644AA0B24A47A14B11F80280307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 1966
Signing time: Tue 28 Jul 2026 13:00:53 +0000
Manifest this update: Tue 28 Jul 2026 13:00:53 +0000
Manifest next update: Wed 29 Jul 2026 13:00:53 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: NY8ovwyankkSph3wUlEQZ+vMHccfPjOnS24YP2VXv9w=)
2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:56:44:aa:0b:24:a4:7a:14:b1:1f:80:28:03:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Jul 28 13:00:53 2026 GMT
Not After : Jul 29 13:00:53 2026 GMT
Subject: CN=2ceedfee09dcd4a382b3e194c801aacebbfffc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:a0:f7:3c:c4:b8:33:b6:27:c1:f1:dd:7d:
44:ec:16:c7:63:ad:6d:91:02:f7:3f:21:c5:b0:03:
a1:2f:0e:30:47:9c:70:6a:38:64:70:36:f6:2a:6c:
fa:3f:e8:84:e1:f5:f2:9f:ec:4b:fd:a8:e6:6b:45:
08:e4:f2:cb:70:65:13:4d:be:18:2c:35:a8:5d:96:
16:2a:ba:1b:c6:c2:f0:d8:36:81:47:91:92:46:5d:
73:9f:47:0b:15:d2:7c:d6:82:40:30:98:75:f3:5d:
d7:87:0c:8f:fa:d5:fb:b5:49:b0:2e:66:5c:8f:da:
41:35:5f:42:85:86:a2:a8:af:50:7e:4c:a4:1d:6a:
4d:0f:20:fc:a6:27:cf:a3:bf:a9:d9:f8:04:a3:ae:
fd:ae:73:b4:9b:80:6e:53:17:58:10:29:fc:a9:d5:
f0:c6:a1:19:64:b6:fb:31:a6:97:8c:b7:70:1f:42:
1a:75:b8:03:d1:e3:91:dc:cc:1f:ed:dd:81:72:c7:
83:0b:95:4e:ba:88:d7:4e:21:da:4b:5e:9e:73:fe:
97:b8:ab:9d:a1:b4:e1:bb:e2:4d:45:48:df:88:fb:
71:90:6a:f4:99:16:d8:ee:91:ba:95:91:13:fd:c3:
b7:9f:6f:34:cb:8f:56:b2:ef:68:18:7b:d7:32:ac:
58:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EE:DF:EE:09:DC:D4:A3:82:B3:E1:94:C8:01:AA:CE:BB:FF:FC:7D
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d7:c2:fd:85:fd:ec:44:01:40:ac:f7:1b:d9:87:b7:51:0c:
48:e3:3d:01:64:6b:d4:f3:a2:5a:64:7a:35:bf:93:51:ed:cc:
a1:04:6e:7f:ca:50:53:be:3c:9a:1c:91:31:7e:73:c7:5d:57:
47:98:02:4c:99:1e:f2:5c:5a:08:52:85:be:3a:44:d6:2b:78:
eb:ca:ff:ae:ab:3e:23:07:d5:4c:1c:7d:60:83:cf:16:0a:3d:
fa:00:11:79:00:d1:11:93:54:1c:6b:82:88:aa:93:6d:f2:92:
42:de:f6:06:9c:41:c2:5f:5b:75:88:86:ac:43:26:0f:18:45:
a4:ab:16:0d:ea:08:20:4f:98:7b:f8:05:1d:ed:f1:12:c6:f8:
81:55:ea:4f:cc:56:69:14:19:68:0e:29:17:64:07:d4:65:51:
c9:fc:ef:39:e3:1d:41:0a:14:0e:ca:8e:e0:1f:05:8e:47:7c:
87:91:a1:3d:13:be:99:bf:73:90:9c:68:a3:e1:fb:30:ab:9f:
48:95:c0:d2:1f:3a:aa:85:64:a2:2d:f0:c7:d3:f9:ab:13:9c:
45:a7:8d:74:18:1c:d9:54:b4:3e:ce:80:32:4d:0b:f6:4c:f6:
2a:77:b7:1b:cb:dc:0c:1d:8c:9f:49:05:4e:4b:ac:7b:38:cb:
ad:ef:d2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:11:55 2026 by rpki-client