Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: v/LDEYiQ58gMbrIsPdbOgN3VE33C5tmrVw7D2usShE4=
Subject key identifier: EA:80:A9:12:D1:91:95:7E:74:0B:4D:FF:61:0C:9E:EB:1D:C3:B5:96
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 01A0EE542044D8AFFE3931AA7ECCCB7FECF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 16C8
Signing time: Tue 29 Sep 2026 18:01:25 +0000
Manifest this update: Tue 29 Sep 2026 18:01:25 +0000
Manifest next update: Wed 30 Sep 2026 18:01:25 +0000
Files and hashes: 1: 9CMy5GVy44WmGYKYeDBTvoZR5TQ.roa (hash: yNO5nkcRFqjgqEP98jK2VGjbQpFTpcKKSyIFKKffAK8=)
2: Opf2QA1qNa28jjAr8yKuXu_bAbY.roa (hash: ovjEoKocSUBnOUVIGPdI/qSQMjayKXITtpelF2L20jw=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: +seq3CKsR33DR26n8bFmJ6+0rw5Gzq2b1Qyv0OK9CxI=)
4: yvE1riQnzN8M1_ohncQ6e5yrX4w.roa (hash: Bi2CKtLlem3xa/y5EAdM8w4Q0JN6Uyw6zRxbHmseyms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:54:20:44:d8:af:fe:39:31:aa:7e:cc:cb:7f:ec:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Sep 29 18:01:25 2026 GMT
Not After : Sep 30 18:01:25 2026 GMT
Subject: CN=ea80a912d191957e740b4dff610c9eeb1dc3b596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:67:36:cb:b7:db:dc:5e:fa:17:4e:22:d2:
b2:c2:92:ac:e0:ae:f5:3c:37:41:c9:ee:28:d9:64:
1f:31:9f:1c:53:1f:df:de:f0:f5:51:b2:77:bb:c8:
2c:4e:df:56:d2:21:81:12:3d:4e:cd:96:fd:f4:59:
3f:81:6c:44:74:8a:88:02:a8:64:da:45:29:f5:39:
6e:36:5a:71:a1:88:5f:01:3c:72:1b:bc:d6:78:ba:
03:b6:52:2c:90:d6:9e:60:64:e5:a5:93:c1:36:65:
93:9d:dd:81:bf:04:a9:6d:6f:ce:91:3e:da:74:8a:
48:4b:99:cf:bc:01:3d:cb:df:9d:3a:ad:81:bd:54:
48:06:68:0a:88:fd:7f:d9:a9:a6:2d:ba:4e:bb:ed:
e4:b8:fb:12:8a:ae:12:82:ad:b4:7b:22:fc:8c:f4:
5a:4d:8f:af:17:ef:a9:e3:94:e9:87:eb:18:f0:98:
17:b5:49:b6:7d:e8:33:d7:e8:06:a8:4b:be:65:dc:
6d:c8:77:62:70:f4:73:f5:bd:94:40:4b:cf:88:62:
36:82:61:53:c3:02:88:87:c3:99:10:87:a2:1a:1e:
6d:79:80:d3:a9:e5:40:b0:64:a1:bb:9b:5c:92:32:
50:24:f0:cc:d3:37:e1:05:19:e0:cf:af:86:bf:ba:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:80:A9:12:D1:91:95:7E:74:0B:4D:FF:61:0C:9E:EB:1D:C3:B5:96
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fe:0c:03:f2:6d:a4:38:31:b7:07:a0:5b:d9:e3:04:87:36:
95:02:58:a2:46:31:7a:5e:cd:f5:55:48:21:23:ba:85:37:2d:
66:39:f1:95:3f:80:48:01:6d:ca:35:05:a2:b5:08:f0:fc:a4:
d1:f6:55:10:40:92:2c:15:0a:19:6c:ae:cb:e0:72:66:33:47:
a5:70:29:16:a7:41:d3:da:3b:f0:04:3e:45:aa:ce:31:2f:ee:
af:04:19:e5:03:86:35:9a:7b:da:9f:b2:e1:5c:b8:94:58:59:
00:25:db:d8:f1:a2:4d:88:fe:0d:6b:6c:19:44:60:ff:8c:c9:
4a:ba:fe:65:89:c0:7f:96:c0:b0:86:6e:09:96:c8:31:7c:97:
5b:c4:48:ca:31:a6:b9:d6:9d:ee:65:07:b5:6f:4e:e2:d9:e7:
ee:a1:43:33:8e:a3:f0:9f:07:19:b5:d5:17:22:63:f0:84:8f:
5c:f3:5c:c2:e1:63:6b:65:f6:3f:70:c1:87:a1:49:48:23:bb:
73:2e:0e:4a:cf:85:80:b6:98:bb:67:1c:1a:71:ba:a3:fc:bc:
0a:63:8c:be:e0:be:02:de:4b:9d:fc:1c:45:8d:8b:95:36:9e:
90:d1:09:4d:0c:7b:7c:82:7a:99:cd:a4:47:34:4c:0f:61:4b:
1a:32:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:48:02 2026 by rpki-client