Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json)
Hash identifier: QVCrVJsJFxQe8dsVJX9nZgZr8Ov9OXy08GH928Mo9QU=
Subject key identifier: F4:61:9C:85:E0:89:26:6B:3F:35:14:08:51:B4:8E:FC:72:97:46:E7
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01A0ED0BA6937F304F7501FF293C782A48B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
Manifest number: 0EC0
Signing time: Tue 29 Sep 2026 12:02:38 +0000
Manifest this update: Tue 29 Sep 2026 12:02:38 +0000
Manifest next update: Wed 30 Sep 2026 12:02:38 +0000
Files and hashes: 1: 8JSZWhyUYpRy8aBCdNPv83OhLzE.roa (hash: cRifW1LmyHI9b6LIEF+DhKfqeLjA5tpM2Wwz0m3WPJE=)
2: DBuCDMr-eMpkAR_hikUInL2urKQ.roa (hash: kBMh2uve9H6ZGJ+wBBoi4Snq4VxIhSy8cm7vuFkDv3U=)
3: GiB2XPgzfAZoK37GjE41zRNuwfw.roa (hash: kt4wF2f4rJfLJ5yt1aN/zDgxy1rqy/Zyxyd2CL/+BiY=)
4: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: FyH0/wn3WPxZMbszp7caZtgIeYMYSNyaP5Zl+vvcrzE=)
5: iVDK6PCtMfpuZKgZWoFycnHMVRw.roa (hash: GeJfT/LpcdK0hbYcqcrlMnAuUaNLyo2x8WoLR5cuzUY=)
6: lx_DhApBbepgoPXpAWVMZkHOy4M.roa (hash: uguPsOnPbZyPw2Mv7U8Fmu1LMUcIDj3qTCfJ/Uhauy4=)
7: ohLWgfGRLPEKw04h0DLfOIlNhog.roa (hash: K98aaZcn2W9HA9Zia29dMsLJX/i+ewGU4FK1Pvj0Z10=)
8: oyaoJP_-oRrikeFzcx4wX4DNZNc.roa (hash: tT9qKyAULqzBtDWH2BB9KDYx0XdnjR7kUjgqU8anAsM=)
9: w9-s1rg8ZZyOOyxtduxCw6s1Z18.roa (hash: SjJ+kgcVTjrARPsmt0o25UIbqtkMvNHn5HJI2G5k1Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:a6:93:7f:30:4f:75:01:ff:29:3c:78:2a:48:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Sep 29 12:02:38 2026 GMT
Not After : Sep 30 12:02:38 2026 GMT
Subject: CN=f4619c85e089266b3f35140851b48efc729746e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8b:2f:8a:0b:00:88:06:58:d2:74:c5:b7:06:
11:12:d7:54:d6:d8:8f:a4:f4:81:c2:d1:57:a7:23:
37:01:22:bb:36:ac:5a:39:31:99:32:e0:8f:49:a5:
fe:61:95:26:7e:c6:e2:26:6a:29:40:21:a5:6f:8f:
8f:09:fb:64:e8:d1:18:19:ff:85:73:49:55:49:05:
2a:ac:90:e3:a9:19:b9:ff:ca:e8:6a:94:43:6a:99:
ac:6d:e7:8a:6a:11:79:29:3e:3a:bd:a1:d4:8b:f7:
f9:8e:a8:02:d2:cb:dc:14:b7:2f:25:e5:78:44:40:
80:83:58:3d:80:a2:3f:4d:3c:b4:26:76:c7:a1:83:
01:5d:a6:42:56:d6:46:cb:37:db:79:1a:36:e1:20:
9f:7d:22:b5:e8:7a:0b:6d:a3:a1:8b:4c:e2:4e:aa:
f0:61:8f:40:45:3b:e1:bc:2e:7d:1d:0a:db:cb:84:
13:b1:33:69:f4:30:a1:d2:24:18:bd:94:80:ff:5e:
c9:2c:6c:06:a4:40:9e:97:10:6a:b6:68:24:8d:b1:
a2:4d:c1:3b:39:5f:4c:ea:a3:de:4f:2d:57:aa:32:
d0:21:1d:45:85:b9:87:eb:bc:13:f4:6a:10:80:dd:
d0:ab:ba:e1:00:55:1f:8c:4a:56:fa:01:67:56:d5:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:9C:85:E0:89:26:6B:3F:35:14:08:51:B4:8E:FC:72:97:46:E7
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:75:7f:55:80:6e:bf:a9:f9:9b:f4:95:fa:16:7b:3d:4d:d8:
5a:67:ca:d1:0d:65:bb:b1:f1:ae:ed:cd:cf:2d:36:dc:b2:11:
1f:35:8e:a6:44:ac:9f:27:69:94:ba:f8:e5:1f:ff:72:f7:f0:
3d:ec:34:9f:85:53:49:0f:21:10:bc:d0:7e:e9:34:9e:7b:1e:
41:5b:7e:93:ee:70:24:f0:1d:53:95:37:d5:0d:68:a4:ee:af:
00:5e:91:d5:1c:27:80:d6:c4:10:a7:df:c3:4c:a2:75:4a:5e:
1f:0e:38:8f:fa:d1:f2:c8:c7:66:f1:a0:2e:44:d0:93:1d:f6:
a7:48:93:f8:9c:e1:58:8b:21:ff:af:61:05:b6:ef:1b:2c:6c:
65:ae:a9:89:7f:cd:c4:de:04:8f:28:24:fd:17:de:4e:e7:9a:
9a:9e:5c:1a:f2:0c:3b:d3:75:54:74:7b:c7:2a:57:21:9a:85:
5a:6e:82:e8:72:dd:65:f1:be:af:ff:08:cd:41:bf:52:71:9f:
63:3b:ee:8a:1a:4d:3b:46:4e:d2:cb:81:a1:6f:dc:e5:f5:16:
7e:81:65:b1:53:8a:a8:15:0a:2d:8b:3c:ba:48:35:96:f8:2b:
1d:08:ce:f2:82:ab:f1:e4:f7:43:8d:22:d2:fe:18:35:ff:55:
38:74:41:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:31:17 2026 by rpki-client