Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
File: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft (raw, json)
Hash identifier: F6uPJVX/Og+C36jW/7xHMvoXvxJFrwXCnb8quqKMfxo=
Subject key identifier: 6C:21:7C:84:7D:56:C6:3C:16:0E:D9:16:59:29:B6:DA:CB:E3:1F:41
Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
Certificate issuer: /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Certificate serial: 01A0CE9209A1B6F50965964B76970DB1F5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
Manifest number: 156D
Signing time: Wed 23 Sep 2026 14:01:12 +0000
Manifest this update: Wed 23 Sep 2026 14:01:12 +0000
Manifest next update: Thu 24 Sep 2026 14:01:12 +0000
Files and hashes: 1: 1-uY3ByKZWX6EbvY022ukUYAIf0A.roa (hash: RrYvBD/sXCQXZ4ZUGRnJ0kZRIByBBH3L6RfLx0gb2ec=)
2: 2VnEP0kZcDQSDl0UL_jzXnG71q4.roa (hash: ZjSYJHerA/IUP/DXVd1u6yoH1Bz+1CyyRDmQ7NJ49jM=)
3: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl (hash: fxbD5Mt72h2LkzvMvrsUcmCmPxEc50b/abb7PMRtDuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:92:09:a1:b6:f5:09:65:96:4b:76:97:0d:b1:f5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Validity
Not Before: Sep 23 14:01:12 2026 GMT
Not After : Sep 24 14:01:12 2026 GMT
Subject: CN=6c217c847d56c63c160ed9165929b6dacbe31f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:e6:3f:b8:74:27:fa:20:30:37:c8:8b:c9:
a9:0c:d3:9c:2d:56:33:5f:06:fe:db:5c:4c:9c:ba:
7a:fa:f3:eb:98:8e:89:52:28:bd:27:be:60:c8:77:
f9:02:a0:14:60:f1:7b:c9:a0:02:d2:47:9f:57:2e:
01:91:c5:53:7f:1b:56:b9:9f:96:16:44:0a:c1:7f:
21:d3:ec:4a:10:f2:eb:f6:f9:b7:cf:1e:bb:61:ca:
23:50:45:53:3b:60:85:3e:d5:6a:89:3f:cc:b8:43:
29:65:2a:cd:da:f2:26:b1:be:b5:40:e4:64:ba:26:
76:12:05:c2:1e:a5:bf:32:32:7e:63:45:f7:d0:e6:
b1:24:62:84:b4:26:ea:ec:06:00:1f:57:86:0c:9d:
35:73:f7:a9:61:70:cd:e7:4d:24:d4:47:54:9a:9b:
0c:5c:96:cd:0d:8b:36:cc:95:3b:56:33:49:6e:42:
97:39:a0:df:78:8f:08:b8:93:cf:af:46:cb:f2:b8:
32:5a:ae:a2:a3:f4:c5:87:c7:c2:69:bd:f4:48:38:
a7:58:c8:93:ec:43:ef:99:50:0b:cc:8d:88:05:45:
14:56:5b:71:bb:09:eb:5c:e0:c4:16:ef:67:9b:88:
f1:c9:96:fb:6a:4a:9b:c6:ad:10:52:8b:bc:9a:77:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:21:7C:84:7D:56:C6:3C:16:0E:D9:16:59:29:B6:DA:CB:E3:1F:41
X509v3 Authority Key Identifier:
keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5b:2f:0c:b8:21:0d:1a:84:53:01:92:a1:09:5b:42:ea:25:
4d:18:43:78:14:b1:da:ac:d4:95:19:7b:17:51:07:69:7c:4b:
9b:89:d4:fe:cc:4b:92:92:6f:9d:a1:77:c3:d7:96:f2:7a:96:
60:a8:65:38:64:44:0d:85:26:ad:f7:ff:70:5c:81:ed:5d:43:
f8:59:60:22:9e:60:05:da:03:0a:f2:29:20:b8:0c:eb:27:40:
c5:ed:bc:9b:8c:f0:c7:66:89:7c:a5:4b:08:f5:9c:4e:d8:1e:
09:2e:2b:43:1d:6d:67:33:9a:13:76:5f:6e:42:62:6b:99:7c:
ea:ec:05:9b:9e:0b:73:6b:ee:c7:e3:c7:af:b2:74:77:25:44:
d5:22:ce:e1:cf:29:2c:71:04:c1:90:64:25:24:47:1b:4c:ee:
98:f4:0c:83:a4:73:8e:fa:70:d5:21:07:31:19:11:59:cd:ee:
34:63:ca:46:fc:20:f8:34:48:32:20:ea:03:07:fd:f8:3f:ee:
22:53:37:84:bd:8b:9b:af:cf:21:3a:35:46:57:fe:c1:bf:42:
92:c0:8e:85:7c:23:80:99:d7:d7:a5:bc:f3:33:fe:0a:71:57:
08:a7:6c:06:1f:94:4e:a4:40:76:04:fb:b8:d1:39:3a:c4:b2:
86:51:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:53:53 2026 by rpki-client