Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier: mANaLyz19HVhhKkrirs8uJdzp+4GNRA7II/qL3/ykJE=
Subject key identifier: 14:C8:FA:BE:51:96:CD:66:07:B7:43:53:FB:4F:4D:A9:0F:F1:81:BA
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial: 01A0E17435A621C4112C8223C7B13EB5E0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number: 059D
Signing time: Sun 27 Sep 2026 06:01:24 +0000
Manifest this update: Sun 27 Sep 2026 06:01:24 +0000
Manifest next update: Mon 28 Sep 2026 06:01:24 +0000
Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: 1fgeJ1r1tTkb2yxOxTX1gKQxFNTTeOCCOJ3VGVMWlPs=)
2: rQ8HP-1CHQ2WJh4AZ9S-FHE5GNI.roa (hash: 2H9ylgH0h8jNYwcMQW9wprZPjTTUA+nJy+8c2P6cl8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:35:a6:21:c4:11:2c:82:23:c7:b1:3e:b5:e0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Validity
Not Before: Sep 27 06:01:24 2026 GMT
Not After : Sep 28 06:01:24 2026 GMT
Subject: CN=14c8fabe5196cd6607b74353fb4f4da90ff181ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:b4:e8:d3:d3:d9:8a:25:27:bc:f9:4b:89:
ed:39:87:85:41:21:7f:44:83:06:0d:9f:20:61:31:
16:bb:de:e4:ec:21:0f:d5:8b:34:6f:4d:c2:5c:1c:
81:df:df:42:43:0f:27:7a:dd:d2:9c:cf:3d:7f:a5:
5f:7e:bb:48:e3:0d:6b:d0:2b:7e:2d:80:98:16:ea:
dc:1e:6a:e1:5a:66:65:19:c2:49:9b:12:76:e2:28:
15:17:ac:61:6c:ce:ac:42:32:ee:39:44:d6:df:51:
43:e3:27:1a:36:38:a1:96:69:2f:1c:b0:d1:8b:ab:
26:ce:7e:0b:c3:ef:43:81:4b:47:35:a1:ad:26:0d:
de:56:34:52:f9:3c:ae:54:b1:ae:04:5c:a0:81:de:
71:e2:5f:53:61:e1:62:0d:5b:04:77:71:56:14:cd:
de:25:d5:1b:83:7b:b4:6f:ac:ba:2c:e8:4d:8f:ca:
18:5e:ea:fe:d8:e3:16:37:ac:f3:12:d1:26:49:bc:
96:a4:21:a5:4f:1c:09:e0:2b:6e:b7:73:3c:dc:08:
2f:13:bb:27:06:c8:ba:dc:f9:0e:41:e4:14:0c:71:
16:84:75:11:8e:c5:29:c9:f5:3f:86:cc:6e:0a:9c:
3a:69:0c:cf:84:1b:11:9e:67:ca:69:b1:6f:97:2b:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C8:FA:BE:51:96:CD:66:07:B7:43:53:FB:4F:4D:A9:0F:F1:81:BA
X509v3 Authority Key Identifier:
keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b9:58:44:87:a1:8a:ba:c2:a5:a0:88:60:3b:d6:29:52:95:
02:3a:f8:c6:b2:5c:76:4b:db:3d:1d:cd:51:1c:13:26:57:f4:
fc:63:49:40:c9:c1:37:47:ec:2f:49:b4:fb:2e:d3:89:94:b2:
65:16:42:b4:eb:da:4d:87:d0:da:b4:a9:f3:5e:24:51:15:d6:
95:5b:69:91:ca:1e:8d:e6:d4:25:e0:87:29:3e:52:00:7b:80:
03:bc:7c:d7:0d:a1:3d:1b:fb:32:bd:2c:a7:ad:bb:15:0a:c8:
98:53:31:01:9a:d1:0e:aa:58:b4:88:79:e2:5f:dc:c6:a6:f7:
fb:79:16:50:84:69:75:21:10:8e:ae:62:69:32:25:9e:a8:65:
a8:60:f4:b6:99:05:47:03:16:9c:05:a7:99:8e:3b:c0:8d:8c:
32:6a:8b:a0:7c:1a:11:4d:5e:d8:19:f6:05:49:ab:0d:1e:8e:
52:38:52:49:d8:e4:b9:29:90:bf:e8:84:7d:9c:41:62:d7:8b:
de:0e:36:6d:a2:68:16:02:f6:8d:2e:d2:12:b2:17:8e:f5:ad:
61:ff:00:c4:45:d2:55:d2:4a:a6:ae:ac:14:08:db:76:87:53:
5e:8b:25:77:bd:72:d8:5a:6b:f7:24:02:d2:bd:20:39:6e:1b:
bb:85:1e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 13:54:10 2026 by rpki-client