Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
File: gtiJtzM2c4evJNBuf5IeHrwOjMA.mft (raw, json)
Hash identifier: OMNG8n28Z1+NwFbXTavF+Z4pO7/tx0zN/MrXyanoEI0=
Subject key identifier: 42:F4:49:8B:2C:8D:95:94:79:8E:40:22:ED:42:A0:D0:9A:55:14:9C
Authority key identifier: 82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
Certificate issuer: /CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Certificate serial: 019FAA88FAAFA3D128C954C2FD6839743B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:02:11 +0000
Manifest this update: Tue 28 Jul 2026 21:02:11 +0000
Manifest next update: Wed 29 Jul 2026 21:02:11 +0000
Files and hashes: 1: Ivo9foptlHgZGm6u5gb6QwW3XyE.roa (hash: 2DKjAU7c2CAk3rfklrUELipPt0YMxIA0kvbW1SiZbks=)
2: bd0fr_kRPnaKLvLN9ZpO5e3Kz2I.roa (hash: WDxxU0O54RTfygWfLBj7mncB1ZZMMpBFwyQajkCAytc=)
3: gtiJtzM2c4evJNBuf5IeHrwOjMA.crl (hash: 6KhajxPID+KE2gUCX7B8UIPlLhyHi10Ikl2CsVjEzP0=)
4: i_5GgFY65mhct5XMfGA2cRGx7lE.roa (hash: u8f3lfAClBezvakZmVD5y6jZdKYCu72g+x8pASRVo2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:fa:af:a3:d1:28:c9:54:c2:fd:68:39:74:3b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Validity
Not Before: Jul 28 21:02:11 2026 GMT
Not After : Jul 29 21:02:11 2026 GMT
Subject: CN=42f4498b2c8d9594798e4022ed42a0d09a55149c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:4b:68:6b:12:58:c6:92:b3:ac:2c:7a:a9:
67:db:08:25:ba:23:b6:1e:fe:90:3b:11:e9:00:d6:
29:a4:03:93:88:14:b5:9a:9d:04:73:00:42:7d:d1:
00:44:14:0d:62:bf:07:e7:54:5e:21:45:3d:89:86:
22:10:d9:c0:ab:77:e3:cf:5b:a4:16:06:69:e8:c7:
30:cc:df:be:f3:45:5d:08:31:24:e1:63:64:94:fc:
3c:e0:47:5d:88:2d:37:67:5b:66:c9:e1:fb:ec:48:
20:92:82:be:4b:a3:e9:72:0c:02:e6:24:9b:b8:7b:
33:97:16:ce:ef:e0:81:05:64:6c:6e:ac:df:44:be:
ff:41:3f:f6:01:db:de:03:5a:f9:97:85:62:8a:1f:
06:83:03:ed:e3:98:31:bb:9e:92:88:e2:ea:78:f0:
35:cb:a0:c0:6d:aa:de:74:3c:a3:e8:b6:25:8b:6d:
0a:30:86:93:2d:bb:55:1f:48:77:e0:24:15:61:99:
1a:65:4b:26:dd:fc:62:a0:ee:2a:f1:f1:ea:5e:7b:
b7:f8:82:64:ce:0c:b9:7a:27:af:85:fb:1d:ca:7f:
5c:b7:b1:28:62:43:aa:b6:91:4a:62:fe:72:f2:55:
85:6b:0e:67:d6:6f:36:71:de:7b:2d:3f:60:15:cb:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F4:49:8B:2C:8D:95:94:79:8E:40:22:ED:42:A0:D0:9A:55:14:9C
X509v3 Authority Key Identifier:
keyid:82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4a:90:f5:85:18:75:83:1d:66:09:88:b9:16:75:a6:61:d8:
27:be:f6:da:78:18:f8:7f:83:c5:c5:b8:0a:ec:d0:31:ae:b1:
7e:30:12:f9:9d:58:80:5a:0d:f3:de:b3:e6:ea:cf:4d:20:c0:
16:d1:a3:62:72:aa:44:1a:ac:fd:af:df:c1:bb:26:bc:9a:9e:
b0:c8:00:31:8a:18:d6:c1:a7:5c:21:7b:f8:65:3a:d9:5e:f6:
d4:c5:a4:de:c0:74:fb:fe:63:c7:58:2a:ac:4a:34:65:25:a2:
b2:69:d1:6d:3b:cf:95:6e:ea:de:d9:e1:c1:5c:ae:66:38:de:
72:91:52:57:bb:d1:2c:96:8f:82:36:25:19:b2:8c:da:2a:fc:
f1:4a:ea:b0:df:df:4c:f5:47:bb:d1:27:47:d7:c1:1f:8a:d1:
82:34:9b:29:74:c8:d7:be:2d:81:01:fd:c6:37:02:a6:cd:73:
80:2d:96:26:e0:c8:4e:8c:85:84:7e:bc:86:a8:93:c5:75:b7:
e4:f8:6a:1f:a8:8c:59:11:49:d3:43:26:d0:53:26:13:a8:fb:
34:fc:eb:69:42:75:c2:53:f4:93:ae:33:5a:1b:40:41:0b:7e:
ac:9a:b1:6c:85:53:92:3d:35:17:28:3e:1c:43:b8:87:bf:12:
08:c3:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:43 2026 by rpki-client