Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: Z2YnTNbrqf0gCl8bpSthnHUGEqRdVHq6GcaIsEwp+fM=
Subject key identifier: 6D:33:04:31:15:01:65:A4:C2:FD:64:37:34:FE:59:1A:DD:52:F6:29
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 01A0F4C52251434E32451A72D549D39810A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0CA2
Signing time: Thu 01 Oct 2026 00:02:34 +0000
Manifest this update: Thu 01 Oct 2026 00:02:34 +0000
Manifest next update: Fri 02 Oct 2026 00:02:34 +0000
Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=)
2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: w71yP7GuuLEBu9BB8hI4lJsNn0J7gr/i6ID1Aa31yxE=)
3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 00:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:c5:22:51:43:4e:32:45:1a:72:d5:49:d3:98:10:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Oct 1 00:02:34 2026 GMT
Not After : Oct 2 00:02:34 2026 GMT
Subject: CN=6d330431150165a4c2fd643734fe591add52f629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:26:04:ae:b7:a7:67:f6:a2:7a:7c:27:f1:
3d:b0:c3:0c:30:cd:9a:9e:5e:d6:f5:63:e5:6f:73:
26:e9:72:52:c1:9b:0e:41:03:34:1c:da:35:33:98:
6f:55:b8:a9:5c:ca:03:b8:79:d1:55:fc:e9:83:36:
8d:fd:ed:61:b4:20:6c:3b:29:82:f4:40:a4:30:4c:
0b:47:a7:4b:72:89:32:88:05:5a:8d:95:95:27:00:
89:a4:3c:41:76:8d:ad:09:c2:65:58:17:9f:2a:0e:
3d:ce:25:b7:28:5a:d1:db:f8:c9:ab:39:49:70:3f:
65:68:bb:06:f6:16:ca:a0:44:c0:2f:bb:4c:b1:f5:
0c:99:f0:ed:3b:8f:6d:db:f3:e3:a0:96:02:3d:d0:
bb:c0:d9:bd:9b:b2:8c:b0:c5:46:75:1a:09:48:0b:
1d:68:85:cf:32:2d:ee:1a:84:e1:b8:34:c9:fb:07:
df:cf:fe:60:4f:95:6b:b2:51:0d:a9:4e:6c:99:3c:
6e:e6:1b:39:19:2e:77:2d:c8:01:b4:2b:11:5e:77:
ca:92:aa:79:40:f3:d2:7a:97:6b:df:35:97:9d:8d:
9b:c5:28:52:c6:99:e2:4a:e3:c8:fd:42:95:ea:ca:
94:63:8b:de:bb:d7:20:70:ef:7c:82:81:76:77:27:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:33:04:31:15:01:65:A4:C2:FD:64:37:34:FE:59:1A:DD:52:F6:29
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:86:69:ba:e9:eb:4f:ae:da:ed:ba:07:b1:bd:73:0b:84:b4:
2b:ed:6b:b9:16:e7:92:52:c7:70:1e:4d:77:f1:81:da:b7:9f:
fc:b0:d8:c3:d2:8a:e6:e4:6d:c0:43:88:e4:b8:8d:83:16:17:
7e:8c:6f:43:ed:ec:f9:f0:2a:1e:29:c0:51:11:ff:9f:04:70:
28:2b:7a:94:ab:a7:03:c7:ee:c1:0f:64:80:d7:d7:e0:51:d4:
93:11:c4:cf:9f:06:c3:45:c7:64:5a:84:c7:23:64:ea:e6:4d:
1a:91:0c:0c:2f:7b:ec:f7:c1:1b:2b:57:f4:4c:8c:99:ce:ff:
4e:01:9e:63:d5:73:2d:92:c5:a5:de:a5:01:dc:80:92:3b:db:
c9:36:79:32:e0:cc:f2:5f:46:4e:c3:40:ef:1a:6a:65:92:c0:
ea:6a:1b:d1:d8:4f:3f:98:5f:ba:15:7c:fd:46:73:8e:0b:59:
6f:6a:68:46:58:a4:dd:67:a9:35:a1:98:fc:59:e9:37:b2:88:
e3:fb:30:a1:e8:89:9e:a8:f4:25:da:f7:3b:ca:1d:22:e2:4c:
08:c5:b3:45:08:3b:2f:5f:d8:d0:86:d1:42:7b:a1:db:ab:96:
7a:cd:4f:e6:b9:25:ba:ee:b2:78:5f:a2:73:af:4f:64:63:23:
ce:05:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 11:21:50 2026 by rpki-client