Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
File: GnZ2d6M9OnmfNkOEKW30apHTkn8.mft (raw, json)
Hash identifier: Lc3hMtwtnWDzhGAtHi/Exz8IHIcJXWviiYV5Otauh00=
Subject key identifier: 35:B9:60:1F:05:8A:46:19:B9:15:57:D7:60:42:4E:5D:15:C9:42:DA
Authority key identifier: 1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
Certificate issuer: /CN=1a767677a33d3a799f364384296df46a91d3927f
Certificate serial: 01A1DDCBFBEDB9242BBF07ED0A1756B3CBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
Manifest number: E8
Signing time: Sun 15 Nov 2026 06:01:35 +0000
Manifest this update: Sun 15 Nov 2026 06:01:35 +0000
Manifest next update: Mon 16 Nov 2026 06:01:35 +0000
Files and hashes: 1: 0kTB7UUfHlZLehrX6oJfFTz25ds.roa (hash: U4b9BzrDSbrp779wqrT89UltzodU812N4m956vtOj38=)
2: Cxh4PhTNcstArwRpLICkDHSAnkE.roa (hash: OJ/6l8LcGnGNKOGvKKW53QO+Xacf4TO/xDXAZE6mzXA=)
3: GnZ2d6M9OnmfNkOEKW30apHTkn8.crl (hash: 5VRtEvJQg6s0kkcI/OOu6Hj5wjgE5CLiTSYto1d3XU8=)
4: Mz6b9RE1a7PQVFNLNaep4PvMXLo.roa (hash: nsEHtmuLKoEjphj16JeJMAKFgiSN3+GdZGkD3234iFM=)
5: Yi0TKtM0nQuln6ka8POKCK5eqkA.roa (hash: 1OzTKQ02jIhXuSZBpi43UbeD8IkwLG7/H92g3GIwi9E=)
6: cLwsvL062UHY2NWasAhe0el2t4g.roa (hash: CImORy1DAVhb5txV/FdsWzrP7esG2NdvlSEYTEDPBuY=)
7: mU0gWqVg1HBT44ZXxn8T_KBlAjI.roa (hash: 7pusZvkMpb7VcSYsj2xehhYrZkhM308klNZu6IksJ6k=)
8: narWmTNN-iVSVw7MPTKk2ZAQD1w.roa (hash: J/H6097eg7tRkkWlKYldBfxYKU2ElEuNEqgUee+4WC8=)
9: vRgxmWXzNodvSG8_D9abHZ2m5Es.asa (hash: fWmfZRjLdd3RRZ5Avb54DnOuwjol/RjRIZpj5dircvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:fb:ed:b9:24:2b:bf:07:ed:0a:17:56:b3:cb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767677a33d3a799f364384296df46a91d3927f
Validity
Not Before: Nov 15 06:01:35 2026 GMT
Not After : Nov 16 06:01:35 2026 GMT
Subject: CN=35b9601f058a4619b91557d760424e5d15c942da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:b3:92:6a:38:bd:b9:bb:bf:9a:30:6e:f3:
5d:c7:0b:14:c9:9c:e8:e5:bd:ad:94:1d:cf:ca:9e:
98:8d:ed:38:37:aa:fc:7b:e8:64:35:d0:99:00:69:
4c:e4:20:15:87:e4:d1:97:fe:a1:63:67:69:a9:94:
42:6a:8a:4b:9c:7e:16:45:eb:b9:df:92:b8:1b:2e:
8e:1f:08:f2:c8:6b:78:69:e8:79:cc:78:70:b7:fa:
8d:3a:54:ce:e1:cf:a6:a0:25:32:ea:53:2d:38:12:
6e:cf:c4:91:9f:de:84:bc:75:98:b4:b6:bf:41:a1:
e3:81:4c:59:c4:2a:91:77:3e:22:91:b6:85:a9:8f:
80:0d:af:20:b2:39:4e:f4:a1:cc:8b:20:9f:15:f1:
36:81:e9:dd:df:79:11:9a:7d:41:89:a0:e2:c7:3d:
bf:26:be:4c:be:f2:75:54:28:d3:df:af:2e:9b:24:
03:5a:95:ac:82:3b:07:26:3e:2c:fc:19:48:c6:57:
c0:e6:8d:1f:50:1a:17:12:1d:2e:8c:4d:6b:c4:ff:
e8:85:54:30:69:73:87:fa:fc:a2:4c:6d:4f:f7:f8:
29:b5:00:29:e1:1a:78:f7:d5:85:9e:e7:84:a4:02:
78:58:09:7e:54:99:c8:82:be:37:3a:f8:08:d8:1d:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B9:60:1F:05:8A:46:19:B9:15:57:D7:60:42:4E:5D:15:C9:42:DA
X509v3 Authority Key Identifier:
keyid:1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:21:22:b6:d0:59:3d:0f:0a:89:37:e4:16:67:e4:62:eb:ec:
93:dc:b8:20:d3:53:ec:3a:25:b5:d4:2d:34:84:9a:4a:7b:3e:
a9:1c:a8:bc:16:dd:72:dc:12:b9:0a:ae:91:d3:0c:30:d8:94:
9c:e2:d0:9e:2e:39:31:ad:59:73:5b:2a:90:33:32:b0:9b:27:
9b:92:b5:fd:89:d6:77:9b:40:15:81:98:c5:10:95:c3:09:ef:
b9:8c:00:3c:a9:f3:72:60:32:43:be:0d:7c:02:01:14:fa:6c:
c1:d0:6b:4b:33:43:56:90:6e:e3:45:fd:d4:f9:a3:0d:a1:bd:
72:55:66:ee:e9:91:93:52:ec:5f:4c:95:8a:ad:49:f4:c8:76:
54:22:60:57:86:aa:26:72:a1:18:ff:aa:3b:fc:75:9c:2e:5b:
dc:66:4e:81:4a:8f:e1:ed:05:31:13:42:88:46:c2:54:47:20:
cf:49:b2:30:10:40:d9:bf:8e:51:28:36:84:92:1f:7e:e8:b9:
50:04:d1:2e:99:6d:0c:f2:36:2d:99:47:83:a4:64:e7:48:2a:
35:b2:24:ba:3e:3b:3e:23:53:b1:47:9e:ba:d8:59:62:7c:bc:
46:72:31:5e:3c:77:b2:0c:35:78:ab:bd:2b:bd:5f:8d:27:ee:
24:8e:60:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:00:38 2026 by rpki-client