Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File: gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier: OF8YlpFhiN4jIgMt8BaJY24E2SZOg6E3GF6OGEvNqFY=
Subject key identifier: 36:BE:07:B7:F1:CF:01:0E:46:F4:09:66:65:82:B7:81:D9:68:CD:27
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial: 01A100C7C275F9F33E047AAE7372E804052F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number: 1A84
Signing time: Sat 03 Oct 2026 08:00:53 +0000
Manifest this update: Sat 03 Oct 2026 08:00:53 +0000
Manifest next update: Sun 04 Oct 2026 08:00:53 +0000
Files and hashes: 1: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: QrAaPOgFZg2Ujo9sAVIhFQRDvZV5/mCsawajiH420Rk=)
2: k1oWIl9uaPhK_7wC7TzwxBmJV5U.roa (hash: Teuvy3ArR3TwwUcbjV0tYtPi6ySgg76mgoEbmzqvJDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:c7:c2:75:f9:f3:3e:04:7a:ae:73:72:e8:04:05:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Validity
Not Before: Oct 3 08:00:53 2026 GMT
Not After : Oct 4 08:00:53 2026 GMT
Subject: CN=36be07b7f1cf010e46f409666582b781d968cd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:9a:a9:39:a1:64:21:63:60:5e:c4:ae:c7:
b9:5d:2c:2b:14:14:93:20:05:3b:f2:dc:c6:e5:48:
9f:bc:70:ca:71:4f:46:9f:f5:2d:50:5f:f1:0e:40:
67:f8:ca:d7:cb:12:a9:cf:33:21:6b:55:f2:5f:38:
7f:45:85:0c:fb:e6:3c:44:30:fc:f3:2b:0e:ec:b9:
07:54:65:80:f5:ea:13:b0:cd:70:33:ea:96:2b:c4:
53:ca:30:7c:e9:2d:50:27:94:01:bb:c2:31:ea:67:
35:5e:17:5b:cf:e2:2e:fb:3a:0e:a1:75:2e:74:0f:
17:69:4f:ed:cc:ea:9d:8c:a4:bb:c8:05:04:4b:51:
f3:08:86:e7:be:b5:30:df:00:d9:2a:0e:fd:14:f6:
e8:de:d3:dc:48:0b:d4:91:ae:b2:be:ff:2d:d0:e7:
a1:a4:8c:14:d6:1c:a7:5f:90:2b:67:0c:0c:0e:9f:
2f:58:7e:e8:91:1e:b2:50:e7:9c:fe:f6:8c:15:26:
60:2f:bc:26:8a:01:96:7d:49:19:04:6d:9e:bf:2a:
23:14:22:b2:80:0e:d1:45:1a:f1:a1:1a:11:e9:be:
7b:da:d1:a4:97:bc:fd:ac:f1:bc:c0:f4:53:cc:51:
88:bd:66:d0:56:12:6f:8c:0c:42:32:2f:c3:3e:2d:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BE:07:B7:F1:CF:01:0E:46:F4:09:66:65:82:B7:81:D9:68:CD:27
X509v3 Authority Key Identifier:
keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:14:5e:02:13:48:0c:2a:78:30:ac:0e:7e:d8:e2:0c:8e:9d:
6e:a3:e1:de:64:bd:3b:ba:e6:d1:f1:0f:2b:71:39:cc:ca:1d:
fc:0b:e7:6e:c3:b7:d7:7b:63:a1:d5:54:8a:a3:e1:a9:e4:e3:
ff:a2:ab:9b:29:e9:13:49:e6:ad:ea:5f:99:e1:9e:e0:29:07:
b4:8c:85:e4:15:d0:33:41:ed:fe:db:6a:97:c3:da:6b:da:96:
66:40:64:95:be:2e:57:fb:5c:bc:89:ca:39:91:d1:28:d1:50:
32:33:18:3e:bc:be:4e:f8:9f:17:62:ff:6f:0e:5b:48:0a:c5:
ce:73:0c:fe:83:b6:13:ab:49:f0:cb:b8:65:f9:8a:29:64:9e:
76:ef:50:91:ce:45:08:63:33:38:c4:24:fe:36:cd:1b:6d:51:
0d:ff:f3:00:59:3f:e0:9f:9e:8c:db:da:02:1e:d2:5e:59:4e:
98:64:25:35:e4:d4:d7:dc:f3:3f:f4:c7:e9:45:2a:d0:fc:95:
fe:67:61:6b:fa:cd:d7:f1:b5:56:01:cc:d9:c5:f4:b9:3e:d4:
3d:4d:d4:96:fd:b9:10:7f:51:c1:eb:d6:16:6d:42:d2:85:aa:
a2:35:39:52:c5:ca:cd:bf:92:78:49:64:16:66:eb:2b:ee:27:
bc:aa:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:39:13 2026 by rpki-client