Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: O/ghb9Ux35afv8hExcNb4fA/u+bz9SxL/pFX3Bwco6Y=
Subject key identifier: 66:1D:AB:7E:2A:D4:06:4E:4E:32:23:58:8C:0B:FC:FF:0F:BA:B8:01
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 019FAAF531534926DC95D7C2AD4A16A38BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0F59
Signing time: Tue 28 Jul 2026 23:00:23 +0000
Manifest this update: Tue 28 Jul 2026 23:00:23 +0000
Manifest next update: Wed 29 Jul 2026 23:00:23 +0000
Files and hashes: 1: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: Fk58nN1QOdcIbKw4Q3KOa5PJ/HFOPDWk6WuxSwCEamg=)
2: ioSKJKkF_4HM_F6u6RJnkLY1uWU.roa (hash: WbXNH1FTymiYyoPgw712is108gr5GM8N98thfxq0yjg=)
3: s7B9p4vTJAow4sBYhbnToQXwFKo.roa (hash: nHDCoe/MNgEdbVoOhEHnJFTP5BTnyS6pKwNLw3+w7aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:31:53:49:26:dc:95:d7:c2:ad:4a:16:a3:8b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Jul 28 23:00:23 2026 GMT
Not After : Jul 29 23:00:23 2026 GMT
Subject: CN=661dab7e2ad4064e4e3223588c0bfcff0fbab801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:18:a4:72:31:b3:7b:2d:1b:d1:52:ed:8f:
f8:fe:26:f5:fd:64:08:80:6e:60:ef:6e:21:3f:13:
81:79:56:23:74:d7:50:80:ae:0e:85:43:65:94:ab:
14:5f:6c:7a:73:61:00:f2:06:a0:95:40:24:a8:c2:
3e:d5:e0:d2:1d:ed:9b:9f:fe:bb:b6:3e:d2:68:a6:
c9:62:88:07:2a:dc:6e:33:ad:e0:d6:4c:93:b5:bb:
7e:f8:da:01:d5:3a:08:5e:c4:e6:35:7a:b5:72:6b:
24:56:e3:c7:da:e1:8e:4d:09:59:ea:fa:90:e7:6f:
34:42:ae:52:8d:6e:92:10:b3:19:c8:71:03:ab:58:
2d:f7:22:c1:1a:b9:4e:76:72:62:20:f9:b7:7d:ea:
e8:33:ee:39:d5:08:66:7b:e6:67:e1:18:52:f4:aa:
c3:05:6c:7c:b4:94:8a:bf:70:6f:d3:25:33:74:20:
e8:86:50:d0:70:7b:1f:f7:79:4e:01:32:f3:93:83:
fb:fb:d5:62:27:b1:40:c6:22:fa:68:80:6a:c5:41:
1c:e9:64:72:83:85:84:29:7d:08:2d:58:00:8a:fe:
81:0a:aa:15:5a:72:a1:a9:d9:bb:23:65:58:5d:bb:
6f:78:ce:ce:07:b6:31:83:9f:e2:d9:03:2f:8c:fb:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1D:AB:7E:2A:D4:06:4E:4E:32:23:58:8C:0B:FC:FF:0F:BA:B8:01
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:55:5e:f5:28:7a:55:4f:da:c3:18:be:0f:c2:14:0f:2a:09:
93:83:0c:d3:c6:c1:55:d7:a7:ca:00:80:d5:71:02:60:a4:1a:
94:49:b8:35:20:53:31:61:3f:3f:27:b5:56:fa:a6:c6:ca:d7:
ae:bb:86:56:a9:3e:02:b1:b4:6b:7e:2c:51:76:6e:84:7e:4d:
dd:b1:42:4f:15:eb:e7:f0:3e:d8:6a:33:e4:b3:eb:79:f4:94:
b4:68:35:26:a0:ac:3f:ba:cf:b9:2f:be:41:78:b5:ca:e3:f0:
c4:ed:3c:12:94:12:67:07:dd:cc:4b:25:2a:d7:e5:73:e7:35:
fb:6c:91:87:a8:93:17:df:eb:2b:f0:68:bd:02:27:40:78:58:
c9:4e:34:4f:d1:10:51:d3:39:b7:f4:00:d9:b6:8c:48:59:37:
79:4b:86:eb:32:ff:dc:9d:fa:97:9a:e4:43:23:0b:f3:e4:a7:
c7:22:ec:22:ac:f8:d6:9e:f0:58:93:8a:a8:41:62:ad:3c:a4:
90:a7:01:eb:1d:3f:4d:d0:56:25:86:2d:9e:5e:a9:ac:08:22:
ff:fc:d9:ec:2f:7f:44:b6:f2:87:ca:1a:cf:7f:02:13:b7:26:
b2:15:d3:5a:41:56:4e:f3:7c:31:5c:2c:f4:34:64:4b:03:00:
7f:eb:4f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:59:18 2026 by rpki-client