Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: 3pa9avNT06okPGtrZSOQQf2HehIIqjS+ky9FgLm8oig=
Subject key identifier: EC:03:3F:18:78:9B:14:D8:53:09:92:09:0B:8A:21:52:DD:C6:31:AF
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 019FAB9A68AE4F82598A372C15B28DB29B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0BB9
Signing time: Wed 29 Jul 2026 02:00:50 +0000
Manifest this update: Wed 29 Jul 2026 02:00:50 +0000
Manifest next update: Thu 30 Jul 2026 02:00:50 +0000
Files and hashes: 1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: Q0I+BLNXu+ymFy380XP52mtIG5E1+wkc1fRCHsyveJA=)
3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:68:ae:4f:82:59:8a:37:2c:15:b2:8d:b2:9b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Jul 29 02:00:50 2026 GMT
Not After : Jul 30 02:00:50 2026 GMT
Subject: CN=ec033f18789b14d8530992090b8a2152ddc631af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:13:83:af:8c:01:62:b9:85:68:d9:03:6d:
2f:14:fa:be:a6:d0:fc:75:99:00:22:9d:13:8d:91:
58:5d:0c:21:6b:b7:a3:ab:e0:58:e4:c7:49:26:34:
d6:8f:c5:04:0a:02:10:ce:78:a9:3d:3c:73:11:48:
62:8f:99:da:6e:5a:a5:f1:2d:4b:60:bc:98:e2:70:
e5:97:ca:90:77:f0:b5:3e:f6:25:1e:c1:13:f6:ab:
81:4b:4e:df:e8:4d:5d:a6:ff:20:57:1f:32:51:c5:
68:36:0c:8d:14:14:c4:2c:b7:d6:5d:25:37:5e:b6:
c3:f9:2e:20:8b:e1:ec:8d:11:1e:28:07:e6:a0:8a:
9b:f1:f3:e1:23:b3:39:44:00:61:50:87:9c:27:04:
7b:3b:39:6d:0e:c8:1f:dc:7e:06:f5:9e:95:b4:76:
d9:7d:3e:e6:2d:bd:a4:84:60:e3:76:4f:34:a1:ba:
68:40:97:b2:da:d0:44:1d:37:75:4a:04:23:00:2b:
30:5a:b7:88:11:38:1a:07:97:5d:0f:4f:c3:f3:03:
60:78:0b:c0:f5:5a:3a:43:08:08:f0:b2:98:e7:ae:
94:62:e7:97:6c:56:12:ca:1f:07:3c:e1:d6:63:a5:
ba:68:36:f5:67:e7:a0:93:dc:d9:73:26:9c:44:f6:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:03:3F:18:78:9B:14:D8:53:09:92:09:0B:8A:21:52:DD:C6:31:AF
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f6:8b:34:0a:93:5d:28:00:33:3e:68:2d:c9:d8:2b:cd:e3:
d4:ef:06:2b:db:76:0d:f3:f3:7c:49:c1:63:8c:71:c9:cb:73:
fd:0b:38:b1:ab:76:03:c5:bb:1c:d8:4e:f6:1b:58:70:78:b7:
a9:3d:da:9d:86:2c:cd:d7:53:64:a2:46:fb:23:26:d0:49:61:
9c:1b:3e:42:62:a7:da:80:5d:3b:86:5a:c6:4a:ab:fe:fe:ef:
eb:eb:d9:de:64:75:ed:d6:58:6a:e9:81:13:21:7f:a4:55:0a:
40:9c:80:32:7f:2b:4a:7d:51:06:4a:d2:d3:a6:40:b2:ec:ad:
4d:60:e1:99:66:74:d1:36:5a:ef:fa:d6:66:3a:e7:16:c4:0a:
92:be:ea:67:fe:6a:37:4a:21:0e:5c:5c:f1:3e:83:25:35:fd:
50:85:3b:9b:73:59:79:12:51:c4:c5:bf:2b:36:38:40:0d:c4:
f4:24:42:a5:e6:e5:90:f2:b9:7a:61:32:5a:74:fc:de:0f:8d:
4a:68:8b:55:4b:1c:14:2c:41:5a:c6:65:95:e5:b9:a3:aa:59:
0e:a3:a8:7d:fb:07:84:87:4e:fc:9e:e8:a5:7d:24:36:48:1e:
9b:9e:5c:ff:8d:f7:5d:52:d6:b6:c4:f9:a0:72:35:c0:52:7d:
c8:83:3f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:24 2026 by rpki-client