Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
File: GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft (raw, json)
Hash identifier: O/f6LpW9D+KJ9fKKNOidSxGW3i2nlVI2lBunIx+fe4M=
Subject key identifier: C9:61:D0:AF:CD:D5:46:E4:E3:C4:7D:FA:CC:B1:E2:32:FF:BA:CB:AB
Authority key identifier: 1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
Certificate issuer: /CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Certificate serial: 01A0D94C79146DA8A566D14BDCE3BEC308C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
Manifest number: 0158
Signing time: Fri 25 Sep 2026 16:01:02 +0000
Manifest this update: Fri 25 Sep 2026 16:01:02 +0000
Manifest next update: Sat 26 Sep 2026 16:01:02 +0000
Files and hashes: 1: GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl (hash: AdW8G7uIrL9VeqFZElBCJ42rqrciPljaU82HGM0Oi9Y=)
2: zr6qOC2iZhYMAkfVEjFaWAW3Gdg.roa (hash: rfGt0EQo3cdc8IHh8jz9o2EgRv1qNBw2XAoGV+8jWOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:79:14:6d:a8:a5:66:d1:4b:dc:e3:be:c3:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Validity
Not Before: Sep 25 16:01:02 2026 GMT
Not After : Sep 26 16:01:02 2026 GMT
Subject: CN=c961d0afcdd546e4e3c47dfaccb1e232ffbacbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:82:1c:11:b9:f2:09:d4:d3:0f:6d:c3:dc:8b:
37:5d:83:bf:de:e2:fb:0a:b1:0a:b4:c4:20:57:f8:
62:69:da:55:00:ec:d0:17:eb:06:31:59:d9:87:3d:
ef:f8:73:66:20:7b:b6:33:e4:17:0f:f6:41:87:e6:
10:5a:b1:9b:f8:83:52:c5:9b:8e:b3:60:1a:36:3e:
d4:47:e3:fa:40:9b:79:37:cd:8c:c2:12:22:f5:48:
a0:7a:04:29:13:03:1c:1e:54:23:50:15:c2:97:61:
2e:be:16:bb:5f:b3:01:5e:73:08:8c:80:8b:88:61:
ed:b5:3e:5d:03:65:bb:6e:12:56:d0:2c:37:9d:e2:
58:86:a3:2c:e4:1b:d7:ad:c6:fe:98:40:1b:f1:07:
82:fc:d1:08:4a:62:ab:7b:a4:85:56:4b:4b:aa:b7:
ce:87:f1:58:1b:d7:ee:9e:36:99:a5:e0:2c:74:63:
fc:7a:e0:08:d9:ad:c4:26:a4:1c:9e:e1:21:c5:69:
b5:a7:8f:e6:4e:a4:ad:41:6f:44:70:bc:84:7e:d0:
e7:05:e5:e4:68:02:67:b0:a2:e9:bd:a7:24:b4:e1:
40:43:19:ac:ac:99:e0:5f:64:8b:f1:e6:38:cc:d6:
f9:5e:76:51:2c:95:f3:b9:cd:79:94:07:67:9a:00:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:61:D0:AF:CD:D5:46:E4:E3:C4:7D:FA:CC:B1:E2:32:FF:BA:CB:AB
X509v3 Authority Key Identifier:
keyid:1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:aa:ae:59:4b:68:ae:29:83:9c:db:c5:60:bc:0d:d9:f4:b5:
08:f4:3d:81:04:02:be:61:91:91:00:d5:96:f2:db:4d:c8:73:
55:46:59:65:7d:a5:59:b7:a0:cd:5a:43:06:af:a7:8e:0f:9e:
49:bf:eb:96:c2:6b:4e:1c:4b:43:ab:28:c9:07:a0:e0:49:e2:
4b:04:70:e0:27:5a:a3:f9:14:6a:5f:8e:69:f3:b0:af:79:32:
f7:ef:b0:96:86:b4:c7:61:7f:00:ff:44:1a:42:97:b7:c4:6e:
ce:a9:60:49:5e:7c:1a:43:c3:95:01:a9:b7:3e:64:55:88:70:
37:e3:bd:e5:a0:58:10:d9:10:17:42:a2:4e:88:61:3a:00:6e:
da:9c:92:a8:32:30:c8:33:06:74:0a:28:a4:3d:81:95:e3:72:
c3:c5:e9:3c:24:eb:28:27:f1:f6:6c:f3:f7:e2:89:8c:00:41:
fa:24:59:0c:9f:4d:90:93:91:df:61:b1:cb:a7:f6:39:e8:bd:
a3:06:bc:e9:e2:52:91:33:e7:de:e1:3b:76:95:c2:45:87:a3:
67:36:b5:60:bc:3e:05:1e:bf:1c:b5:94:af:56:f8:b3:b1:39:
d7:a4:b4:43:e8:6b:e6:b3:fd:60:d2:ee:f3:16:d6:bc:97:88:
ec:34:1d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:19:27 2026 by rpki-client