Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
File: gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft (raw, json)
Hash identifier: FLnTGhnvfHchjuE8CYbY9T9NZopiMPh3H1NygcD6kfs=
Subject key identifier: A3:B3:06:57:F5:86:A1:AA:C5:86:C5:81:59:CF:48:23:D1:D8:AE:F0
Authority key identifier: 81:94:36:4C:BF:27:68:7A:9E:59:52:82:CB:61:69:75:A0:63:FB:FC
Certificate issuer: /CN=8194364cbf27687a9e595282cb616975a063fbfc
Certificate serial: 01A1DE714A3A730A8CB88FBAC8CB47B2E87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
Manifest number: 014F
Signing time: Sun 15 Nov 2026 09:02:08 +0000
Manifest this update: Sun 15 Nov 2026 09:02:08 +0000
Manifest next update: Mon 16 Nov 2026 09:02:08 +0000
Files and hashes: 1: 2bj5-0BZd7k7PxCQQt3dR6sMa_c.roa (hash: FbdQo9ph3iDjpX3oiKqtQfo2fgWCcSI1MBdgV3YQnqY=)
2: gZQ2TL8naHqeWVKCy2FpdaBj-_w.crl (hash: 1U6y1ZydfMrwq955blr46619C3zULlKsT0+tOm/K60c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:4a:3a:73:0a:8c:b8:8f:ba:c8:cb:47:b2:e8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194364cbf27687a9e595282cb616975a063fbfc
Validity
Not Before: Nov 15 09:02:08 2026 GMT
Not After : Nov 16 09:02:08 2026 GMT
Subject: CN=a3b30657f586a1aac586c58159cf4823d1d8aef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:ea:98:5e:3b:d1:3a:1f:4f:8f:b2:7b:26:
19:3d:db:69:6e:c7:de:77:6d:d2:ea:c6:6e:d8:6b:
2d:a8:96:d0:02:3b:83:f8:32:8f:c7:f8:86:2b:4a:
ea:63:93:67:82:8c:cb:d0:4f:9f:0a:58:de:65:69:
38:80:85:9a:f9:ad:9b:d2:e0:0d:43:0a:e6:a7:89:
fd:12:eb:59:13:04:57:44:4d:82:21:8d:1b:87:33:
9f:a4:22:4e:37:88:7f:18:88:d6:1f:11:be:5d:af:
37:0a:66:7d:06:50:43:26:10:26:75:bd:4a:39:86:
d7:ab:69:f7:ce:16:47:81:92:1e:c7:85:85:59:13:
9b:cd:c9:ce:88:fc:85:5c:64:10:69:53:3b:34:4f:
2a:22:f9:4d:d6:9d:56:81:cf:5b:56:13:d5:e4:6e:
de:6a:c1:f6:9f:96:5f:a1:11:8a:5f:45:ec:14:04:
1f:93:45:42:01:2a:af:fc:01:00:c7:87:81:cc:05:
ae:f2:2c:c5:02:b8:5f:30:c1:07:01:6f:51:d5:8f:
8c:46:1f:02:16:39:21:57:f4:2a:c8:39:dd:da:a9:
6f:34:69:9e:0d:e3:be:17:6a:2f:97:81:3f:fa:c6:
8f:84:c6:60:e8:1a:0e:48:8f:d0:bf:67:41:ae:07:
fb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B3:06:57:F5:86:A1:AA:C5:86:C5:81:59:CF:48:23:D1:D8:AE:F0
X509v3 Authority Key Identifier:
keyid:81:94:36:4C:BF:27:68:7A:9E:59:52:82:CB:61:69:75:A0:63:FB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d9:6b:8a:cf:83:0f:7f:f3:49:d9:99:9c:f7:59:35:77:d7:
b5:d3:d0:71:c3:d0:3a:48:9b:02:f2:8b:a7:35:34:bb:69:83:
1a:ac:9c:6a:a7:7d:c9:d7:68:27:07:78:58:09:f6:27:35:16:
2a:e4:49:d9:1a:2d:7d:a8:4d:3c:9b:80:86:ee:07:13:a7:ce:
23:f8:09:3b:8d:2b:76:58:7a:dd:ec:af:43:61:35:a5:7e:d6:
31:a6:85:7a:e2:a5:84:f4:d9:f5:c1:43:15:d4:f0:47:5a:88:
4e:3c:20:9c:cc:d4:23:56:76:ce:8f:47:76:c6:45:d1:18:a6:
1b:65:e3:51:70:96:b0:b9:84:31:fa:bd:9e:6d:34:9a:7a:4d:
93:da:ce:31:46:2c:e3:19:37:1f:09:43:d3:27:69:33:ce:2a:
a6:b8:f4:ff:f7:d2:37:44:bb:19:09:51:ee:aa:6c:45:b8:23:
ba:46:31:b8:24:be:23:e2:5f:f8:24:c7:3d:f7:5c:a6:96:c3:
00:00:f8:32:62:0c:55:68:a4:4b:35:59:05:82:bb:6a:e4:aa:
00:04:d1:3f:34:5c:69:59:78:4c:4a:61:79:46:fa:62:9f:69:
5c:72:7c:c2:f5:4e:ba:69:79:cc:0d:94:a4:04:d6:32:dc:fe:
c2:de:4a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:03:16 2026 by rpki-client