Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: VLPf6/P5NC6CDmYG5Oxm5pMbmwD2G148W3IouW5ypmE=
Subject key identifier: 4C:ED:AF:71:6C:D1:04:0B:21:E7:C6:2E:A0:1C:07:95:EC:03:82:29
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 01A1DD5E07E5D28094E640D90BC675A3EBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 0518
Signing time: Sun 15 Nov 2026 04:01:29 +0000
Manifest this update: Sun 15 Nov 2026 04:01:29 +0000
Manifest next update: Mon 16 Nov 2026 04:01:29 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: FwBeYMzMLmWz16pR9rxVkeM8TimOtB0nNs3q+qMXkVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:07:e5:d2:80:94:e6:40:d9:0b:c6:75:a3:eb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Nov 15 04:01:29 2026 GMT
Not After : Nov 16 04:01:29 2026 GMT
Subject: CN=4cedaf716cd1040b21e7c62ea01c0795ec038229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:f7:b7:95:b8:a4:0c:99:c4:5c:85:87:75:
97:17:5e:d2:8e:8d:95:67:2f:6f:55:ca:41:0e:72:
2e:16:95:a5:7b:9b:62:86:35:99:ab:0f:00:d4:73:
51:f8:76:45:ec:34:8b:48:5c:74:84:8b:ec:34:33:
4f:80:06:64:39:83:59:d2:3a:76:2e:2a:52:29:62:
2e:cf:5a:c0:cb:fc:37:d7:ee:b8:2b:eb:31:2c:5b:
bd:37:f1:5c:a3:4c:0c:2b:01:c7:e3:35:09:12:60:
d9:e7:d0:16:26:27:2e:7f:33:a7:f2:9b:59:39:80:
85:e1:e8:53:c0:0c:e4:c5:4e:f5:01:21:af:56:27:
24:11:ef:53:05:da:a0:47:a9:04:0c:23:49:a8:df:
71:35:2a:19:f7:ac:0c:b7:90:4e:15:df:3a:1f:0f:
60:d3:51:2b:06:ef:89:dd:f4:e1:33:28:e5:b3:d9:
9c:5d:70:f3:ce:89:da:b6:63:fa:8c:7a:64:c4:8b:
23:d5:50:f7:20:aa:2c:ce:03:eb:ea:d2:18:0e:e4:
26:29:0c:6f:2b:26:9a:f4:e7:ca:3d:f1:d4:01:d8:
a6:48:0b:b5:08:90:63:8a:8f:76:61:1b:8e:db:2c:
c5:bf:c2:84:f9:f8:ec:b5:b5:5e:75:e2:c4:be:04:
a8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:ED:AF:71:6C:D1:04:0B:21:E7:C6:2E:A0:1C:07:95:EC:03:82:29
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d3:36:ed:82:70:de:a3:80:1b:f2:69:04:a3:30:4c:04:45:
53:52:90:4e:ff:ce:58:f4:f3:18:d1:dd:b7:cc:c8:61:f6:44:
c6:ce:74:ad:6b:a1:96:cd:f5:b0:2f:91:2f:59:93:44:49:01:
c9:e3:0b:13:5f:53:a3:0a:80:33:a1:47:76:53:65:5c:53:3c:
27:67:84:a2:30:cc:2b:ab:a2:51:d1:68:c1:f9:0c:18:78:b2:
fa:5d:49:a6:1f:1b:f5:f3:be:c2:3c:2f:61:bf:13:91:d1:e4:
5a:19:76:ac:86:95:91:5d:15:76:47:bc:f1:ee:80:96:43:9e:
a7:ad:fa:57:e2:80:7a:30:bf:0d:94:85:0c:cd:19:83:4e:11:
7f:c3:3e:e4:1e:2f:21:9f:9c:d9:39:d1:2e:34:1c:45:6f:ff:
88:0b:20:6b:83:c5:d9:c1:ac:6e:00:ff:a8:7e:79:ad:4b:71:
5d:cc:07:48:92:5a:89:1d:aa:f1:5c:ed:7a:15:b0:8a:80:c4:
8e:d3:a5:08:d1:51:2d:ff:0c:81:d1:9a:fe:dd:b0:20:8a:ed:
d9:66:03:73:bf:2a:c2:da:d0:61:30:da:2a:2b:58:03:6b:ba:
d9:4e:82:d4:1c:9e:64:3d:2a:9c:af:66:d9:0a:92:97:d3:b6:
ee:b4:83:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:59:17 2026 by rpki-client