Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: BLPBCDUj+qk3egAGFsYUE2tREcPrlun4rqc/RPJL280=
Subject key identifier: 25:5C:68:5D:3E:F4:31:EB:85:40:8E:37:B0:4E:3C:3B:3D:9F:55:51
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 01A0F71FCD1BE42165FDDA87E5E2D11668AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 1A81
Signing time: Thu 01 Oct 2026 11:00:51 +0000
Manifest this update: Thu 01 Oct 2026 11:00:51 +0000
Manifest next update: Fri 02 Oct 2026 11:00:51 +0000
Files and hashes: 1: 1LWZZOwIVksOEqA3t1p1E5yKrbk.roa (hash: OwPK45NthsXIz7j/9BbdI2UVojWHpISnd2scPcpKEVU=)
2: BU1_bDFU6vflOkzUwIXSHb0FY3g.roa (hash: Cc5Z9uPct4eSTXCrQaUv8nKSh9r+kgrw5uVAV3eQfow=)
3: RR77_TZWFm2zN09tkZTb-aJWQ-g.roa (hash: cAzRaMhGElLRCS7w5moSCJqvr37/rS0oJQ36ENwyvTc=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: s/8VBu0AUzwa7YVHtvmqZL+foK5j4PEeJyF9pHY35l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:1f:cd:1b:e4:21:65:fd:da:87:e5:e2:d1:16:68:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Oct 1 11:00:51 2026 GMT
Not After : Oct 2 11:00:51 2026 GMT
Subject: CN=255c685d3ef431eb85408e37b04e3c3b3d9f5551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:52:e6:d4:9b:1f:34:0f:49:e4:b6:0e:d5:
f4:61:d3:6c:3a:2c:52:03:60:b2:45:dd:1a:57:33:
8d:00:a2:62:1b:a6:18:56:d4:b1:85:45:e5:5d:26:
d7:67:aa:32:d3:95:1d:71:b2:b2:53:67:b8:91:d1:
15:1a:f7:24:da:94:91:b3:13:0f:24:ac:c1:e4:71:
a8:64:ad:30:2c:5c:7f:04:76:4d:35:8b:dd:a2:0f:
94:73:e8:93:3b:40:dd:af:0b:e2:5a:55:7e:c0:c5:
d4:1a:2e:2c:51:8d:fa:34:ae:7e:fd:e6:10:82:d1:
a9:72:07:cf:85:74:cb:3e:6e:c6:5c:7e:a2:32:8a:
c1:42:af:12:a3:f8:3d:f8:fe:d0:f2:82:30:59:97:
cf:e1:2b:fd:22:0f:b4:d4:ff:c6:81:7d:6c:77:40:
64:74:7a:96:5a:a3:56:69:83:55:b1:4e:19:2a:fb:
e7:b1:08:0a:46:8e:ef:19:82:74:9b:dd:a5:8c:23:
50:4d:3b:9f:46:4e:b5:d5:8b:1d:fa:0a:69:f4:82:
1c:60:17:11:3d:85:5c:a0:3b:b6:f0:23:f1:fb:44:
cf:5a:cf:81:a4:67:ff:21:5f:63:5d:f2:21:fb:16:
b3:9f:be:46:b4:14:ca:c2:bd:6a:54:40:f4:9a:b9:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:68:5D:3E:F4:31:EB:85:40:8E:37:B0:4E:3C:3B:3D:9F:55:51
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c0:c9:cc:ca:97:11:7e:fb:79:05:5f:a8:05:0c:1e:8a:0a:
95:c4:cc:fd:4d:cd:1b:9d:76:59:d3:e9:44:71:16:19:e0:87:
c9:87:d5:19:ac:dc:4f:61:86:24:96:ee:89:0d:92:c5:25:8f:
3d:69:22:1b:3d:d6:e4:87:94:9f:63:b7:92:ab:01:e1:17:f2:
45:0c:35:dc:e7:d3:29:04:b5:ba:d3:fa:03:0e:92:c0:7a:2b:
22:44:35:3e:09:b9:f5:8a:41:36:63:18:87:d2:0e:26:61:7f:
f9:5f:bd:16:97:71:5f:df:4d:7e:2e:77:f8:75:3a:24:07:f4:
99:27:f6:84:c6:b6:33:7f:c5:97:a6:9d:81:aa:95:c1:e0:c1:
a0:e2:bd:8c:a1:0c:f4:88:a9:3d:18:73:3e:d9:6d:c1:7b:98:
5f:d6:7b:10:a8:56:fb:61:ca:3f:2a:a4:1b:69:91:97:0e:d4:
b7:78:a6:53:56:74:9a:43:37:75:a9:c7:9d:67:c2:a0:4a:19:
6b:ec:d7:ad:22:c2:f0:19:30:7b:54:78:3c:66:9a:75:ef:48:
c1:64:4f:e6:c0:01:4e:e3:4a:9d:d9:63:f9:77:3c:b6:49:37:
1e:57:e2:15:af:f9:cf:c9:67:20:be:0d:0c:04:76:40:0b:fe:
13:3e:ca:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:23:06 2026 by rpki-client