Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: ei/MTaGuQrsQjWNTeTD30PNYTNigK4pyTrbTshrCCTg=
Subject key identifier: 56:4A:39:1B:73:C6:94:37:C0:05:48:0B:B7:49:A7:48:D5:36:CF:6F
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 019FA9072C6532E8D1052655E6F20139720B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: 0573
Signing time: Tue 28 Jul 2026 14:00:47 +0000
Manifest this update: Tue 28 Jul 2026 14:00:47 +0000
Manifest next update: Wed 29 Jul 2026 14:00:47 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: wOvg6DOGDaXtqo8GrAKtPAYQcIauFRthOCwnDkAFHjk=)
2: ps8p5Yxss_yS4gX9BmkqFddX40Q.roa (hash: nYuC3F6vhPJEBCLmfMqrTPfplxmjR9SoiZf1ZnDUcP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:2c:65:32:e8:d1:05:26:55:e6:f2:01:39:72:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: Jul 28 14:00:47 2026 GMT
Not After : Jul 29 14:00:47 2026 GMT
Subject: CN=564a391b73c69437c005480bb749a748d536cf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:2e:2a:d5:39:e1:d3:69:24:4a:20:3d:42:
e1:4a:ec:27:18:57:83:dd:89:b8:79:85:cd:fa:78:
07:65:34:77:43:7a:92:b2:57:e5:37:6b:0a:b4:3b:
21:a0:a5:7b:b6:b1:d4:6d:ed:52:6c:eb:19:c2:49:
9d:7c:a0:51:f2:cb:4d:10:aa:fe:86:4d:ac:ff:62:
27:30:cd:87:b7:65:d9:7c:fe:db:ec:c9:2b:17:98:
cb:5a:47:dc:21:59:d9:a0:fb:d3:ca:ef:b3:49:fd:
c9:85:44:88:31:31:19:4e:f9:00:f6:94:8e:2d:07:
cf:e5:0b:14:33:d1:c7:a9:67:4b:b0:d3:30:75:28:
ec:42:2b:43:dc:78:3b:f1:44:57:1e:4e:b7:a9:9d:
63:21:0d:8d:26:bc:22:6c:cd:ac:a0:32:4b:b4:15:
53:8a:bc:bd:3d:21:20:b8:3c:29:e2:ca:97:ab:89:
50:ef:86:e8:d7:01:38:8d:be:d7:3a:63:3f:80:5c:
ef:4d:11:0d:70:f5:e7:ea:d5:af:8a:a8:e7:59:de:
c8:99:8e:0a:30:cf:70:c5:b7:63:c0:b5:fe:58:cf:
a6:02:c2:53:03:05:1c:31:5e:30:74:22:92:c1:8b:
67:00:3c:c7:2d:5a:a5:77:9e:c9:85:b1:12:e5:f3:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4A:39:1B:73:C6:94:37:C0:05:48:0B:B7:49:A7:48:D5:36:CF:6F
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:97:33:fe:11:d1:7f:ab:c6:e7:7d:aa:7e:cc:e7:f4:d1:f3:
35:bd:8e:d4:e6:6d:67:dd:3c:75:aa:cb:30:14:3b:3a:ad:a2:
e5:38:bc:b1:fa:a9:a8:46:0f:00:bc:98:24:e9:9d:a9:c2:4a:
dc:31:77:80:e1:4a:d0:43:18:04:78:f6:2c:f7:84:79:78:e2:
65:a1:69:5e:60:72:3b:4b:b3:09:61:55:86:5a:e5:ae:48:1a:
91:fe:bd:7a:3e:64:ff:0a:3e:64:3f:b6:29:16:15:d8:0a:6a:
ba:3d:b8:a8:fe:a2:6e:22:7f:d0:1a:13:68:18:3d:25:4b:d6:
c5:1d:9e:7d:b3:3b:d5:da:21:26:e1:75:10:04:48:34:a7:bf:
33:d0:8a:62:af:ff:29:fd:28:df:94:84:70:b6:64:1d:da:e4:
a3:8e:99:12:c1:49:4e:44:9e:4d:ea:a9:6c:bd:43:10:6e:b6:
e2:ff:f9:18:bc:29:98:a9:85:ec:c1:bc:f6:c0:d1:7c:30:b4:
24:de:fe:61:bc:fa:60:85:75:ee:83:23:df:4e:81:9c:76:1d:
dd:ef:30:d5:01:5e:e3:ac:6f:29:29:70:6a:be:59:63:ab:8b:
8c:78:82:25:3c:56:6f:da:4a:b9:61:c5:7f:24:12:d4:41:2e:
d7:52:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:40 2026 by rpki-client