Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: k/OPVMgpUexftyTIsTsIlbedv4aWl1SSfZaUFspPwlc=
Subject key identifier: A7:0F:C0:11:8E:50:F6:2E:BC:7D:19:C7:92:EE:06:53:D1:EB:21:5F
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 01A0EC657EA3953757FC98CA2947632DE166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 04DC
Signing time: Tue 29 Sep 2026 09:01:09 +0000
Manifest this update: Tue 29 Sep 2026 09:01:09 +0000
Manifest next update: Wed 30 Sep 2026 09:01:09 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: b+tAnIX1mGiF7/DA4Qzhf2wwtoDK1JFJ4Gax7QxgGbU=)
2: t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa (hash: Gojw7FbJO6oLOCFdJ+IonU5RAeRQTmH3d/fqvSSbRko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:7e:a3:95:37:57:fc:98:ca:29:47:63:2d:e1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Sep 29 09:01:09 2026 GMT
Not After : Sep 30 09:01:09 2026 GMT
Subject: CN=a70fc0118e50f62ebc7d19c792ee0653d1eb215f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:35:1e:ef:e6:ab:b5:e4:14:56:35:60:1e:38:
45:71:af:0d:8a:75:c2:57:61:6c:5f:35:6a:10:a6:
7d:23:10:3f:83:7d:4a:14:ac:58:8b:84:2b:1f:36:
1c:09:c9:50:5f:9e:d9:21:ad:ce:df:7a:f2:a7:40:
e9:47:de:32:d0:b4:c4:5d:6a:ae:08:37:f0:5d:36:
2e:1a:d4:48:5e:af:aa:30:12:59:6a:c2:c0:e3:33:
a4:24:f8:a3:89:fc:b6:be:de:1b:38:94:e0:fb:76:
dc:8e:06:e2:84:0f:70:98:b1:67:e9:a3:27:d9:b5:
56:83:15:fc:8f:77:2f:41:e6:34:af:53:d6:76:af:
55:bd:19:e4:c5:7d:59:82:3f:0b:30:16:52:6d:85:
62:01:c2:74:0e:9e:9d:15:2d:61:78:ca:7d:cf:54:
20:37:94:e1:06:93:58:d8:df:5c:d7:a6:01:1b:f0:
d0:dc:23:9f:17:fe:2c:18:d8:a1:32:00:60:7d:84:
0b:ce:4b:d6:a1:50:f9:f6:d3:4a:95:9e:1e:e8:9f:
41:fd:24:d5:c9:35:0d:da:59:26:6a:8f:8a:b8:d0:
ee:82:eb:a7:9a:8a:90:8a:b9:d9:0b:af:ff:cf:30:
33:f4:14:e7:8f:20:cc:c8:45:82:fb:65:9b:2e:92:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0F:C0:11:8E:50:F6:2E:BC:7D:19:C7:92:EE:06:53:D1:EB:21:5F
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:b8:11:2a:0d:05:2d:ad:25:6d:01:f0:8f:7f:ee:86:1d:36:
c9:91:b9:3f:71:b3:8c:b4:31:a0:af:84:2e:e8:0a:10:69:1e:
b6:18:58:df:30:9a:c7:c7:cb:12:de:1a:ad:26:e4:1d:e6:70:
f0:d9:e5:7f:c4:cb:9c:32:40:97:76:2c:ea:4b:b3:07:23:4b:
da:50:19:fa:12:4a:a7:29:55:ba:0e:03:f6:96:f1:3d:4a:af:
7d:b4:47:b7:ae:42:8a:1e:9b:0b:f1:2f:38:d7:53:31:8b:33:
c3:04:56:f4:c9:76:bf:d1:8d:8f:79:ec:68:27:76:5c:57:7c:
7a:f1:27:fa:da:64:ab:08:f6:af:b1:db:32:9e:a3:d4:dd:6d:
c6:0e:42:7f:7b:e0:7f:5c:78:c7:14:98:5a:42:f6:2c:cb:b0:
c8:ac:7d:2b:8b:0f:19:b4:00:3f:55:83:18:1b:35:77:71:4c:
d4:12:24:9b:dd:3e:7a:77:03:93:09:bc:80:48:aa:ca:47:1b:
84:47:5d:4a:72:64:31:69:34:3b:a2:dc:90:20:b4:37:c8:5c:
01:7d:a4:1e:2e:ae:73:2c:0b:53:d7:f3:62:bb:37:1a:4c:f4:
52:f2:89:59:ce:57:ee:6b:f3:5e:38:07:f1:d8:d8:7c:aa:3f:
a7:8b:9a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:50:50 2026 by rpki-client