Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: GuugoFuzc/ZBGCsfixlMkeepXvEcXknsPetKXTJaz10=
Subject key identifier: 27:09:36:1D:3A:E0:E4:95:0F:A7:43:12:2F:4C:7C:16:FF:EA:30:A5
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 019FAC085B44C20B9ABE421ED4E792E8780E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 0AAF
Signing time: Wed 29 Jul 2026 04:00:56 +0000
Manifest this update: Wed 29 Jul 2026 04:00:56 +0000
Manifest next update: Thu 30 Jul 2026 04:00:56 +0000
Files and hashes: 1: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (hash: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: PrGqVA1T9np9DJlM4JXcysC0k52egDq67BSvVQoicAg=)
3: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (hash: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY=)
4: XtW69XYWfcYs9FhfW77svXCHmQk.roa (hash: +2PiuVV/xd9FID0vQ4PS/1nWqfCBv4fOx6GV++A7pIo=)
5: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (hash: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:5b:44:c2:0b:9a:be:42:1e:d4:e7:92:e8:78:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Jul 29 04:00:56 2026 GMT
Not After : Jul 30 04:00:56 2026 GMT
Subject: CN=2709361d3ae0e4950fa743122f4c7c16ffea30a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:52:05:3c:04:aa:ec:69:bd:d1:c2:1a:2c:
7c:f8:e3:36:c8:f2:92:e2:de:2d:4d:3d:47:bf:3a:
c2:c8:05:2e:e6:8d:81:27:51:a3:9e:8f:22:fb:a6:
8a:62:b5:67:d3:e5:fa:f2:8b:c0:03:f9:50:25:cf:
82:00:b7:60:b0:8a:e8:cb:94:a7:48:32:cf:f6:24:
f1:92:aa:d3:48:a2:c5:ce:9f:a3:f6:83:ba:b5:97:
c1:af:97:d7:81:ac:ba:37:34:56:69:80:6e:2e:b7:
5d:e0:a6:6d:89:af:f8:07:84:70:d2:05:74:c9:8b:
43:1e:9f:04:a0:37:0d:8f:3e:35:c1:21:8f:18:92:
37:c4:6d:e1:09:df:13:b3:f5:ad:4d:d9:61:96:46:
a1:f8:6b:a5:df:e8:79:ea:bd:ca:1d:56:fc:c2:92:
9d:cd:d0:d2:d6:2a:13:94:9a:06:da:6f:89:20:16:
34:89:6c:72:da:9f:ce:e0:63:aa:9b:a6:24:a7:ae:
d4:c0:80:61:c9:dd:4f:45:b6:29:66:40:33:03:c4:
35:bb:5a:5d:08:c6:25:8b:24:49:28:7d:ca:96:10:
6f:12:0b:7a:4c:d7:b7:f0:08:83:8c:c1:7f:c8:4d:
a0:b9:0b:f4:91:79:92:d4:cb:0d:db:1e:95:0d:05:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:09:36:1D:3A:E0:E4:95:0F:A7:43:12:2F:4C:7C:16:FF:EA:30:A5
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:da:00:88:ba:ec:9b:9d:03:74:5b:57:7d:22:0c:a6:ab:39:
8f:59:a0:c7:b3:d9:a2:ff:c3:19:63:13:e6:90:ae:40:93:5a:
23:25:39:4a:3a:19:7e:c1:32:3a:44:85:eb:ba:12:1c:69:19:
eb:ba:29:ee:08:b6:cc:c3:83:60:b4:34:e8:48:18:25:4b:83:
87:ab:a4:54:62:2d:5f:ca:44:f4:63:db:e5:cf:1e:bd:5f:50:
67:33:e8:10:6c:c5:67:55:3e:9c:60:af:29:5e:c0:81:c3:5b:
ec:b3:9b:54:76:34:bc:45:52:75:bf:65:3e:be:6c:fe:f7:44:
b2:27:9c:20:6a:3e:5b:00:fc:b3:a4:47:28:9a:9c:6e:c5:26:
f2:24:8f:ed:01:64:f9:ec:42:6d:cd:2d:74:d4:a6:3e:45:c0:
32:b0:83:04:f2:fa:95:2c:43:9f:bf:32:14:22:ef:55:a9:fd:
cd:d3:fa:71:6f:99:ed:0c:b9:d4:92:87:56:31:f5:6e:b2:d6:
c1:09:72:71:06:3d:0a:99:b4:a2:4d:58:eb:a4:9b:de:7e:7d:
c9:00:8b:1e:61:1f:5c:40:79:81:b8:c4:76:89:b2:5b:4a:5b:
0b:f1:15:56:62:c9:c0:e5:5d:e8:84:62:47:d9:8b:90:ff:1d:
3a:68:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:13:12 2026 by rpki-client