Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
File: gLWnciaEnxty0GO-Y4mX-wnK21E.mft (raw, json)
Hash identifier: nxyi6gmL3P/JqWw2a7KLlLV1s897DOW9M155LvmPGu0=
Subject key identifier: 89:C1:CE:A2:AE:BE:DD:77:C6:AA:60:6E:A2:EF:D4:8D:65:A7:F3:93
Authority key identifier: 80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
Certificate issuer: /CN=80b5a77226849f1b72d063be638997fb09cadb51
Certificate serial: 01A0D8A881E6AF9240820FA1F1344D644D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
Manifest number: 017D
Signing time: Fri 25 Sep 2026 13:01:56 +0000
Manifest this update: Fri 25 Sep 2026 13:01:56 +0000
Manifest next update: Sat 26 Sep 2026 13:01:56 +0000
Files and hashes: 1: LpMnQmkW8eK1z14dUTCVF0MYEHc.roa (hash: P2Gc+4XzB+nZwbiFLhbDc9T1+zG9R61PeCv2JvqaWck=)
2: gLWnciaEnxty0GO-Y4mX-wnK21E.crl (hash: qwBu6tZkdjTDxRBULRB0ISMEWWvEmWRWkuAo6/ZCB8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:81:e6:af:92:40:82:0f:a1:f1:34:4d:64:4d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b5a77226849f1b72d063be638997fb09cadb51
Validity
Not Before: Sep 25 13:01:56 2026 GMT
Not After : Sep 26 13:01:56 2026 GMT
Subject: CN=89c1cea2aebedd77c6aa606ea2efd48d65a7f393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:93:74:93:c4:89:24:93:d0:ed:fc:2e:af:
39:ab:3d:30:89:8e:51:2f:bb:2b:39:53:26:76:be:
3e:8e:96:58:b8:b3:36:15:4c:97:16:e4:2c:e6:30:
c0:8b:62:ff:51:14:c6:a4:cc:db:d1:3e:e7:50:cd:
57:e0:2d:00:9d:65:0e:5f:61:c0:03:4f:f5:31:40:
89:6b:6d:75:8e:88:a4:74:3a:c8:3b:02:bb:84:f4:
42:c6:d1:ed:6b:66:6d:58:bb:1a:70:7e:0d:96:ac:
92:6d:ad:43:09:3f:73:49:3b:91:4d:3d:3f:e9:e4:
6c:75:e0:6d:3c:dd:35:61:73:17:c9:75:a1:c9:3e:
25:f7:1c:be:a8:e2:71:dc:69:72:e6:10:cf:9c:32:
fc:2a:67:28:aa:cc:a6:d6:d9:83:d5:6c:bc:10:8f:
f6:17:cb:f5:7e:b3:1d:ad:20:eb:10:c9:8f:01:91:
1d:32:09:16:f1:e6:84:9e:a6:f9:71:07:40:b0:1d:
7b:16:63:46:8d:98:63:48:8e:bb:27:c2:c6:21:20:
01:13:07:c9:7d:f0:2b:82:a2:54:30:75:7f:a6:c7:
84:20:8b:1e:3d:7e:c3:5c:38:bd:79:fc:51:df:8f:
e0:1a:c1:12:9f:33:27:af:07:be:6e:07:61:37:25:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C1:CE:A2:AE:BE:DD:77:C6:AA:60:6E:A2:EF:D4:8D:65:A7:F3:93
X509v3 Authority Key Identifier:
keyid:80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:67:f6:87:41:df:19:f5:95:84:76:8a:71:81:9c:43:d1:c4:
2e:06:e1:cc:f6:94:6c:68:e0:4a:2d:b5:8a:07:e4:8c:53:e9:
58:7f:50:9a:4a:35:64:7f:5a:ec:e0:ac:20:e2:d7:be:c5:90:
dc:85:64:94:5a:85:8f:b5:d1:84:ed:70:58:78:43:57:6d:35:
ad:c7:f3:e1:a2:a1:21:10:74:cc:b5:49:49:46:4c:1b:e1:45:
41:ea:d4:82:63:32:e3:63:9a:67:c4:4e:22:86:a9:43:02:be:
e3:64:1d:a5:a6:c5:d5:e3:49:c6:d4:62:2d:b9:f7:64:b1:8d:
c2:df:33:53:64:91:63:25:c5:a7:54:54:c6:01:40:85:9f:6f:
2d:47:fc:b2:f9:5b:10:6e:76:83:c0:9f:04:68:9f:f6:aa:3b:
2b:1a:17:69:a7:7b:8f:53:4e:d3:90:8f:bc:b4:86:5b:ec:72:
39:41:76:3e:94:f1:83:c5:da:ff:dd:36:98:60:71:87:c4:49:
57:b5:e5:6a:58:2a:78:fb:9a:96:fe:1c:33:30:d0:30:27:1b:
21:ba:20:b8:dc:37:5e:21:d5:44:fa:06:4d:35:7d:89:50:a8:
8d:67:94:44:44:b9:85:0b:96:5d:39:16:e5:b0:4e:db:5a:3e:
78:fb:26:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:58:49 2026 by rpki-client