Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: ycX3ZYWWC3fZDPzlx2UKPcw1ALkEGiwgKMJ/DgAK8uE=
Subject key identifier: C1:72:BF:2A:47:47:89:B5:51:B7:EA:3A:44:C2:DB:F6:4F:BF:31:43
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 019FA93DDBF42E072634AC7D73ABDF8EE10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 15:00:30 +0000
Manifest this update: Tue 28 Jul 2026 15:00:30 +0000
Manifest next update: Wed 29 Jul 2026 15:00:30 +0000
Files and hashes: 1: 4ShXPhWP4Qk_JTUR7nsENpLjDoc.asa (hash: HXRCdfUgdsuwOo68NwP3+PURL7JrnmOHum1V4B+oxJQ=)
2: aiWvgSfnwbnLlzyTpx8toxkUKEw.roa (hash: yBRys49Mvvm6+/VlItOHtileiNejv8QSbeDxO1U1PhI=)
3: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: t1snw+p0tBKfNK2HJE7a/7t3v80HtMcdXLE2pC6A978=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:db:f4:2e:07:26:34:ac:7d:73:ab:df:8e:e1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Jul 28 15:00:30 2026 GMT
Not After : Jul 29 15:00:30 2026 GMT
Subject: CN=c172bf2a474789b551b7ea3a44c2dbf64fbf3143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:44:73:1a:7d:e7:7f:ed:94:5d:fe:c9:1e:
3f:d7:ee:d3:f6:63:50:2f:a5:c6:5a:a9:70:53:93:
58:c6:c4:e4:d1:a2:45:84:d3:50:c3:78:ea:85:7d:
ee:6a:e9:3d:1f:92:8c:ee:04:c8:6a:cf:b3:78:df:
5c:5c:30:ce:9e:6b:70:e7:1e:2c:46:aa:a8:ba:72:
58:03:4e:1e:f0:b9:21:d1:5d:d9:a2:19:b1:b3:8c:
36:bc:ec:58:07:b1:f6:18:47:7a:a8:96:83:cd:0d:
05:ca:87:8e:19:72:66:8c:f0:be:b5:71:83:bf:b0:
4d:5b:bf:14:71:e0:6b:c0:89:3f:7d:d6:d6:31:08:
04:ca:20:b3:60:cd:2f:09:18:ca:ba:1a:55:2e:01:
03:d3:01:3f:ed:b3:58:02:94:d0:99:b9:ee:7c:9e:
dd:2a:d7:3a:44:af:44:41:0e:3c:a7:57:c3:f2:7b:
aa:35:1c:5e:38:b5:69:91:b8:98:85:47:c1:98:f7:
a2:09:90:3f:59:61:33:8c:1b:cd:5b:93:89:a7:5a:
a2:3c:5a:cf:d2:e6:1c:3f:ff:1c:43:08:9f:5d:ad:
db:f2:b4:7f:12:ed:4c:c5:fb:59:30:50:f7:57:da:
b9:e2:af:e2:13:2e:c1:86:44:85:6e:2c:4b:a8:e4:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:72:BF:2A:47:47:89:B5:51:B7:EA:3A:44:C2:DB:F6:4F:BF:31:43
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ce:65:b6:48:75:d7:13:37:a5:82:91:a9:9f:fe:ce:ca:c6:
53:2e:97:0e:52:2b:fa:30:e7:22:c2:93:c9:d0:b9:94:5f:46:
a6:76:10:f1:1d:e7:b7:ee:1a:f0:7d:4c:3d:7a:1c:ec:01:8a:
e5:d2:a2:fb:e5:e2:7c:0c:cd:15:45:63:e8:cf:4d:71:74:2f:
5b:cf:36:50:ae:25:21:ce:d5:c4:db:95:aa:9a:5a:bd:1b:67:
68:6f:b7:44:60:22:1d:a1:00:d8:16:c9:0c:7e:14:13:4e:64:
6c:a7:5b:f4:82:ef:3b:d4:44:d1:13:cd:91:a1:47:cc:07:67:
c9:6f:78:e4:09:31:38:f3:28:30:bd:5b:a6:d4:17:3c:74:80:
87:bf:b8:c0:cb:f4:db:d6:cb:b5:b7:c8:bc:6e:91:a3:d9:00:
94:a6:3c:ec:14:1f:4f:a1:ba:a3:92:62:15:82:84:49:46:5b:
a1:91:08:4a:27:ef:2b:0b:fb:98:2d:d7:ac:50:ac:51:61:1b:
d2:f0:37:40:f8:1b:28:24:54:75:a6:48:a2:2e:53:86:00:a2:
40:e7:a3:8a:13:b8:f6:a0:a3:b2:f4:d7:f0:a8:33:2f:cc:62:
8a:4a:ba:07:c9:b7:23:d8:ac:13:56:97:a2:1f:03:11:66:49:
07:b1:04:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:50:21 2026 by rpki-client