Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: dsCXJNsp6XOaOaRVdY4RJIo7cjWJCgxlAFCEDqG2O2U=
Subject key identifier: F4:4D:B4:77:8E:94:F9:7E:BF:D9:55:9C:98:F0:F2:67:2F:14:9C:B5
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 01A0D8729BADAD71266C23F13115414DE1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 0B2F
Signing time: Fri 25 Sep 2026 12:03:04 +0000
Manifest this update: Fri 25 Sep 2026 12:03:04 +0000
Manifest next update: Sat 26 Sep 2026 12:03:04 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: TzGDpuRnJs624AK27Fg7fCFj1xjBJDvTNKyEfU5EVJs=)
2: TsOc3ubRn91JAdgQ5aLAsWxpMqE.roa (hash: tbfSoTjpCJFJ4FddOzyLpgPxxaJetU74fFW5NiMSulQ=)
3: hN7XUM5Glyrot6zaK4scGwI3uPQ.roa (hash: NvKjw+roiIXWY/ok1kEl36Mdnj7pgwk3grKasFBC3AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:9b:ad:ad:71:26:6c:23:f1:31:15:41:4d:e1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Sep 25 12:03:04 2026 GMT
Not After : Sep 26 12:03:04 2026 GMT
Subject: CN=f44db4778e94f97ebfd9559c98f0f2672f149cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f5:6c:53:59:f8:f6:5b:26:65:d7:51:10:8f:
16:40:5f:b1:c5:17:2d:5b:d9:b4:34:35:5a:74:2c:
e2:4a:75:e7:00:4f:56:50:6e:0f:fb:93:d7:1d:f2:
be:ad:2b:1d:4d:82:b8:9a:82:00:07:39:35:cd:de:
e2:31:2e:34:0e:20:0f:db:52:e0:d9:42:a2:9e:2e:
da:55:90:f1:fb:d6:56:d4:5c:2b:a9:57:55:e5:c3:
c3:64:3a:f4:7d:1c:7d:28:00:1f:10:1b:87:2e:c5:
56:da:ba:a1:1b:3b:32:92:b6:98:8d:e1:9d:e7:c9:
91:38:08:6f:82:0c:b8:e3:0d:a5:9f:a0:92:e2:60:
a2:d4:8d:64:da:97:37:01:43:38:01:8c:3c:e3:a2:
b2:a1:4b:7b:a7:ed:dc:da:76:28:57:dd:8e:e5:a2:
6c:db:ba:e5:00:b4:42:b0:d0:f7:3b:4a:13:33:8f:
b7:fc:58:2f:e4:63:bd:0a:64:3a:8c:e4:bc:b3:be:
ae:09:10:a4:a3:e5:e9:17:ed:b3:b7:c0:d7:cc:3e:
2e:09:f3:65:57:08:b6:59:f2:f5:17:08:ee:61:88:
97:cb:b6:b6:0e:64:fc:30:48:4b:4c:3c:4b:b6:2a:
8d:dd:92:ab:b5:68:ad:0e:3a:02:42:90:05:32:11:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4D:B4:77:8E:94:F9:7E:BF:D9:55:9C:98:F0:F2:67:2F:14:9C:B5
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5d:c3:4a:74:7c:59:c8:14:14:29:a6:39:ae:52:ff:2a:12:
c0:67:53:f5:0e:bb:58:05:ea:05:78:2d:5e:11:8d:9c:0c:c0:
af:ac:2c:cb:db:9a:24:65:18:6e:34:b0:64:1a:ca:b6:af:5b:
65:09:62:d2:1d:68:1a:d5:30:80:43:81:dc:23:98:96:04:0c:
0b:32:c4:26:24:f0:5c:27:97:5d:a6:fb:66:10:bd:b5:d7:07:
ef:1c:44:67:9f:24:c8:1e:8f:90:73:c3:56:d4:f4:2e:8a:6b:
3b:8b:44:43:ea:65:30:eb:29:12:f5:a9:c3:fe:63:aa:75:7d:
56:03:84:12:7b:8e:a7:70:6a:2a:65:89:c9:a6:ec:a9:4e:82:
66:2b:b5:ae:ed:fb:82:70:d4:01:ed:20:81:e5:8f:f1:2d:72:
24:ae:87:a5:c0:f6:33:ac:06:93:37:e9:a6:2e:1c:2f:4d:af:
35:bf:d5:f7:59:46:ed:16:e6:52:18:60:32:25:0a:d9:cf:4e:
20:df:b6:f5:d2:43:68:10:21:93:4e:2d:50:e7:d8:2e:c6:25:
23:7e:ef:b2:00:4f:c5:d9:94:88:83:91:82:bb:8f:1e:38:09:
e7:25:37:eb:2e:f0:66:26:30:dc:bc:b9:ff:9e:41:0a:79:a2:
da:f3:39:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:59:53 2026 by rpki-client