Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
File: gIBkPxusC6RJkhdbr7bFlTxz3iw.mft (raw, json)
Hash identifier: y47e6jRnlWfES/bnJZXDsc5I/3SlAjSFTCNqrCifzfA=
Subject key identifier: 42:5B:49:FB:52:A8:26:D6:DF:88:06:28:62:96:ED:53:7B:98:A5:FC
Authority key identifier: 80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
Certificate issuer: /CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Certificate serial: 019FA93DD8AE1D33C68458F4B0EF7C23B33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
Manifest number: 0292
Signing time: Tue 28 Jul 2026 15:00:30 +0000
Manifest this update: Tue 28 Jul 2026 15:00:30 +0000
Manifest next update: Wed 29 Jul 2026 15:00:30 +0000
Files and hashes: 1: gIBkPxusC6RJkhdbr7bFlTxz3iw.crl (hash: FG0rF2IdpZCOlM2eWwDJ/5Uh/n+ASlIooURf//CGnG8=)
2: yeVF8Df3VPcnjSBNmqzoVDfx_BA.asa (hash: q/aLmgYWUuh1D94V+T+v2Y5wHbMtBtOfdm/5xzlYGS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:d8:ae:1d:33:c6:84:58:f4:b0:ef:7c:23:b3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Validity
Not Before: Jul 28 15:00:30 2026 GMT
Not After : Jul 29 15:00:30 2026 GMT
Subject: CN=425b49fb52a826d6df8806286296ed537b98a5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:39:f8:83:61:b2:a8:75:cf:bc:21:81:f6:
17:80:2d:c2:9b:45:96:c7:7e:86:d1:f3:70:ed:2d:
f1:b3:2e:11:4a:84:d2:f0:92:f7:71:f4:ee:77:fa:
f5:6a:ba:00:38:d1:ea:0b:b6:87:9f:79:23:0c:10:
b7:c0:46:4f:6f:28:42:e9:18:2d:d7:04:39:13:03:
d0:c5:60:eb:30:29:3f:7b:c7:a4:23:2b:8a:0b:ef:
7b:82:eb:fb:7c:82:0c:1f:8c:0d:fd:58:f1:c7:fc:
ba:77:57:ee:56:6b:3b:6c:fa:26:de:ae:ff:82:76:
00:d4:e9:a5:b3:34:fe:69:e8:53:74:2a:0d:7c:f6:
0b:04:4e:a7:42:90:a9:4b:a8:2e:fd:a1:80:44:30:
78:0d:a9:4a:ff:97:9b:8a:6a:08:8b:dc:b2:ac:17:
52:7d:45:b2:60:c0:40:c1:c0:16:6d:48:59:9a:b8:
0e:9a:69:d8:ba:c3:56:9d:e1:4f:0a:87:dd:ff:7c:
a2:57:e4:b7:17:4b:87:f8:6e:e5:1c:ff:b9:c8:1c:
b3:e5:61:a1:b5:79:26:b5:8c:cf:69:d4:9a:f9:c1:
de:37:93:c7:07:a6:f9:37:45:f8:a1:f3:d3:54:bc:
d3:3e:04:1a:04:b6:95:ff:6a:59:85:d1:95:4b:55:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5B:49:FB:52:A8:26:D6:DF:88:06:28:62:96:ED:53:7B:98:A5:FC
X509v3 Authority Key Identifier:
keyid:80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fe:47:5d:fa:f0:30:03:f6:d5:3b:cf:59:c4:75:53:cc:3c:
5f:d5:99:a2:6c:4f:6d:84:fe:eb:d9:0a:42:d6:49:f2:c3:4e:
1f:37:9b:90:98:57:db:d9:5b:66:0a:53:47:4f:92:56:fd:0f:
ee:0a:56:d9:ff:25:c9:8c:53:1d:3a:81:2b:8d:0f:bd:88:76:
8e:42:28:34:e8:ed:02:82:30:79:61:b3:b9:0a:2b:6d:1b:92:
c0:39:b7:19:11:9e:85:52:fb:96:61:25:1f:f5:c4:38:12:98:
16:2e:71:f1:d8:1f:3a:b6:96:b7:54:01:ad:3b:3b:4f:bc:a9:
8d:cf:b1:86:bd:41:e0:11:5b:94:c0:c9:07:b0:13:ea:f1:f0:
9c:73:3c:ec:46:a0:67:c6:90:40:00:59:29:64:68:91:f8:26:
d4:b0:49:19:fe:14:73:f1:fa:86:12:b2:e6:2a:fa:c1:86:fb:
16:6a:21:34:d4:a5:a7:a3:b9:7f:cd:43:e4:a9:51:ba:39:98:
be:be:4c:f1:65:bf:66:f4:32:cd:0b:41:82:76:99:20:3f:a9:
9a:25:ed:d5:d9:6f:61:01:a8:aa:95:a4:9f:47:78:03:20:9e:
7c:61:ef:bf:48:67:22:ba:1f:5f:9f:ab:d6:61:a2:c3:66:e2:
e7:69:81:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:51 2026 by rpki-client