Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: C3RyAJmClHONLmW10oivyia8F9gewVV8Thp4RXtiN54=
Subject key identifier: A5:F0:DC:26:79:27:F8:18:2E:8C:69:28:5E:F3:EB:CB:2A:7E:B2:08
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 01A0D8A7FB3C78B0104B6AD5FA62F33D7AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 079F
Signing time: Fri 25 Sep 2026 13:01:22 +0000
Manifest this update: Fri 25 Sep 2026 13:01:22 +0000
Manifest next update: Sat 26 Sep 2026 13:01:22 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: R4aRBC91CfUdNnQp0M9p3VmWDbJUredGjpKz4Lh4UW0=)
2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a7:fb:3c:78:b0:10:4b:6a:d5:fa:62:f3:3d:7a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Sep 25 13:01:22 2026 GMT
Not After : Sep 26 13:01:22 2026 GMT
Subject: CN=a5f0dc267927f8182e8c69285ef3ebcb2a7eb208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:10:fc:fc:ff:aa:16:29:6a:f1:06:23:e0:
b7:76:70:8d:45:3f:d0:45:13:44:64:86:ab:16:db:
f4:47:17:25:38:08:94:13:18:85:0d:ed:47:2d:6c:
56:39:06:ac:8a:a2:dd:7c:1c:df:35:48:15:1b:a3:
d2:ae:23:43:fc:be:7c:da:29:59:8b:9d:af:e0:2d:
52:31:7a:f9:2c:03:5b:fd:39:84:dc:bf:b0:e7:68:
ba:76:6c:39:be:a0:bb:8f:e3:d8:68:bf:07:af:42:
c6:48:fd:af:77:ea:47:a8:6e:7c:ea:e5:a7:14:38:
50:65:13:33:ac:4f:0e:2a:40:cf:d9:7e:8d:95:0e:
04:b5:7e:16:be:b0:59:bc:79:1b:af:c8:20:4e:c9:
23:e7:2a:b8:4d:79:1e:f4:86:8a:b0:a9:29:46:0e:
3d:20:66:9f:1f:d6:84:6b:59:61:38:d7:f7:6e:3a:
ec:8d:1c:2c:a1:4a:32:af:8d:d7:1d:69:e0:3d:0e:
6e:66:34:5c:7a:3e:78:0e:9f:d4:fc:e5:c4:a4:ef:
21:1d:ac:6c:6b:8e:7f:b1:db:40:4e:da:86:98:bb:
6a:b3:43:48:33:95:8b:0a:51:0a:de:48:12:3e:18:
92:4e:36:78:8a:45:de:43:d7:ea:1a:05:2f:f5:f3:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F0:DC:26:79:27:F8:18:2E:8C:69:28:5E:F3:EB:CB:2A:7E:B2:08
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:61:61:8c:7b:cb:21:a0:c4:1c:6f:49:7d:c1:a5:e2:3f:81:
f1:f0:60:2c:13:08:a0:e7:a3:e2:99:c9:e2:43:8f:be:c8:38:
ad:b0:67:2d:49:04:82:e1:86:dd:54:b4:f6:46:a7:20:b4:5c:
d1:5a:0e:d2:ac:89:4c:88:1f:59:da:98:a2:30:3b:6a:61:68:
cd:24:1e:e2:2a:1e:52:db:3c:f7:d8:eb:76:e0:6c:f2:0c:5e:
17:f6:86:22:00:ba:8c:6c:87:fb:20:e9:63:9b:ba:e7:8e:20:
35:1b:e7:43:81:3a:2f:b9:43:5d:a3:18:3e:72:2a:db:e5:f7:
a1:cc:fd:df:25:05:d6:94:b4:f5:e3:3f:d0:da:bd:49:11:bf:
16:98:6c:c1:d0:1c:3e:52:45:22:08:a5:0f:01:e3:af:29:43:
a9:d7:58:ce:35:d9:30:11:1e:58:97:82:d1:98:12:66:8e:bb:
31:43:88:0a:0d:37:b1:4f:47:35:69:91:f3:16:8d:d6:59:0d:
80:cd:f4:0b:c5:d8:7a:25:27:73:a7:b0:81:6f:9c:26:2d:c8:
b2:41:a7:ef:76:47:5b:92:c9:7a:d2:7a:0e:65:78:c2:fb:41:
29:31:b7:3f:49:66:6b:1d:35:54:57:1d:e7:9e:ef:52:01:98:
7f:77:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:15:36 2026 by rpki-client