Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft
File: gkLN6DVdU56YUsK1q4siTqmBWms.mft (raw, json)
Hash identifier: 0w5/VPLqJ7t5QNwpKjtPs0Av61lHXq+c1lxp73oCKiM=
Subject key identifier: D5:68:78:3B:85:D3:EE:FD:D4:41:4C:1C:5B:EB:5F:F3:C6:1E:71:79
Authority key identifier: 82:42:CD:E8:35:5D:53:9E:98:52:C2:B5:AB:8B:22:4E:A9:81:5A:6B
Certificate issuer: /CN=8242cde8355d539e9852c2b5ab8b224ea9815a6b
Certificate serial: 01A0DC851C9B0C0A513299357045A7871523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft
Manifest number: 0B
Signing time: Sat 26 Sep 2026 07:01:46 +0000
Manifest this update: Sat 26 Sep 2026 07:01:46 +0000
Manifest next update: Sun 27 Sep 2026 07:01:46 +0000
Files and hashes: 1: RShy0Q_AHldE-P9AUjjAuVShyoQ.roa (hash: KW8HddN/VnzoVKNO3rCvX1obdhrUgNmYg2VgqU9hQxg=)
2: gkLN6DVdU56YUsK1q4siTqmBWms.crl (hash: Y69kOQZfYBGggbJ3g2ve6PkXiCxjmr0Jh3C25PTNMEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:1c:9b:0c:0a:51:32:99:35:70:45:a7:87:15:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8242cde8355d539e9852c2b5ab8b224ea9815a6b
Validity
Not Before: Sep 26 07:01:46 2026 GMT
Not After : Sep 27 07:01:46 2026 GMT
Subject: CN=d568783b85d3eefdd4414c1c5beb5ff3c61e7179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:f6:c9:df:7a:84:d0:bc:6b:82:04:46:b8:
9f:1f:9a:f5:71:3a:6e:dc:ac:01:1c:b1:bd:dd:12:
3b:be:23:89:8f:00:60:a9:e9:87:f7:6b:f2:7b:fc:
7c:72:cc:35:27:dc:99:eb:65:5b:c6:d5:ca:bf:4b:
14:51:db:39:d1:b5:33:4d:4d:08:a6:40:9e:3d:9a:
0c:db:7b:ca:a8:16:96:86:4a:0c:3e:0c:bd:cf:eb:
01:3a:e8:77:71:b0:05:51:f8:33:38:5e:56:7f:37:
d1:71:57:26:b8:20:27:60:bb:ea:f9:b1:8e:b3:9a:
7b:25:ee:b5:d9:c7:78:1b:d2:51:fa:c7:7f:96:1f:
24:a0:ed:af:d3:ed:8d:98:fb:36:0b:69:ab:52:03:
7b:ae:18:80:5f:38:9c:97:5f:27:14:a7:a0:17:ab:
c1:f7:8f:9e:34:71:99:58:d7:d6:0f:94:e6:b7:2c:
37:a2:a3:d2:d1:f5:0d:92:3f:9d:4b:29:60:8b:c5:
b1:fa:d4:e2:97:af:06:af:d0:cb:ea:77:35:5c:38:
d6:c1:4b:f3:f0:21:cc:a3:d6:ae:ee:32:88:fb:3d:
8f:1b:94:c9:cb:9c:98:fb:46:46:49:8e:3e:08:8c:
69:0e:bc:27:e2:d3:52:98:cd:1d:4c:c8:56:d7:3c:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:68:78:3B:85:D3:EE:FD:D4:41:4C:1C:5B:EB:5F:F3:C6:1E:71:79
X509v3 Authority Key Identifier:
keyid:82:42:CD:E8:35:5D:53:9E:98:52:C2:B5:AB:8B:22:4E:A9:81:5A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:38:28:19:27:fe:69:9f:f0:16:c1:4c:98:c7:4a:03:8f:18:
d3:44:36:b9:1e:e3:6f:87:b9:17:d8:30:cf:e3:84:92:a9:a4:
05:76:86:95:a6:d8:2a:22:df:6a:8b:d5:6c:1a:03:96:5f:00:
86:dd:9a:b2:80:cb:f4:72:44:dd:19:15:7f:5a:8d:b8:db:46:
a9:f6:c0:ad:e1:f4:a7:58:fb:89:8e:0c:a1:83:93:cd:81:3a:
39:38:6f:6f:ef:b2:ef:47:d6:00:8a:a2:24:b5:c2:d3:36:92:
c7:f3:0f:8a:70:f8:ee:12:41:b8:4a:12:b9:89:99:16:e2:8d:
bf:1b:6f:f9:4d:37:e9:23:47:72:a2:6a:1a:50:1d:38:ec:65:
f2:e7:9a:6d:e2:f9:e1:ef:69:69:4e:d3:c2:33:32:ac:7e:c6:
b8:0d:75:1e:0f:29:04:ca:f8:31:5e:16:6f:06:7d:94:26:b8:
af:85:48:df:62:36:c8:08:68:72:e5:66:84:d3:e9:b5:ae:10:
af:a6:3c:3a:06:2e:d2:c0:1b:c6:1e:61:47:b2:fb:cb:26:c9:
66:9a:3a:2b:82:00:8e:fb:52:67:9a:92:2f:d5:d9:4e:c1:4d:
7d:18:0c:3a:92:af:45:02:7f:81:b8:fa:13:68:d8:50:37:ed:
91:d1:e6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:29:13 2026 by rpki-client