Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File: _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier: KhrrdzIT2PXq7wsnd59v+kng+LcKZhsa7Rj0pwDvsio=
Subject key identifier: 74:71:6A:59:56:39:01:1F:9D:C3:52:EB:6F:B6:04:AC:2E:97:5D:64
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 01A0D45CF61E8EB2FB99585A54FA24C7A8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number: 17BB
Signing time: Thu 24 Sep 2026 17:00:57 +0000
Manifest this update: Thu 24 Sep 2026 17:00:57 +0000
Manifest next update: Fri 25 Sep 2026 17:00:57 +0000
Files and hashes: 1: _b-rE_2TVoYhUbNxE3eqPIAbO4s.roa (hash: /pEVtx61pqjHCNe27pdlrCZMoRpMRCiAqlKVxrQNLe0=)
2: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: xAIpPJgo/oEAWuBHUIiqQ38a8vz2pr0lNKeQ9Dm43vg=)
3: bbj-gHI_NSxgfeUm9R2oZee2H7A.roa (hash: hYp+ief1ADpooPFUk5v8X2N0IMdf0TC4s8sF6EqLPy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5c:f6:1e:8e:b2:fb:99:58:5a:54:fa:24:c7:a8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Sep 24 17:00:57 2026 GMT
Not After : Sep 25 17:00:57 2026 GMT
Subject: CN=74716a595639011f9dc352eb6fb604ac2e975d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:71:03:73:7e:04:4c:e2:f5:72:5d:d9:f4:
2c:3c:e2:9a:41:45:15:a7:94:be:5b:e8:19:aa:d4:
fa:ca:95:94:7d:3e:0d:4c:b2:ce:8f:28:c7:f9:4b:
41:df:ae:5f:48:3c:43:f1:74:f6:62:a8:85:8f:83:
5a:4f:7b:f9:28:60:76:94:00:96:1f:53:44:95:f5:
ff:e0:37:b4:1f:59:67:50:bc:af:0b:c2:e2:6b:3a:
0d:98:17:0e:80:d1:e0:bf:39:2e:2e:f2:eb:5a:f6:
0b:43:35:23:7b:43:de:94:8c:00:35:00:bc:37:3d:
9e:ce:30:4d:10:45:20:37:52:33:61:e0:af:a4:09:
3c:fb:a5:aa:2a:20:d3:a6:f2:85:6e:88:fe:24:65:
db:6b:eb:ee:1f:4a:45:58:a6:d8:0c:fd:eb:b4:ae:
a8:64:a9:36:94:53:e9:c0:6f:d8:c4:3a:c9:f9:19:
60:bc:23:3f:a4:8e:ec:4d:7a:19:44:2f:1a:6e:d6:
a4:4d:b5:01:ef:16:c6:7d:d6:1c:16:d4:2f:dc:96:
31:6b:cd:27:3b:1d:a3:5a:5a:c4:57:99:2e:2a:57:
85:60:74:07:ea:47:cd:42:19:14:12:0e:10:54:fe:
9d:52:23:c3:ef:b7:c4:d7:54:4f:bd:8f:fe:74:34:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:71:6A:59:56:39:01:1F:9D:C3:52:EB:6F:B6:04:AC:2E:97:5D:64
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:88:f2:73:8e:9f:a5:45:5e:c9:f1:34:0c:a0:4b:60:8d:6b:
3c:0c:1b:15:a6:f8:7e:15:aa:11:07:e7:55:3c:25:ce:30:a3:
bd:7c:69:43:2d:98:b5:5d:b5:a2:4c:ff:07:f8:a9:09:79:84:
4a:e2:ff:35:e7:c2:2a:40:49:7d:c3:2e:64:fb:cc:d5:38:8d:
04:a0:e1:31:15:cc:3d:b8:f6:16:15:64:7b:e9:5f:cb:38:ba:
6c:04:70:0c:6b:12:fb:17:13:1b:3e:d2:8d:43:47:3d:d4:8b:
e0:da:48:12:0c:82:04:25:4a:93:ed:49:b8:64:92:45:8d:bc:
9b:99:ff:3d:32:a4:59:32:1f:55:a8:43:b7:8b:a2:b1:a0:2e:
3d:74:6f:f9:0c:d8:7e:28:d1:80:97:4c:d2:08:e1:3d:93:1c:
ff:ff:75:40:31:d4:4e:c9:2e:c1:4c:7a:2d:3a:53:ff:ca:17:
dd:a3:c2:8d:35:0d:13:df:70:25:11:c8:d7:d2:c7:c5:42:19:
95:91:79:e1:9c:a9:1b:1a:4b:eb:1f:cf:58:fb:8b:78:6f:3b:
ff:1c:de:0e:94:d7:86:48:b5:da:6e:4d:36:02:41:a7:af:24:
8d:1a:29:6f:05:ba:01:5e:2f:39:16:9f:4a:98:e5:a3:9c:8f:
7e:e8:ed:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:28:51 2026 by rpki-client