Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: uGRllmYbeQhwr44PbyZCexJq5jnWJzeKs+MoetTLkIM=
Subject key identifier: DF:81:8E:82:02:78:8D:0E:C2:91:CE:34:CA:41:01:72:8C:E6:ED:84
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 019FADBFF7175C409DD5CE57898CE0DCCED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 1673
Signing time: Wed 29 Jul 2026 12:01:06 +0000
Manifest this update: Wed 29 Jul 2026 12:01:06 +0000
Manifest next update: Thu 30 Jul 2026 12:01:06 +0000
Files and hashes: 1: 1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa (hash: nATa+n5oWjMZXiwMho7tjE9Rx2x+4yb18TAu52HSqiY=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: 5koQlPujeatAZeDKRTTJLkGpfiBEiS6HedLwAsGnVuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:f7:17:5c:40:9d:d5:ce:57:89:8c:e0:dc:ce:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Jul 29 12:01:06 2026 GMT
Not After : Jul 30 12:01:06 2026 GMT
Subject: CN=df818e8202788d0ec291ce34ca4101728ce6ed84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:9a:bb:ae:01:af:05:49:ed:36:ec:1c:58:
68:c0:12:48:93:8e:10:01:ee:d3:ce:07:34:95:f6:
9f:62:a3:7e:00:ae:80:61:7d:ea:0b:d3:94:c1:1a:
1f:11:b5:11:49:61:f1:da:f4:17:ad:f9:81:fd:86:
c9:c8:9c:83:aa:ed:1e:a0:b0:8c:bc:a0:84:cd:ad:
c4:9c:6f:58:54:87:8b:61:82:63:74:14:47:89:9a:
c3:fd:52:43:4e:46:bb:a9:af:aa:42:a2:49:d5:6b:
08:1f:9b:77:ee:ec:8b:8e:09:41:0f:32:a9:45:61:
8b:4e:37:fe:0e:a8:8b:3a:c5:dd:0c:c1:fb:6d:d2:
15:9d:52:f4:76:63:c3:3e:83:cf:2d:3d:8f:ad:85:
e2:3a:28:ce:c8:35:79:fe:ea:ef:e7:34:c7:7f:d6:
ac:38:0a:6c:e3:bf:16:9d:42:1b:14:22:f6:2b:5d:
2c:65:a2:ad:09:6d:6e:2e:a0:1d:24:84:a4:0f:05:
56:64:2b:34:ef:c6:f9:e2:11:4c:36:73:cf:02:ed:
56:0f:85:e1:58:e2:7a:b4:01:94:a7:fe:6d:9c:e7:
57:5c:a2:09:75:f8:68:de:13:a8:47:4b:4a:9b:09:
fa:e7:4b:72:cb:9d:d4:3b:da:df:4c:49:be:1f:8c:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:81:8E:82:02:78:8D:0E:C2:91:CE:34:CA:41:01:72:8C:E6:ED:84
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7a:a6:40:a2:a7:30:f5:f8:18:fe:27:b0:a4:fb:c2:89:ca:
4b:66:a8:d7:cf:76:7e:9e:bb:ff:80:c9:54:cf:15:c3:f4:b3:
f4:c6:6f:45:5a:db:19:df:15:38:9a:fe:86:68:3d:58:1e:fb:
20:03:b4:98:e5:f0:72:25:df:97:27:ca:24:c2:2e:28:0f:01:
70:b9:ba:02:5b:32:27:d0:07:81:ce:55:18:06:04:f2:2b:5f:
51:16:30:14:cf:a1:c7:f3:47:ef:81:df:7a:47:9c:3b:c7:96:
d3:5f:cd:7d:10:f9:4d:26:ac:7d:89:4e:54:a5:ce:59:21:d8:
e0:50:cc:eb:ae:80:2f:cc:38:88:2d:a4:08:f2:51:a0:44:49:
24:de:cb:fe:12:f5:b2:07:17:92:67:04:76:67:ee:cb:04:8e:
ed:4f:17:ac:a1:9c:4a:7b:e0:1b:15:1b:fb:66:fa:57:7c:67:
78:ec:48:53:4e:93:7b:88:dd:d1:20:c1:a6:b4:19:93:19:9b:
6a:b2:4c:c7:8a:e0:24:1d:3b:a9:60:a7:69:87:9e:e0:8e:ea:
d9:fb:1a:97:5e:7a:9a:18:c4:cb:92:e6:4f:ed:44:2c:ba:ec:
b9:2b:cc:85:62:55:71:e5:9a:0b:a3:06:94:02:e4:47:be:59:
ba:d7:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:55:48 2026 by rpki-client