Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: hrgSRhhdglIxizdHFnFxBOFvAtFT74j1wPEht41nh9o=
Subject key identifier: 4A:09:9F:30:AB:A9:14:C5:BB:DA:0A:6D:E2:1C:C2:74:72:C5:FF:36
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 01A0E13D35CE961E770EAB1983F75C25C055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 05:01:20 +0000
Manifest this update: Sun 27 Sep 2026 05:01:20 +0000
Manifest next update: Mon 28 Sep 2026 05:01:20 +0000
Files and hashes: 1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: twmNYMAD0CPma7hss7opSu60ZpAMJF/lo5U0VMiPddo=)
3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:35:ce:96:1e:77:0e:ab:19:83:f7:5c:25:c0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Sep 27 05:01:20 2026 GMT
Not After : Sep 28 05:01:20 2026 GMT
Subject: CN=4a099f30aba914c5bbda0a6de21cc27472c5ff36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:39:02:c5:b8:bf:a1:0f:42:af:d3:26:4a:
00:72:e8:23:be:69:90:f3:e1:07:bc:5d:49:2c:8f:
b3:e9:f8:7d:b7:44:3f:93:24:14:97:c3:a6:8c:66:
d0:3d:ec:ea:9c:8f:99:6a:c0:f7:3a:25:f3:40:d6:
35:2c:da:45:9d:03:08:d6:65:95:33:97:e6:4d:87:
9f:3a:d8:6a:ed:41:cb:9e:b8:0d:9e:67:69:31:ac:
64:c1:ab:ea:56:af:ef:c3:79:14:8c:4b:28:66:af:
22:98:e9:cc:30:24:48:6c:69:0c:da:60:b6:ac:a7:
18:94:97:e7:51:9a:9e:ed:42:a9:e2:78:ae:a8:83:
de:f6:8c:7f:41:21:f1:39:a0:4e:2b:b9:93:a8:70:
d0:10:41:12:79:e5:c9:f8:9a:be:8f:39:5f:00:f6:
53:f1:73:db:f6:41:f9:d5:5d:65:6d:26:7f:f8:86:
d7:c3:74:23:4d:59:56:3a:3a:ad:cb:1c:ab:2d:44:
db:90:65:45:b3:ce:d2:40:3b:95:6e:38:5e:b2:dc:
f7:a0:95:09:b8:cd:df:7e:5e:e6:7e:cc:a6:f4:93:
12:2f:de:00:2e:f9:ce:80:5c:99:72:54:fb:76:bb:
88:ea:a2:e8:f8:6d:6b:b6:0d:d9:fd:26:fa:24:b9:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:09:9F:30:AB:A9:14:C5:BB:DA:0A:6D:E2:1C:C2:74:72:C5:FF:36
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b6:1d:ca:41:d8:6b:40:da:eb:81:ed:a5:3f:13:4c:5a:69:
f0:23:85:60:37:77:45:ea:d2:41:fb:ee:61:51:06:31:44:cf:
c0:33:dc:1a:16:e1:90:ac:c1:04:5f:d8:cf:fe:27:d4:dd:47:
3a:4a:74:e9:97:ac:05:a5:fd:52:a7:4f:66:1f:3e:7d:77:cf:
b4:ab:c5:c3:92:7b:50:7c:e6:55:b3:d7:e6:01:dd:c2:f7:c6:
50:a6:2b:c5:f2:dd:5f:b7:13:1b:dd:ff:0f:ae:87:1b:ee:dd:
cd:ea:e9:79:1c:90:b6:c1:12:27:6c:26:aa:fc:5d:e3:88:47:
86:26:88:ed:a6:0b:44:d2:9e:b9:bd:28:fd:d3:48:79:59:f7:
ca:09:a7:d1:a4:e8:9c:20:3a:43:18:de:7c:d0:78:04:cc:c3:
70:2a:91:a4:f9:ba:55:44:f5:ea:8a:ae:fc:86:16:d3:5c:12:
41:4a:49:a3:73:bc:33:07:cd:e6:44:02:f0:d5:0f:80:84:b8:
18:61:f2:6b:18:79:84:75:a8:ab:39:5d:07:3f:77:95:4f:55:
c6:0a:7c:ef:3e:d1:4e:b5:53:6e:a2:3a:d4:30:0a:45:90:02:
06:a3:ac:46:53:1b:da:f9:c4:a5:2f:f2:54:89:c8:af:de:64:
42:90:87:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:30:24 2026 by rpki-client