Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: wa//j+6Zb2Qt19fOkh6oJyw0PLG6/ERfQuoWZk112xI=
Subject key identifier: 5C:87:5A:BD:B9:6D:A8:91:03:65:21:8A:1D:0D:92:8A:81:CF:5C:9F
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 019FA82B68710EED5DB9E96ACE582D41BD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 19E7
Signing time: Tue 28 Jul 2026 10:00:44 +0000
Manifest this update: Tue 28 Jul 2026 10:00:44 +0000
Manifest next update: Wed 29 Jul 2026 10:00:44 +0000
Files and hashes: 1: BCTCosehzN-IVujDky1DFPEPdk8.roa (hash: dD51Omff3fmTkuQoAW0zLyIe0HD79k7wegGUmnwdJ5U=)
2: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: T6iZG4+VyZukTy1InmjY8zkUTmP0RZV8ljpZ67ke4DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:68:71:0e:ed:5d:b9:e9:6a:ce:58:2d:41:bd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Jul 28 10:00:44 2026 GMT
Not After : Jul 29 10:00:44 2026 GMT
Subject: CN=5c875abdb96da8910365218a1d0d928a81cf5c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5f:92:08:24:cf:9f:26:31:69:fe:14:42:85:
82:5e:24:39:f0:21:fb:50:a3:76:81:bf:ca:3d:89:
7b:a1:bf:ac:06:4e:ed:f6:04:b9:f1:79:30:60:61:
7a:b0:ac:9b:c9:78:9b:b9:5e:49:f1:18:0d:44:3b:
f3:1c:38:5f:a5:77:19:55:c2:37:7c:a4:cf:7f:b4:
1e:73:66:17:c8:7a:a5:77:e5:27:aa:c0:58:69:cf:
ea:62:63:7d:81:30:c5:a7:37:4a:74:3b:22:f2:11:
99:6f:ec:79:3f:35:91:2a:e9:94:c6:fa:38:1b:04:
81:e8:ad:d2:02:50:a8:a8:19:72:26:b8:2f:e9:6a:
c1:db:31:c4:e7:81:ba:44:2d:66:3a:4d:08:5d:ee:
0f:e4:fc:1b:76:aa:32:bb:a8:e4:05:50:b6:56:4b:
fc:cf:f9:48:fe:d6:40:c5:a4:c2:af:4d:5c:eb:33:
93:b2:c1:03:66:66:c2:de:e2:0b:00:13:c7:5a:83:
af:3f:db:86:6c:44:c4:3d:42:8b:fd:76:bd:2a:7e:
83:07:6c:63:64:7a:bf:d3:87:f8:a5:62:2c:62:9b:
e0:25:0a:99:02:d4:f3:1f:e9:f5:d5:2b:ea:ab:8c:
3e:55:c1:3d:3d:3a:70:64:56:1d:17:1f:57:e3:5b:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:87:5A:BD:B9:6D:A8:91:03:65:21:8A:1D:0D:92:8A:81:CF:5C:9F
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f6:ea:78:ae:b3:87:90:f3:8e:ca:8c:8f:6b:b8:06:8d:d9:
27:e6:91:64:05:19:ae:ce:19:d8:3a:3b:39:d9:17:27:35:13:
6e:7a:cf:11:ec:9c:59:0a:34:57:b2:55:b2:2e:f3:6b:25:8e:
68:77:7e:80:ca:fc:a7:d0:dc:8b:50:4f:49:9f:f2:af:78:42:
2b:06:f5:22:08:46:34:43:6b:4c:eb:4b:ca:38:36:d6:87:0f:
86:32:20:08:84:dc:8d:9c:4a:48:4b:f7:2a:26:f5:a7:12:36:
2c:5e:ff:01:0f:86:80:3b:a1:b7:f8:17:c1:f5:0b:32:47:8f:
0e:b1:87:fc:a2:bb:0e:00:c5:5e:db:00:74:bc:7b:fc:2d:2b:
d1:9e:ac:2a:3a:94:2b:41:7d:c8:b9:50:d9:88:ad:c7:be:3d:
00:98:b2:4b:46:f0:5f:e4:bf:aa:ac:f4:a8:19:55:29:d5:1d:
a9:82:bd:2d:46:91:7d:99:bd:24:7c:37:eb:31:e8:0b:7f:f3:
1e:12:af:75:c7:67:fa:fa:84:f4:b3:ef:94:ae:9a:6d:73:5f:
5c:1b:74:13:30:cb:1c:5d:77:63:e7:6b:33:50:e7:b5:fa:eb:
fd:b7:18:5e:7d:99:81:0a:2e:3d:4c:b4:68:27:b9:a4:05:ee:
b8:f7:c9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:14 2026 by rpki-client