Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: 0b0v2lK893aVl6rarUSzVqijmoFmF+8vjWyeV/WWzWE=
Subject key identifier: 54:CA:B9:9F:B7:2F:CB:84:F1:EC:C8:92:18:2B:75:93:20:CC:80:AB
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 01A0D6B9E4A8AD6F898A8F878565CA3FDF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 0BED
Signing time: Fri 25 Sep 2026 04:01:41 +0000
Manifest this update: Fri 25 Sep 2026 04:01:41 +0000
Manifest next update: Sat 26 Sep 2026 04:01:41 +0000
Files and hashes: 1: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: W9JDWINw0YbrGv7Pt/BL2/Zkvt+w6oqafES1nY9md5U=)
2: ImbkEEuw8ciW4XZvQnskEOeml3A.roa (hash: s2ZZTRU19ZLlzKll7MUSBOLRlZD19z6bClWZADEJ0vA=)
3: xTy14ClaR4Rvu9WN2hIEK42ff6w.roa (hash: MWs9WTWsQLed5Ou31CqMyRYBYZdgWbH79vbLFld2S5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:e4:a8:ad:6f:89:8a:8f:87:85:65:ca:3f:df:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: Sep 25 04:01:41 2026 GMT
Not After : Sep 26 04:01:41 2026 GMT
Subject: CN=54cab99fb72fcb84f1ecc892182b759320cc80ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:9f:2a:bb:3c:a9:e4:79:83:30:43:07:16:
10:40:75:cd:58:41:48:28:8b:5f:a0:c9:08:9a:ed:
c6:db:8c:d8:c2:68:fe:ca:ad:43:0f:f4:44:85:ec:
2f:1b:14:29:5e:1b:ba:71:2d:2d:96:02:4e:84:0c:
0e:80:a6:df:b4:8e:fb:c1:9b:ea:25:57:f5:da:f2:
b9:60:fb:9e:aa:57:b1:77:86:d7:4e:e1:91:87:77:
5c:63:47:4c:8c:64:91:d4:f0:9e:53:b2:61:9b:eb:
3d:c6:65:54:12:25:70:c1:f2:18:a8:e2:bb:9b:c7:
2b:2c:57:83:67:0d:fa:9c:54:d2:60:0e:dc:b9:4f:
88:55:27:8f:a7:00:c5:d6:14:ca:16:41:14:00:9f:
43:8a:92:8a:5e:84:a9:82:1e:a3:f1:68:7b:ed:9e:
c3:d6:2a:11:3e:16:38:0e:80:fa:cd:a9:2f:c0:32:
91:8d:69:fd:c7:5b:21:0a:ee:04:b2:b9:af:eb:6b:
9f:97:dd:3c:7d:f3:38:87:f4:c2:98:16:0a:6f:3a:
2f:d0:2f:bd:cc:8f:bb:9c:40:0b:9b:ad:d0:ab:cf:
04:74:35:53:50:66:1e:45:63:ac:88:0e:1d:f5:63:
6b:5a:97:6b:5c:be:94:76:07:c1:e9:5a:fb:9e:bc:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CA:B9:9F:B7:2F:CB:84:F1:EC:C8:92:18:2B:75:93:20:CC:80:AB
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9d:2e:28:8c:e4:54:ac:77:24:d9:e5:d3:c1:ed:15:74:3e:
3b:fb:11:9d:a3:4d:cb:dd:80:b1:bc:d2:cc:09:f0:60:97:93:
79:85:6e:03:43:6f:64:3b:8c:0f:f4:68:38:ed:46:36:82:d3:
e7:7a:f3:e5:75:00:c4:e0:d6:28:2a:f6:fe:1f:0d:ac:03:57:
e4:9b:81:32:2c:36:66:0a:ac:fb:f9:fb:97:67:1e:67:92:55:
c7:46:ad:08:68:b1:e4:aa:84:14:60:a1:b8:3e:31:38:38:a5:
5d:31:d3:d1:bd:34:5c:c6:04:82:37:42:90:dd:6b:ec:c9:32:
7c:07:b4:8b:30:60:f0:61:d9:27:25:16:a5:8d:39:72:17:e1:
dc:39:be:05:62:57:9f:2c:fa:d3:f1:41:31:41:13:42:a7:9f:
87:19:b3:05:e1:42:17:53:7e:17:2e:76:12:04:a2:3a:4d:7c:
fc:9d:f9:53:e2:51:54:22:f0:98:14:a0:a9:c6:4b:5c:a0:4f:
c9:b8:25:ef:26:4b:87:21:3e:a0:10:75:f2:b1:98:42:6e:52:
77:a5:c1:49:11:f0:9b:31:5c:24:51:02:a7:06:d8:91:0d:ec:
83:c1:d1:99:15:aa:c9:d5:e2:02:96:36:87:0d:b9:4b:30:2d:
85:4e:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:41:29 2026 by rpki-client