Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
File: GmoUZyI70xUQwU8hvTPX12mCnSg.mft (raw, json)
Hash identifier: ZUJT9aXCYapE1Ats4MuF9sP02nL0Gw7Ti9SzxWcOU/Q=
Subject key identifier: A9:07:07:C8:95:5B:93:33:B0:B5:C0:97:A5:F8:97:FA:20:2C:19:F6
Authority key identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
Certificate issuer: /CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Certificate serial: 01A0E2BDADBB433BF44AC206813B48CB7064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
Manifest number: 0470
Signing time: Sun 27 Sep 2026 12:01:16 +0000
Manifest this update: Sun 27 Sep 2026 12:01:16 +0000
Manifest next update: Mon 28 Sep 2026 12:01:16 +0000
Files and hashes: 1: GmoUZyI70xUQwU8hvTPX12mCnSg.crl (hash: YwMqZOIrh3PK0ty1h4FLjfHsygQCbn30emf8NBokxNc=)
2: yMHe_AcZ7t0DOCfavN3ISgqxc3c.roa (hash: 9DwkTaaH9QdGqF+hvGsRneF8svXbKCB6hQgeZ0/mVuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:ad:bb:43:3b:f4:4a:c2:06:81:3b:48:cb:70:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Validity
Not Before: Sep 27 12:01:16 2026 GMT
Not After : Sep 28 12:01:16 2026 GMT
Subject: CN=a90707c8955b9333b0b5c097a5f897fa202c19f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:d1:fa:ab:24:f3:dd:a4:47:b0:c1:c8:b3:
08:96:ee:ce:0f:fd:4a:c0:22:5e:3a:f8:13:c2:30:
ca:8e:72:2f:80:94:1b:0c:c5:2f:ad:48:1e:88:fe:
ad:1f:28:9f:e5:7f:a6:c5:15:65:47:23:c1:d8:dd:
5b:b3:9f:13:10:f6:cf:9e:14:e3:d9:6b:02:0e:d8:
ef:94:e2:3c:7c:7d:74:f1:e5:12:c0:1e:94:96:41:
b9:86:77:d2:89:5d:1c:85:46:ce:96:d2:aa:19:8c:
05:5a:f8:80:60:92:da:23:8f:bf:44:45:71:8e:3e:
77:e8:db:8a:bf:a9:25:31:81:70:1e:47:7e:3e:20:
fc:b8:9a:c7:e3:4e:a9:41:82:dc:36:0b:da:42:0c:
0b:e3:5b:8b:47:1a:72:6e:17:34:91:55:3d:33:d8:
84:b9:f9:72:2d:2c:99:da:b4:3d:40:96:e4:7b:18:
17:c8:bf:90:5c:bf:1e:58:95:f1:2b:91:00:ef:e5:
f2:bc:f5:c5:07:21:a6:e4:71:b6:e9:ed:ae:3c:49:
c2:1f:5a:1f:09:07:36:76:e1:b0:d7:ca:b8:a6:ba:
0d:4e:ba:83:56:fe:6a:e5:a3:91:f1:d3:07:81:91:
62:88:d3:a4:5a:51:bb:4f:a6:0e:1e:cc:63:11:1e:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:07:07:C8:95:5B:93:33:B0:B5:C0:97:A5:F8:97:FA:20:2C:19:F6
X509v3 Authority Key Identifier:
keyid:1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:20:3f:a6:4a:f0:81:c4:56:96:15:83:4b:3c:eb:50:f6:91:
40:ef:b3:00:84:fe:35:06:97:ac:13:5a:05:83:0f:65:73:e2:
79:49:8d:b9:30:d0:98:e8:4d:cb:db:d6:f8:50:7d:47:e5:64:
ed:e5:f4:a4:7f:a2:df:68:ee:dc:56:9e:01:83:8c:7a:e6:de:
82:a2:84:2d:30:ed:65:01:d7:25:77:a1:b8:de:69:16:5d:fe:
a5:36:b3:1a:d9:a4:a8:a5:5b:53:dc:b8:0b:80:0e:e5:a7:6f:
67:39:e0:cf:a7:2c:3c:d7:f4:63:3d:5d:00:e4:49:23:4b:d7:
5d:12:4d:9d:6e:9a:50:e1:cf:33:51:7d:b1:6c:f3:5c:04:e1:
af:f2:7e:39:5d:fe:11:e2:e6:44:6d:b1:79:98:8a:e0:8c:3d:
47:26:54:ca:e0:c8:ac:73:97:a9:7e:96:cc:6f:1e:7d:6a:2c:
57:7d:3b:19:63:10:ba:dc:a7:d7:8a:e3:d0:fb:7c:50:64:0f:
ee:32:1b:4e:44:72:a5:49:65:78:7e:4a:c1:41:ad:86:df:33:
ce:9c:03:46:3d:16:84:27:02:15:d2:21:59:7d:f7:78:dd:51:
fb:b1:1a:63:8e:00:72:c3:13:35:f7:67:3f:34:b7:8f:ba:d9:
4b:bf:4b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:32:23 2026 by rpki-client