Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
File: gq09xArNGFL8dKzdN9jwe7sCXRg.mft (raw, json)
Hash identifier: aBYzPzLomgkThH7rN8IKDbRcOV6uaY3u8JWcnSUlOOg=
Subject key identifier: 73:87:42:D3:40:8B:08:8F:F3:17:F9:9F:99:4D:33:7D:96:FD:6C:98
Authority key identifier: 82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
Certificate issuer: /CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Certificate serial: 01A0EC65B8CFBF72C7A9977A1A894FFB59EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
Manifest number: 0662
Signing time: Tue 29 Sep 2026 09:01:24 +0000
Manifest this update: Tue 29 Sep 2026 09:01:24 +0000
Manifest next update: Wed 30 Sep 2026 09:01:24 +0000
Files and hashes: 1: RRfH67NRANb78QCHIsNktj2AM8M.roa (hash: Kvb0sz/yAiVAWW/vkTFZtCm8iDPULJVC9JDaAm74c0I=)
2: gq09xArNGFL8dKzdN9jwe7sCXRg.crl (hash: CIBwqQvN34PU8qM7AYP+dnAxSVxvYif29BTkSo7kSdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:b8:cf:bf:72:c7:a9:97:7a:1a:89:4f:fb:59:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Validity
Not Before: Sep 29 09:01:24 2026 GMT
Not After : Sep 30 09:01:24 2026 GMT
Subject: CN=738742d3408b088ff317f99f994d337d96fd6c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:6c:70:94:44:67:bc:88:9f:2d:b5:a2:bf:
cf:dd:5f:9c:27:1a:cc:9c:14:08:aa:60:36:fd:82:
db:34:63:d2:81:2d:8c:1e:6a:07:92:cc:0a:3f:38:
e7:c8:70:cf:16:6d:a5:2e:33:1a:ff:8c:17:a1:ec:
06:1c:43:63:71:cc:7d:d2:db:57:6e:9e:60:31:ea:
e7:39:44:48:46:d5:36:a4:d3:6e:20:36:fa:90:49:
da:dd:bf:d4:60:d7:a1:bd:9c:66:0d:39:01:04:c1:
ee:16:2e:83:15:74:41:6d:a3:31:9d:79:76:2f:26:
84:85:18:98:95:c3:58:d0:14:cd:0b:ff:4f:69:c8:
3e:69:3e:ab:c5:76:ae:31:45:9f:2d:8e:eb:ec:62:
c5:52:63:ee:88:11:96:a8:a4:2f:70:18:72:8a:9c:
0b:06:da:f7:a7:97:e6:1f:21:34:1e:fe:55:45:38:
be:a7:61:b0:e7:11:d2:60:70:8b:2d:9e:19:dc:65:
08:54:3b:43:c4:88:48:23:ce:1f:74:e4:25:70:39:
0e:97:f5:d4:7a:c3:6d:ad:77:1f:7b:be:cf:a3:78:
23:43:2c:02:bd:59:24:8b:17:58:d3:ec:cc:08:c1:
00:9f:dc:ab:ee:07:35:5a:fb:04:9a:41:d0:9d:7b:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:87:42:D3:40:8B:08:8F:F3:17:F9:9F:99:4D:33:7D:96:FD:6C:98
X509v3 Authority Key Identifier:
keyid:82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f2:d7:7a:99:36:d9:83:10:ed:8f:6a:0a:03:9b:70:29:43:
4f:86:8f:de:62:fc:72:3f:96:8e:5a:80:75:13:47:8e:cc:ce:
58:ac:1a:f9:3c:44:d7:53:d0:8b:c6:cb:67:d2:21:e2:e6:aa:
68:e0:e1:3d:b4:c4:e1:d5:ca:20:57:a2:1e:f3:ea:cd:25:5e:
12:a8:1e:52:35:d3:a6:93:04:58:67:db:3d:fd:f3:a8:58:0e:
10:f0:1c:63:11:80:b1:81:b8:41:98:69:98:20:e2:11:c3:42:
a4:d0:6c:6e:2c:6b:13:b8:66:d9:e3:a9:4b:66:5e:39:43:27:
da:64:ee:d3:4e:90:f5:d5:c4:20:2e:f6:1c:da:d2:3b:b2:7d:
b4:d0:02:be:96:82:b2:29:3f:6d:62:63:11:01:79:58:70:2e:
94:22:61:c5:8a:43:f2:10:fa:4b:66:1c:d4:6e:f9:1a:27:81:
0d:ed:86:85:bc:ce:44:37:b4:d2:0e:9c:80:4a:84:54:64:a2:
6f:20:8b:ec:4f:52:d1:8e:dc:a1:5f:d8:b4:97:af:47:e4:bb:
4c:ed:c2:44:79:fc:43:28:5a:10:47:e5:9a:36:13:5e:0d:8b:
d1:51:94:88:58:c7:e2:e2:44:f1:89:5c:a4:f4:98:28:7b:e9:
c6:79:4c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:28:53 2026 by rpki-client