Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
File: gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft (raw, json)
Hash identifier: 7W4IaMHbmtOnorp/DFpTiczE0CkLulLuCpLEeU0drqo=
Subject key identifier: 42:42:6F:12:64:7A:EB:85:5A:E7:66:9E:8B:FE:45:6B:E4:A4:F9:0B
Authority key identifier: 82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59
Certificate issuer: /CN=82f08f263c37459b5fd6fc06fd9f0e5f6d622759
Certificate serial: 01A0DD6057E2DF6B2844DB873A982F1B8BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
Manifest number: 1A76
Signing time: Sat 26 Sep 2026 11:01:13 +0000
Manifest this update: Sat 26 Sep 2026 11:01:13 +0000
Manifest next update: Sun 27 Sep 2026 11:01:13 +0000
Files and hashes: 1: ZdWh-3a_kbKPG_RUVdao6c2TLrM.roa (hash: DLbAphqaTRDgJkVVSI04I7CCD0VoHbCq4Vo+MxDnvU4=)
2: gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl (hash: v2jIgvHkUnoheLmCOf6LxXyGeQdoxoIg8iKtue2GXhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:57:e2:df:6b:28:44:db:87:3a:98:2f:1b:8b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f08f263c37459b5fd6fc06fd9f0e5f6d622759
Validity
Not Before: Sep 26 11:01:13 2026 GMT
Not After : Sep 27 11:01:13 2026 GMT
Subject: CN=42426f12647aeb855ae7669e8bfe456be4a4f90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:8b:58:96:bc:f4:d5:fc:7b:77:7b:f9:af:
d1:2b:79:fe:66:7e:d7:d9:ab:60:96:7e:d6:df:3d:
9c:cf:40:ff:04:49:5a:c7:a9:5c:d2:ae:12:08:35:
50:42:59:67:2f:d4:60:a6:f8:47:0a:77:4e:31:59:
21:ce:1f:30:1a:4d:be:58:5f:8c:5e:bd:af:32:7d:
3d:8f:de:f6:86:bc:33:b2:c3:0b:82:63:e5:cf:c1:
20:bd:10:8d:58:47:b1:28:5b:36:48:f9:0a:52:55:
ab:cf:91:fa:64:7e:e3:07:d4:7e:1e:c9:3c:a5:f5:
a3:0c:3a:d0:9d:43:36:6f:f9:82:f1:9d:3e:50:48:
40:2d:0e:2a:d2:e2:ef:4c:93:71:fd:8f:bb:fc:ca:
89:7c:30:d9:42:25:d7:2b:a8:7c:e0:d2:2b:ad:98:
55:82:5a:af:d3:8f:07:dd:45:fd:b5:61:fd:77:78:
6e:21:55:85:cf:72:8a:8e:a3:22:c9:30:0f:fa:7b:
67:7d:5a:ea:58:cc:24:88:86:0c:f5:f4:e5:ee:ac:
db:2b:b1:c0:97:14:a1:ca:65:f5:25:14:72:bc:18:
f2:aa:e6:f5:7c:ea:fa:9f:76:85:dc:be:65:09:54:
39:c4:0a:3a:e3:d0:87:b0:29:da:81:2a:ac:c4:6f:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:42:6F:12:64:7A:EB:85:5A:E7:66:9E:8B:FE:45:6B:E4:A4:F9:0B
X509v3 Authority Key Identifier:
keyid:82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:09:2c:da:13:75:6d:b9:55:85:bf:fd:8f:4d:9c:9c:ed:3c:
8f:4f:d7:e5:6b:72:a0:9c:21:51:da:c8:09:54:1f:07:02:16:
16:fc:1c:09:04:12:c2:b3:1f:e4:56:e3:36:05:83:b6:48:fc:
d8:46:f0:fc:79:57:33:ad:ed:72:0a:9c:8f:59:53:eb:04:ed:
97:04:ca:c7:41:a4:cd:d7:5a:fd:d3:ce:6c:f7:34:3e:ef:8b:
46:0d:c9:d0:00:b3:71:20:a0:8f:23:be:4e:c0:3d:2f:30:55:
e1:dd:d8:12:85:a5:5d:91:22:76:60:59:2b:28:92:99:9d:01:
6a:a6:7a:b4:47:67:89:16:62:2d:b8:d0:f6:b6:47:68:af:55:
de:22:ae:bf:2c:31:d0:3e:e6:b5:ef:30:02:4e:85:50:17:49:
a1:9c:df:9f:e5:5a:ee:29:00:0b:d0:c0:36:97:14:6b:29:c5:
8c:3d:d7:e1:4b:a7:be:4d:d1:b6:28:e2:41:87:0e:6a:1d:d6:
22:a4:9f:94:b9:02:26:9a:cc:74:f9:52:9b:96:79:07:2e:65:
cc:34:10:86:30:1b:6b:11:6e:b8:1f:d8:e5:52:1c:45:55:bf:
af:e5:d4:08:1d:1a:65:63:c9:24:03:d4:c8:f0:50:dc:12:b8:
ac:5a:37:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:28:17 2026 by rpki-client