Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: brLb/XX+QvV870kbC3Nhi91GQA5Z3ejbioZTi3Ew0WE=
Subject key identifier: 07:2B:77:43:52:00:E5:D9:B5:03:48:CB:28:10:76:FA:C5:A2:6A:6C
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 01A120535F00B605CC016029C2771ED3D2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 1AA3
Signing time: Fri 09 Oct 2026 11:01:36 +0000
Manifest this update: Fri 09 Oct 2026 11:01:36 +0000
Manifest next update: Sat 10 Oct 2026 11:01:36 +0000
Files and hashes: 1: 0bqo0bUAXv_4CI9l73mqbhE8a2g.roa (hash: iEe2NrJePiOEkt4y1MNa7WFWziQ9517Q5QJMPLgLqF0=)
2: RT27iS5dmX-RpCR1NpzNSn8n2Uw.roa (hash: qBi2ogY38ZEBaQkYgKwRqyPlrZuDmr1aSjBSW1/pXdo=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: mP42/kvpqXMiS2gfkXguUJByDPFJhapcsCjQMLhgWkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:53:5f:00:b6:05:cc:01:60:29:c2:77:1e:d3:d2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Oct 9 11:01:36 2026 GMT
Not After : Oct 10 11:01:36 2026 GMT
Subject: CN=072b77435200e5d9b50348cb281076fac5a26a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:91:4c:44:53:73:c2:9e:18:a6:6a:0c:69:
78:66:ba:4a:c1:d8:b6:a0:e1:63:c4:93:f2:e9:d9:
f9:6d:ad:85:68:e2:44:d7:e0:67:4e:4e:29:73:4f:
5e:d5:22:89:1d:ff:4d:ee:f6:87:f0:6b:57:e1:06:
db:03:ea:b3:62:c4:25:8c:12:60:6a:c2:0e:5e:ad:
3e:ca:1e:86:18:b8:ce:d2:a6:6a:96:6d:84:70:8c:
92:3a:e2:44:c9:e2:80:2a:6c:a3:94:93:ab:65:ac:
50:3f:09:8e:78:b6:b3:f8:79:0a:08:c5:27:56:95:
9b:13:49:d8:4c:93:91:e4:19:8a:a2:51:7d:a2:3c:
83:a5:0e:9e:29:32:1c:af:dc:cf:89:3d:52:76:4c:
ee:54:c9:9e:67:5a:0c:7f:84:c3:36:14:b8:54:1a:
29:9a:c9:df:57:17:26:17:ae:47:e7:4c:0a:7b:55:
46:58:74:10:57:56:b4:05:e4:23:45:81:aa:29:e6:
5a:2c:98:bb:65:e8:67:8e:44:b2:23:e6:54:97:cd:
2c:ce:a9:dc:06:67:83:ad:fc:6f:88:6f:75:22:7c:
f4:41:ab:04:61:cf:4f:a1:bd:36:5b:c6:d0:cf:1a:
ae:83:d6:c9:b2:61:e6:56:c2:9e:ca:48:7d:e5:83:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2B:77:43:52:00:E5:D9:B5:03:48:CB:28:10:76:FA:C5:A2:6A:6C
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8b:6c:d0:75:88:a3:ab:4c:7e:a4:f6:29:ca:4b:36:63:7e:
f8:e5:76:cd:d3:91:6b:36:f5:e0:f4:77:d3:2e:c0:31:f3:bf:
ab:52:f8:01:ca:3b:b3:94:68:97:e5:69:2b:85:76:1c:db:e7:
6c:2e:b9:fa:ce:c5:1e:93:09:01:23:12:57:c5:97:a9:b0:17:
56:1d:08:4b:f4:50:cf:87:8f:d9:e9:c1:6a:37:93:aa:a7:48:
b3:dc:64:4b:62:7b:bc:2a:94:88:7a:cb:69:8a:31:09:fa:f5:
fe:a3:e6:be:62:47:87:49:15:a4:ed:bb:90:0f:18:48:b0:5f:
b8:d5:56:56:a1:ff:37:c2:5e:ab:db:c5:91:0e:4e:c2:b6:42:
c2:11:63:fd:97:e4:dc:e3:d0:9f:58:bc:dd:7e:01:dd:00:77:
d1:71:99:3a:36:83:ac:75:74:e9:3d:eb:a9:53:8b:a4:21:20:
1f:d4:3f:07:0b:3c:79:2a:cd:6d:ac:c3:c1:b2:ce:c2:34:8b:
ea:5b:bd:25:20:e1:77:16:9a:a8:a4:ca:08:3b:a7:5a:d6:b7:
9b:e0:cf:b5:ce:6a:86:82:ef:c7:81:8b:ec:8f:39:8b:91:99:
70:2c:98:8d:74:a7:bf:02:be:4d:92:1f:72:71:a4:d2:7c:78:
9d:71:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:47:10 2026 by rpki-client