Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: Av5AqMo59EXb+3gnKkQKZzTYgEJ9KOQ4Nhrlgv7G+uI=
Subject key identifier: A9:9A:52:D7:53:9B:02:A2:01:99:91:8A:3B:60:A0:0D:A6:FB:F4:C2
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 01A0DACD7568D3AEC894886DDB9EB819E756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 09C3
Signing time: Fri 25 Sep 2026 23:01:33 +0000
Manifest this update: Fri 25 Sep 2026 23:01:33 +0000
Manifest next update: Sat 26 Sep 2026 23:01:33 +0000
Files and hashes: 1: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: RXehD2vIGqCyNcYXiVSNsdWL2tORzRWvji9ED1z4ni8=)
2: zD728h1UCihkQAXpX92CPXnx1Gs.roa (hash: jxmfADV7fNflCtFxiDKR6culeD+Aw9hg4Dg9BnOAg8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:75:68:d3:ae:c8:94:88:6d:db:9e:b8:19:e7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Sep 25 23:01:33 2026 GMT
Not After : Sep 26 23:01:33 2026 GMT
Subject: CN=a99a52d7539b02a20199918a3b60a00da6fbf4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:47:15:0f:b4:bd:26:3a:43:3d:9a:3e:c8:
90:23:9d:a9:16:a7:25:2a:93:41:0b:81:de:9a:6a:
d0:b5:26:14:57:11:d0:db:08:f3:c5:47:5a:a6:3e:
3f:6b:35:5c:19:63:dd:09:bd:32:c2:f9:56:0c:86:
7e:e4:33:77:9c:b2:dd:72:de:b9:8c:f6:97:5d:29:
ef:00:c5:69:8c:79:17:5d:7f:db:58:f0:8e:d9:68:
bf:2e:70:b9:1a:5e:b0:60:69:f5:49:70:e6:77:14:
b7:f3:a5:73:87:d7:c2:5f:5e:b1:ef:9a:4a:fc:94:
2a:2b:66:14:84:75:50:c2:3f:a9:23:cf:80:b6:dd:
d8:e1:93:6c:30:91:b9:76:92:fd:30:ff:c7:91:b2:
8d:83:13:17:f8:3c:03:25:19:0b:c7:72:3d:79:1b:
01:df:e8:4a:b7:09:be:ea:7f:c9:a1:5e:04:e8:ad:
3a:97:38:96:31:14:65:7a:86:16:45:1d:2a:25:c4:
45:1f:c8:f3:fa:13:77:8f:25:d5:0c:83:e6:b2:41:
bc:44:5d:83:f1:b7:d8:52:a2:bf:ae:5d:78:cc:12:
7e:2a:66:c3:3f:3d:8b:e2:6c:9c:09:df:e0:7f:4c:
7f:f2:26:29:10:eb:49:62:35:db:0b:6a:31:90:ad:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9A:52:D7:53:9B:02:A2:01:99:91:8A:3B:60:A0:0D:A6:FB:F4:C2
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e7:13:c5:77:8a:07:e2:ac:78:14:67:b0:12:82:24:12:b0:
e3:4d:0f:db:e5:33:aa:5e:f9:2f:e3:23:96:a0:15:44:d5:06:
4e:64:80:a4:6d:23:dd:bd:bb:90:2f:64:b6:d4:d4:64:1f:91:
7e:83:48:77:93:3b:99:0d:33:0c:81:22:dd:7b:19:49:03:03:
1a:76:4e:ba:92:91:d0:cb:1d:f5:dc:2f:33:97:1f:79:4a:01:
ad:87:25:52:46:95:ae:28:b1:62:35:c6:e5:94:f3:66:6b:e1:
c5:74:cb:71:91:b7:8c:dd:c7:fb:ad:9b:0a:15:85:93:51:16:
46:e2:b3:33:83:e1:cf:73:c6:6e:4a:94:3b:9e:f3:bf:26:0a:
f6:d4:fb:69:a8:38:00:51:e2:85:f7:0c:77:00:6f:40:1f:f1:
af:8f:1e:96:9d:cf:01:e8:89:26:a3:c9:4c:09:c9:6e:5a:cd:
ea:e5:37:ac:49:9f:9c:e0:8d:4d:35:bd:b7:60:f0:00:2a:5d:
d9:74:97:cd:4b:ab:03:6e:87:c6:f7:91:38:98:61:63:19:f0:
ec:62:59:a4:b9:ae:be:af:0a:94:4c:2a:80:07:f9:4b:d5:a4:
72:d6:14:d0:19:87:4d:0a:e0:06:48:d4:92:a6:d3:30:de:a4:
ee:c4:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:45:08 2026 by rpki-client