Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
File: Gq51omzPhiEiKBakccy3wNXnFuI.mft (raw, json)
Hash identifier: /ZlIdBefhFh9w3I5wtFnOMJruC+5z3NrnoL58xtqhgY=
Subject key identifier: 2D:82:82:05:19:5A:72:14:B7:9F:B6:7F:AD:20:88:A4:25:E4:76:7D
Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
Certificate issuer: /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Certificate serial: 01A0E02A38A2084AA7B3B1E0BDDCF4EF4EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
Manifest number: 0D7E
Signing time: Sun 27 Sep 2026 00:00:58 +0000
Manifest this update: Sun 27 Sep 2026 00:00:58 +0000
Manifest next update: Mon 28 Sep 2026 00:00:58 +0000
Files and hashes: 1: Gq51omzPhiEiKBakccy3wNXnFuI.crl (hash: 9j+LM6QRKodCoAyy4rOXFFCo047auTD+Ao6ErhWcoyg=)
2: NVSHB6tzwUob75xSfGz6jaNLiYE.roa (hash: +Q4isin9ctWLd5y4nbiMUVJ0M1dT5+TerwoyCULpr+o=)
3: Ou1S9-7Ve_CB-idLlDNc-rifkt0.roa (hash: 39EOhAHHh040SHRa6UcwZcFa8mestfBXu2NgvqotUUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:38:a2:08:4a:a7:b3:b1:e0:bd:dc:f4:ef:4e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Validity
Not Before: Sep 27 00:00:58 2026 GMT
Not After : Sep 28 00:00:58 2026 GMT
Subject: CN=2d828205195a7214b79fb67fad2088a425e4767d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:d9:d4:5e:5d:12:60:b1:d4:4c:6c:e1:a6:
a5:39:3b:cb:28:0b:ae:96:21:be:9a:30:e4:ae:1b:
82:29:22:fb:c4:23:5c:72:71:63:e9:79:e2:07:f5:
25:a2:56:30:8a:7a:ef:f5:ef:ca:41:40:7a:b6:81:
0b:2a:87:27:84:0e:9b:31:72:5c:9f:1c:97:30:8f:
80:77:e8:4e:66:da:27:45:96:4d:d8:92:0b:72:a1:
b1:f2:5a:62:53:7d:b9:82:c2:8e:a1:50:87:5c:2b:
ea:21:0e:59:46:53:fc:d7:37:06:12:cc:51:f9:c9:
f1:fd:f9:b5:d0:ae:d5:7b:78:61:7b:18:4d:4a:fe:
33:65:83:e9:10:8e:7f:8d:8e:ec:89:96:21:6c:4a:
55:83:e9:b1:9b:0e:c3:6d:cc:90:92:06:df:c1:96:
f0:d0:6f:b7:0a:e3:87:a6:7d:bb:e8:14:c7:fb:a2:
a4:9b:c1:ba:a5:26:b2:a1:bc:72:c6:8b:27:6a:d2:
82:8a:ea:b6:1d:8f:b5:01:2c:7f:36:27:eb:e0:35:
c0:c4:80:50:65:32:4c:87:84:53:78:b1:b3:86:02:
31:90:90:80:b9:dd:bf:2a:a8:12:1c:b3:4c:06:91:
9d:74:6e:61:aa:99:09:8a:ad:8c:6d:52:de:9c:4a:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:82:82:05:19:5A:72:14:B7:9F:B6:7F:AD:20:88:A4:25:E4:76:7D
X509v3 Authority Key Identifier:
keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bd:07:93:32:34:5e:5e:c0:37:10:f4:f6:4c:ef:0f:e5:3a:
d5:e8:1c:50:44:7b:7b:da:af:4c:a3:6f:09:93:1d:6c:aa:53:
be:54:89:07:38:80:73:65:b1:c2:60:71:b0:b3:58:6f:60:ef:
39:2b:b0:44:ac:89:88:fa:93:ba:14:14:4f:9a:09:fc:2b:a9:
ac:38:d7:04:c5:47:ac:4b:e1:8c:4b:0b:03:59:7c:99:2f:af:
3f:d8:72:a8:98:6a:1a:7e:2e:dc:3e:f1:3a:9c:a4:9a:df:9d:
12:22:b4:9f:10:2d:b1:9f:6a:64:14:85:ec:63:7b:76:b3:a1:
c9:39:ed:50:65:59:4a:c4:ce:63:0b:8a:9b:5a:83:1b:a0:a9:
8a:02:a3:11:60:72:18:0e:19:25:a7:7e:e1:09:95:3d:59:53:
16:89:c5:30:f3:cc:fd:fd:19:d6:1f:69:63:44:7d:1b:5a:28:
61:86:bc:61:af:29:23:ce:a4:61:b3:17:f9:31:49:7f:53:7d:
60:19:3b:f4:66:1e:a4:7b:0e:fa:4e:aa:07:e5:90:f9:08:bc:
c4:45:3f:07:17:da:47:54:21:f6:1f:06:d9:72:9a:e4:96:35:
2c:57:45:4b:ce:c4:d2:46:6a:f5:cd:41:e9:bf:a6:de:0f:c3:
a8:c2:f8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:33 2026 by rpki-client