Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: 4z0TESv9dQc+WN8GcRbB8DLaNWp5tttfCHOVKnkezDQ=
Subject key identifier: ED:4B:C8:5A:8C:A9:70:92:94:C3:1E:86:62:F0:4A:8B:B4:3C:13:12
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 01A0E5884A7ACCA6DD72947E202313FB9768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 079F
Signing time: Mon 28 Sep 2026 01:01:49 +0000
Manifest this update: Mon 28 Sep 2026 01:01:49 +0000
Manifest next update: Tue 29 Sep 2026 01:01:49 +0000
Files and hashes: 1: GHSDF2JPEye0O4AWUxBCYSEkaAI.roa (hash: 0lOTIXpj+IiF+Cvw2ZPIma45JyDvj6gDTakt2B0h2bc=)
2: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: UrtPfsdXmNcjxcKNj3zig1wULsutcKGJ/vVXxwo+p1Q=)
3: zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa (hash: 3m9rp/jqInhSmfaVC+tbC+fcAxs/SBMNeqBaNmCor5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:88:4a:7a:cc:a6:dd:72:94:7e:20:23:13:fb:97:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Sep 28 01:01:49 2026 GMT
Not After : Sep 29 01:01:49 2026 GMT
Subject: CN=ed4bc85a8ca9709294c31e8662f04a8bb43c1312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:c1:3e:ed:73:5f:ee:70:df:08:06:b4:87:
c7:4b:39:07:c6:74:0b:a4:91:f2:10:99:b5:5e:51:
f7:69:4b:2b:0b:9c:67:44:a5:7c:38:38:3b:93:a0:
6b:a3:c6:ec:f6:c9:90:f2:8b:8c:2b:f2:fa:08:f3:
88:33:11:cf:bb:d6:75:34:a8:cc:4b:2b:44:1c:b1:
1d:8c:8c:1f:5c:32:f3:46:29:01:34:8b:7a:2d:8e:
d3:c7:20:22:ce:d7:91:6e:24:9a:32:68:97:7c:81:
ed:78:5f:bc:c9:79:a4:1e:e3:c7:7f:bc:77:9d:2a:
e6:9a:38:41:ff:35:7d:14:6c:8e:46:97:24:f1:56:
63:c3:e6:a0:ed:37:93:56:08:b5:dd:b2:1d:11:e4:
21:09:e9:1a:74:7e:8b:02:ed:1d:9a:ca:4f:65:69:
d7:14:ed:8c:58:5e:e3:38:01:b4:b9:12:90:a3:55:
62:e7:99:13:19:af:50:49:6c:42:a9:8b:df:b5:78:
c8:26:21:2f:7f:24:02:be:47:ca:08:29:4f:90:11:
da:3b:7b:de:78:5d:c1:9a:11:fa:26:05:f8:39:34:
24:bf:77:d5:1b:f2:88:74:ca:a8:99:24:b4:50:56:
a8:50:3a:a2:71:85:38:49:f3:f5:fb:b3:6d:26:99:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4B:C8:5A:8C:A9:70:92:94:C3:1E:86:62:F0:4A:8B:B4:3C:13:12
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8a:2f:fe:59:7d:eb:b9:45:44:2b:0c:3f:9c:20:da:fe:83:
5a:bd:ac:bf:5f:24:4a:3d:1d:3f:40:06:05:ec:52:2c:2e:39:
75:aa:29:7e:e7:d0:5b:25:ea:df:01:47:ef:97:8c:e8:49:b0:
14:df:d8:70:4a:53:84:fa:9a:93:6c:e2:60:a2:ef:be:51:cc:
63:cd:19:8f:58:73:46:5f:81:17:c3:8a:4f:b0:f6:74:12:bd:
c8:27:8e:75:dd:98:80:f5:5b:e1:cf:1a:67:86:dc:73:f9:50:
16:c1:5e:68:ae:a4:09:8f:97:63:d5:1a:a9:64:bf:d3:92:e0:
8d:8b:cb:3b:d2:b1:36:3e:f6:60:03:38:65:7b:e4:0b:59:7b:
1d:4c:b4:d4:d3:07:b4:fa:ac:97:e9:bb:6e:6e:cb:c4:01:58:
41:e3:4c:6d:77:8a:70:37:e0:4c:76:67:05:29:e2:2e:5b:7c:
db:6b:2f:cf:81:3c:f3:8c:02:a0:b8:96:5a:72:02:f8:fa:ed:
36:89:e6:7f:cb:c6:da:ca:fc:63:47:a3:0e:c5:52:78:06:2d:
3c:d6:a7:36:07:b4:91:52:cc:a4:6f:9c:c0:e9:d6:b7:80:e5:
d3:ab:d3:0b:03:04:f2:8c:8c:37:76:f7:82:5d:c5:4e:8f:dd:
dc:f4:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:08:39 2026 by rpki-client