Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: QTQQ8bMGcgvxP6HJB99AgY+XTvFgYyCC/eiMmKXaZE8=
Subject key identifier: 24:E7:01:7E:50:6F:BD:DA:28:C4:42:B9:51:33:B7:5B:7D:D2:D5:32
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 01A0D45CF2F7CF0CE5BD253B344E45601D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 10C4
Signing time: Thu 24 Sep 2026 17:00:56 +0000
Manifest this update: Thu 24 Sep 2026 17:00:56 +0000
Manifest next update: Fri 25 Sep 2026 17:00:56 +0000
Files and hashes: 1: O5-mG7lTLGsSHbPOXl_2N2nSPgs.roa (hash: hoTvW0b4Iag7FokkMuOsi13ZXqhsvaxP4WoOFPmTwHY=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: blRLoKaVBHt73P6n8/1kDkhOhCk+AhDJ98jECGdp/Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5c:f2:f7:cf:0c:e5:bd:25:3b:34:4e:45:60:1d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Sep 24 17:00:56 2026 GMT
Not After : Sep 25 17:00:56 2026 GMT
Subject: CN=24e7017e506fbdda28c442b95133b75b7dd2d532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:e9:62:ff:1d:63:4f:d9:b8:b7:df:e5:2a:
8c:fe:7f:08:fa:9d:1c:d8:f1:36:b6:61:b0:17:1a:
a5:1e:a6:7f:ca:fb:b7:c8:33:ea:8c:95:15:89:08:
fb:84:bb:ce:2d:3a:39:b6:df:13:a0:b2:2e:1d:78:
68:f5:d4:0d:ad:63:93:f0:d0:fd:f2:d6:b0:82:51:
2c:33:71:f3:30:27:52:d6:73:83:1a:59:4f:cd:b6:
b4:8a:8a:7b:0b:ec:d7:a8:0a:a9:cf:68:f5:c6:36:
b0:5e:0b:75:e2:3f:e6:6e:db:8d:52:5b:c8:ed:f9:
f5:66:df:be:59:05:62:12:83:e2:11:f4:26:c5:d2:
6c:13:35:5b:a4:07:b8:9e:a7:a1:57:c8:01:2e:fc:
9c:b6:a3:aa:e2:2d:7c:07:1f:79:1c:58:d4:2e:7d:
4f:76:62:f6:16:a4:95:52:c8:86:d7:b0:ad:59:24:
51:5d:0a:21:16:a6:dc:8a:39:e0:57:f3:bc:5a:79:
ff:50:91:86:fa:93:56:54:d8:4e:1c:e3:f6:7a:3c:
4b:02:b8:4d:af:78:88:1c:2e:ab:d0:08:99:23:50:
d1:9d:32:63:a5:f6:f0:3f:cb:48:89:70:48:a3:9d:
b3:86:40:8a:2c:79:ab:5e:ff:77:d5:a9:c6:11:dd:
26:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E7:01:7E:50:6F:BD:DA:28:C4:42:B9:51:33:B7:5B:7D:D2:D5:32
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:71:a3:d1:74:f5:87:9a:a2:e6:3f:aa:f4:a5:44:ce:70:dc:
c6:9c:5a:9d:d5:e0:29:0c:bc:c5:10:ac:3c:b6:46:de:61:32:
d5:91:9b:b6:ed:53:86:20:d4:d2:76:9f:0c:24:e3:c5:88:3c:
a2:c2:c1:6c:0d:79:6b:2a:38:4f:2d:96:7f:54:e7:5e:85:ac:
e5:3f:e2:6a:0b:48:36:a8:40:18:c5:8c:e8:db:2a:85:c6:2a:
07:34:2a:ac:d0:f8:8b:4e:48:9e:b2:ab:55:58:1d:9b:66:55:
95:b8:7f:d9:3f:a9:96:48:3f:2d:9c:0b:4c:9b:bc:44:3c:15:
cc:da:3e:87:d7:15:14:55:cf:4e:39:87:70:99:44:37:4a:70:
27:22:d4:4b:83:37:44:cc:9a:92:ea:af:e4:76:21:90:4a:fc:
8c:53:72:a6:e6:4e:f8:cf:95:0d:d4:4e:3c:4f:50:52:e8:2d:
b7:d4:e3:49:48:b9:0c:47:25:23:af:eb:6d:86:79:02:ab:e8:
5d:6d:32:88:02:05:88:4d:73:76:b6:d2:0f:00:d7:92:e7:e4:
c5:64:67:ef:6f:18:6d:ce:39:b0:d0:db:79:1b:31:5c:7e:37:
d3:26:09:e2:15:b0:cd:13:26:24:f1:5c:31:68:09:de:a1:95:
37:97:52:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:41:19 2026 by rpki-client