Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: iaiP/TyNzUoyFDZJO1aH+haJUnGdpYumo6xMX29BHBo=
Subject key identifier: 25:1B:B5:02:FB:28:C9:14:C9:8B:E6:1F:01:08:E0:3E:44:1F:16:1F
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 019FAA1A4451CC7DDF817B6791A6F10CFC95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 0AAE
Signing time: Tue 28 Jul 2026 19:01:15 +0000
Manifest this update: Tue 28 Jul 2026 19:01:15 +0000
Manifest next update: Wed 29 Jul 2026 19:01:15 +0000
Files and hashes: 1: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (hash: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: yz7yetdh+cX8ZfSgS7f1ql16mJVTsu6FR4HarA0B0pA=)
3: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (hash: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY=)
4: XtW69XYWfcYs9FhfW77svXCHmQk.roa (hash: +2PiuVV/xd9FID0vQ4PS/1nWqfCBv4fOx6GV++A7pIo=)
5: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (hash: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:44:51:cc:7d:df:81:7b:67:91:a6:f1:0c:fc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Jul 28 19:01:15 2026 GMT
Not After : Jul 29 19:01:15 2026 GMT
Subject: CN=251bb502fb28c914c98be61f0108e03e441f161f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:27:55:43:48:9d:99:64:c9:ca:88:e8:f6:21:
de:63:4b:6f:7f:49:20:dd:5d:c5:51:49:f2:9f:7f:
d6:e5:70:77:01:f9:4a:b1:81:39:13:8f:f9:20:bd:
25:a5:08:a4:f1:e4:f2:57:47:a4:4a:76:72:f9:c8:
da:a5:c6:db:ea:12:a3:d2:31:f4:9b:cf:66:ab:77:
23:16:31:61:12:8c:57:bf:df:53:35:be:20:a2:dd:
f4:98:cf:c8:40:2e:4d:6f:35:97:4d:5d:0d:29:29:
49:4f:4a:19:1e:8f:85:57:8c:8f:a5:7f:cb:24:70:
49:44:fa:a2:0e:6a:30:c1:ce:6a:54:bc:f4:d4:2c:
56:79:b8:7d:4f:4b:df:cf:99:f1:da:90:96:a5:52:
6c:37:bd:81:1b:54:55:05:40:0a:e3:af:66:18:bf:
c0:72:f0:fe:06:03:0d:67:9a:16:af:ec:ed:6c:20:
0c:8f:09:b3:75:49:07:02:8d:8b:c7:5e:f0:cd:44:
5d:3d:af:88:99:9c:04:fa:7c:b7:2d:4b:83:05:9e:
ff:a2:f7:93:1a:b7:32:a9:29:3a:b4:77:f9:a7:ee:
bc:cb:e3:3a:f6:56:2d:c2:bd:78:16:23:84:50:c2:
78:ae:d7:58:86:9a:76:86:95:c9:c5:2e:54:1c:6d:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1B:B5:02:FB:28:C9:14:C9:8B:E6:1F:01:08:E0:3E:44:1F:16:1F
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:83:5c:96:cd:1a:73:de:9b:ba:5c:93:3e:2f:bc:6c:fa:64:
37:38:f4:93:db:67:e0:ca:62:83:fa:c0:e4:cb:87:fa:c2:b7:
d7:0c:d8:41:d9:67:c6:96:68:5e:e8:53:62:90:7a:11:34:7c:
40:98:b7:a7:64:8a:d8:65:bd:32:70:b3:8a:35:d8:62:c9:84:
db:cc:73:87:89:51:31:bf:f7:69:e6:f3:70:97:2d:23:6e:ca:
85:cf:0f:59:11:f0:76:cd:25:8f:01:fb:06:27:bc:82:58:be:
40:3d:16:ed:36:3e:ae:49:b3:0d:83:ca:75:79:ae:b3:aa:5d:
3a:e6:11:31:09:4b:f1:d1:77:6d:15:13:42:7e:1d:31:13:99:
78:f3:ba:97:c8:90:3e:bf:89:36:75:b4:ae:fb:41:a6:ec:ba:
e3:b8:ac:cb:5d:24:5e:bb:81:64:ff:2b:53:fc:76:60:19:3d:
10:0c:2b:07:ce:21:e8:bb:74:9d:30:fb:7d:eb:ee:b7:e5:ea:
cd:19:c4:78:3c:4a:d4:ad:55:ea:f0:0c:01:f1:f2:dd:45:7c:
9f:ff:76:c9:42:69:92:b6:44:99:c7:cd:4a:5b:9b:bd:81:a3:
59:14:8b:b7:84:16:cb:bf:ac:11:df:c4:c5:dd:75:f2:c1:98:
37:2c:87:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:40 2026 by rpki-client