Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: CLAZhvVPS2uVBT4+e7oN6d9KY88ACDQp74hXS/Rihk4=
Subject key identifier: 12:57:A3:93:1C:69:31:67:3A:40:A9:D5:EB:50:8A:6A:BF:F1:21:DD
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 019FA9E2B646F39CC990A949D65B89FD3C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 18:00:35 +0000
Manifest this update: Tue 28 Jul 2026 18:00:35 +0000
Manifest next update: Wed 29 Jul 2026 18:00:35 +0000
Files and hashes: 1: VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa (hash: KhFc35C6NWJw+95DJdGU/WqBGVukwlgQW3Tv6X8QShQ=)
2: YV2FC6tSLQepIUe84M0yNrIYwXI.roa (hash: a1BK4hhpvi1wRKKydzXpZZxOv3b6LUqaoMmqbdgZ8n8=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: yHvJHWjSjSOwDGCd6RGcMyqzziedU6x024mQrt0XFBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:b6:46:f3:9c:c9:90:a9:49:d6:5b:89:fd:3c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Jul 28 18:00:35 2026 GMT
Not After : Jul 29 18:00:35 2026 GMT
Subject: CN=1257a3931c6931673a40a9d5eb508a6abff121dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:28:96:94:96:da:87:18:59:47:0d:2e:35:
3e:0a:59:3d:3c:8c:1d:c5:47:06:7e:95:d5:e0:14:
61:0e:2c:dd:c0:0a:d6:2a:93:83:02:a4:a0:b9:c1:
39:80:90:41:e1:34:93:ab:73:d7:ed:75:90:ac:f3:
58:c1:ec:f5:dc:19:cd:ca:fb:6e:29:8d:2c:e4:8f:
8a:f8:16:5f:ce:d7:ac:6c:b1:23:a9:09:5f:6c:10:
ae:d9:bf:74:3e:2d:2c:9f:f3:ba:c0:92:1c:2a:94:
8e:d4:7e:b2:cb:2d:23:65:79:93:84:36:2d:91:7b:
bf:eb:d6:cf:1f:83:88:da:e7:f3:0c:5a:7d:75:b1:
14:94:68:cf:2b:2c:7c:11:75:dc:86:35:60:e8:36:
7f:70:54:9b:00:70:0f:a1:85:e8:4c:b2:7f:7d:ff:
6e:bb:49:54:2f:f9:6d:f7:18:72:63:8a:62:2f:f9:
94:f6:55:fb:31:d1:4f:41:6e:77:ba:58:dd:95:19:
e7:67:38:67:75:ae:34:ff:24:9a:a2:9e:78:1d:2d:
f7:c8:49:32:79:39:55:8a:8f:35:af:74:9e:bb:69:
f3:f3:61:95:e0:e7:41:b9:71:c1:16:16:ef:ad:89:
34:60:fe:dc:02:94:54:1f:e5:c2:94:b0:bb:d0:44:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:57:A3:93:1C:69:31:67:3A:40:A9:D5:EB:50:8A:6A:BF:F1:21:DD
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3c:01:ba:b5:5f:af:07:d8:23:34:c5:b7:87:d0:14:d1:4c:
ff:8f:28:b3:4b:da:0a:e6:7d:18:0b:75:c4:4c:73:bd:ae:e0:
e6:cb:66:9e:c4:05:92:93:0c:23:3e:4b:11:c3:68:77:14:92:
d6:94:e0:c1:6d:03:99:89:c0:46:23:a4:49:f0:e8:62:c8:6f:
e1:7b:33:e8:8e:05:9c:95:e2:fd:bb:c9:42:db:80:0f:3f:56:
bf:26:51:ad:f3:a7:16:67:1d:d5:3f:81:49:ed:d0:bf:f8:28:
8d:fc:88:15:fb:1a:6f:c0:df:39:80:09:92:a6:22:57:77:36:
7c:b1:ff:d4:3f:ba:3b:a5:7c:74:3c:8a:35:2d:a3:41:34:68:
8f:6f:f6:9c:a5:4b:18:7e:ff:63:03:c1:c2:0e:14:c9:b3:66:
6f:8f:2e:d4:05:e5:f8:1d:c0:18:11:41:7b:76:6e:f1:74:94:
66:c3:0c:9e:c4:fa:70:77:8b:42:d7:3e:53:14:dd:13:5d:43:
3a:16:e5:bd:6e:89:7c:05:3a:8d:47:29:bb:06:6e:f7:2b:68:
d0:3c:7d:7b:12:e9:ad:3d:88:27:c2:96:d5:eb:e5:e2:89:97:
d9:30:fc:35:57:17:45:bb:0a:21:73:e5:5d:1e:38:02:b4:90:
70:43:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:42:27 2026 by rpki-client