Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: 57lLoa0zKadPsZVmEou0OtXVrCYnwXHj02ff0noCd1c=
Subject key identifier: E2:48:43:ED:89:29:85:3A:5B:D6:9A:34:4E:27:CC:EB:E9:7F:8A:C4
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 01A0DC845BF81428493765BE5DA5FC327188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 0493
Signing time: Sat 26 Sep 2026 07:00:56 +0000
Manifest this update: Sat 26 Sep 2026 07:00:56 +0000
Manifest next update: Sun 27 Sep 2026 07:00:56 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: PLVeOb6TxQMIeh9E+qzUhD3SIrpejj7t8pgc23YvrYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:5b:f8:14:28:49:37:65:be:5d:a5:fc:32:71:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Sep 26 07:00:56 2026 GMT
Not After : Sep 27 07:00:56 2026 GMT
Subject: CN=e24843ed8929853a5bd69a344e27ccebe97f8ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:a8:c7:9e:43:37:40:df:dc:53:53:0c:ca:
70:c9:ee:dd:fd:7f:a4:92:77:9f:b1:d8:dc:01:ca:
dd:0c:51:8c:36:c8:fc:21:b9:01:d9:7b:89:68:15:
4c:be:8d:c1:4f:fe:db:d4:09:c9:c8:55:e7:5d:ac:
22:97:75:4f:ac:b2:df:e5:42:d9:21:33:85:54:7f:
3d:d1:f2:69:c4:2c:15:a1:40:ad:cc:cb:8c:47:1d:
b6:17:2d:c5:e7:4c:07:e5:25:55:ef:bb:76:2b:3a:
7f:c6:f6:e9:62:a8:1a:db:8a:46:2f:85:c8:df:38:
48:4c:7c:57:8f:9f:b6:67:c2:40:b2:5c:83:39:da:
d5:f7:a0:5d:76:37:b9:f6:3c:be:ba:61:a5:6b:b4:
fe:ec:66:cd:4b:bf:16:53:a6:2c:fc:9e:d4:28:d0:
8f:74:71:34:9f:f2:88:33:0c:8f:06:4e:f1:a3:c9:
e4:63:39:d3:36:51:ce:fb:58:bf:6a:16:61:85:b6:
72:eb:2c:3f:56:0f:15:ca:dc:0a:f1:b8:c9:ad:cb:
7a:27:a1:50:fa:9b:85:f4:31:1c:c3:3d:52:12:0a:
ff:55:ce:66:79:9a:6d:d8:ba:ec:e1:74:0d:76:6b:
68:00:96:0f:b8:53:35:92:44:96:f2:15:a0:dd:be:
af:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:48:43:ED:89:29:85:3A:5B:D6:9A:34:4E:27:CC:EB:E9:7F:8A:C4
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:01:3f:a9:b9:9d:70:30:2e:58:5e:3a:67:79:41:8a:79:2f:
90:e4:7e:98:42:dc:04:a8:28:03:d6:0e:18:e3:ad:fc:09:82:
a5:2e:9e:b3:bc:4c:ff:25:b2:13:f4:99:d2:6d:f3:80:51:54:
9d:58:f1:b4:cb:4e:de:7d:bf:07:85:37:a5:a2:a7:26:01:10:
e3:e9:ec:67:cf:9f:2e:2e:8a:93:7e:47:0f:60:72:1b:e2:42:
43:d6:fa:c2:29:99:49:11:7e:c7:23:d5:0f:67:20:0a:53:a1:
b2:57:91:bd:43:b4:31:a3:c2:55:01:be:08:9a:ac:28:e1:93:
34:09:7a:12:c2:07:05:c4:2d:53:8d:83:21:92:18:4a:34:5c:
68:f1:8a:8f:ea:c9:6c:ad:11:ce:a1:b0:cb:3c:ea:a3:18:fd:
78:83:4d:12:ab:0e:46:2d:9c:6c:fe:6f:15:82:39:ae:e9:88:
4d:05:19:11:00:96:74:f1:22:36:db:95:cf:49:4a:bd:38:c7:
ea:bf:52:01:a8:28:c5:f3:aa:6e:0f:8e:62:c6:e0:23:9a:34:
1b:61:d4:2c:58:0b:bb:79:6d:9d:2f:19:1d:db:3b:2c:d1:b3:
75:40:e2:60:ec:32:3c:3a:ec:71:3a:25:f7:ab:ca:da:af:16:
fb:f0:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:45:01 2026 by rpki-client