Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
File: GifvY687wptvZBikmfAnZKQ4PLc.mft (raw, json)
Hash identifier: ndfQ1UK8xbF7VVl9mlG546kU0c0iqNksQYkgnG3TPck=
Subject key identifier: B5:AB:DC:43:C8:1D:32:8D:B0:2D:65:1C:2F:C1:B7:1E:92:1E:33:CF
Authority key identifier: 1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
Certificate issuer: /CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Certificate serial: 019FAA8822FF80C6DE03811F3C3B44BBA99A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
Manifest number: 03
Signing time: Tue 28 Jul 2026 21:01:16 +0000
Manifest this update: Tue 28 Jul 2026 21:01:16 +0000
Manifest next update: Wed 29 Jul 2026 21:01:16 +0000
Files and hashes: 1: GifvY687wptvZBikmfAnZKQ4PLc.crl (hash: Bs3nUvO5L3tPo68bGQLr1caOFC5rj3KVqY5vh8xa2L8=)
2: SjegFY-bg73RyFDQETCva36kqVo.asa (hash: tJ7DlXPrtD85xuM0mM4j2KqjG3Y5z7UUAcw0fjYUsKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:22:ff:80:c6:de:03:81:1f:3c:3b:44:bb:a9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Validity
Not Before: Jul 28 21:01:16 2026 GMT
Not After : Jul 29 21:01:16 2026 GMT
Subject: CN=b5abdc43c81d328db02d651c2fc1b71e921e33cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:05:53:55:de:e8:4c:e8:de:82:ea:c8:10:
5a:45:55:d2:7e:6a:87:b2:e1:3d:a7:6d:e9:f3:0a:
8c:87:54:59:14:7c:bc:0b:70:90:1e:96:61:34:02:
29:72:e2:a5:1d:97:14:c0:f5:82:48:41:84:8f:b3:
7c:10:83:ba:d5:20:d9:5e:1a:e4:f8:e7:e7:44:db:
84:f3:60:bd:64:37:cf:c1:da:e4:ae:00:e4:0f:1b:
9a:7a:91:5a:80:9e:11:a2:e4:0a:94:5b:5c:4e:39:
8c:08:9a:4b:88:a2:76:9e:36:85:a3:6e:a1:8f:69:
96:71:b2:34:72:c3:c2:18:40:a9:55:03:61:d8:ca:
e0:23:14:4d:d8:93:36:3f:0c:1f:20:75:47:93:05:
96:8c:26:a0:56:db:4a:61:38:1d:0a:22:01:d5:a4:
66:1a:81:2d:5a:40:c7:a2:46:5f:26:46:7a:93:18:
0b:12:f7:5b:74:b3:7e:a7:7b:f9:46:18:db:63:29:
e2:d2:ba:5e:b2:94:e3:68:e1:c3:70:d8:03:69:74:
06:d7:1b:84:aa:bc:54:4d:79:4f:80:ff:13:ba:a6:
e0:88:4b:91:e5:8d:7a:d0:21:10:a5:f8:b8:6e:ad:
3f:3d:cd:a2:e4:dd:0d:d8:49:8e:f4:ff:25:cd:6f:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AB:DC:43:C8:1D:32:8D:B0:2D:65:1C:2F:C1:B7:1E:92:1E:33:CF
X509v3 Authority Key Identifier:
keyid:1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3b:08:3f:14:c6:d3:7f:c3:49:df:04:b4:73:bf:81:1a:91:
10:5a:1f:d7:85:e0:e1:ee:ca:d3:5c:0e:7c:54:55:ae:2c:6a:
48:ae:ed:55:94:71:64:f5:de:30:8b:4f:b7:43:d8:a2:d1:e2:
ee:99:92:f6:f0:55:dd:58:de:85:3c:f9:47:b2:13:46:aa:68:
07:45:8a:f1:f8:40:58:ec:5d:52:49:de:34:55:59:e0:3c:4e:
93:ef:13:0e:99:3b:09:6d:8b:c6:7f:1f:6b:35:dd:cc:4e:c1:
74:62:29:07:ff:a8:66:b1:ec:e4:ea:91:02:34:d3:5e:f9:99:
a5:82:bc:47:a7:f4:0f:b6:02:11:09:67:59:0e:b1:30:df:30:
01:ca:58:f3:18:55:35:b0:54:20:ed:a5:0c:25:92:e4:46:fd:
60:47:a5:52:39:c9:3d:67:0a:b2:da:06:1f:31:9a:a7:46:ee:
5a:4c:e1:ef:95:01:81:23:38:85:52:cf:7f:2b:5e:a2:0e:1f:
c6:75:64:d3:02:dc:3f:1c:d4:72:cd:f8:19:fd:14:ac:2d:22:
40:49:ca:e7:f0:4c:d8:de:9c:cb:eb:7b:4f:3e:e0:25:16:a7:
6d:74:7b:11:9f:30:fb:cd:7c:49:13:87:5a:b2:b0:fc:12:12:
fc:79:26:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:13:42 2026 by rpki-client