Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
File: gFOrw9SfVluUh47Y8iDOMn-XSjI.mft (raw, json)
Hash identifier: lO2pCqKf1NfMkLyZO2MIaLK6+Xfxu4rj/09HY1phaLc=
Subject key identifier: 4D:54:2E:0C:FD:5C:AE:1E:F0:12:7A:82:6E:D3:96:E6:06:25:47:E4
Authority key identifier: 80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
Certificate issuer: /CN=8053abc3d49f565b94878ed8f220ce327f974a32
Certificate serial: 01A0DA28CE22506BDC9B96B0850B6B42D5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
Manifest number: 016E
Signing time: Fri 25 Sep 2026 20:01:42 +0000
Manifest this update: Fri 25 Sep 2026 20:01:42 +0000
Manifest next update: Sat 26 Sep 2026 20:01:42 +0000
Files and hashes: 1: GPJ5YibQX7Qs5zXj8y25gwD4O7o.roa (hash: dw68P8crMQR+t7pqyZ2DtV9eQd5KOVoGJFGq3g9A+8E=)
2: _5dlpHFSfnZB5fPESdwe0vcQoK0.roa (hash: 648yr+Yw2hgriwVmDfKLpfCh/5rjlF0ILGcl2PNzoO4=)
3: gFOrw9SfVluUh47Y8iDOMn-XSjI.crl (hash: GlEfl21+CD1W74KHeo1rFYlh+3hX7KSMYuJLg99OA3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:ce:22:50:6b:dc:9b:96:b0:85:0b:6b:42:d5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053abc3d49f565b94878ed8f220ce327f974a32
Validity
Not Before: Sep 25 20:01:42 2026 GMT
Not After : Sep 26 20:01:42 2026 GMT
Subject: CN=4d542e0cfd5cae1ef0127a826ed396e6062547e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:5c:a9:0f:55:26:b0:f7:3a:f4:ac:13:ff:
dc:94:99:73:fc:fd:9a:4a:54:39:63:2b:9b:d3:e5:
dd:33:71:32:61:e7:b3:e6:05:23:c4:2f:05:b8:c6:
78:26:be:9e:24:ce:38:0b:2c:04:9f:52:64:15:ea:
41:c1:3a:2d:96:26:2a:5a:80:24:0e:76:62:92:c4:
90:f5:4f:00:e2:1e:08:36:d4:96:0d:5f:5e:5b:6b:
93:b8:47:b8:27:83:ee:f9:cf:9e:f1:df:a4:06:4f:
1c:0c:54:5a:bf:07:1b:f2:7c:83:20:5f:91:19:27:
c9:f7:3b:89:2d:32:ca:3f:dd:f1:c8:db:91:69:dc:
01:69:d6:d3:c8:bb:3c:23:2b:20:9f:16:d3:15:95:
f1:97:53:8a:a5:ef:88:58:7c:7f:92:a9:bd:a3:cb:
ec:18:0f:53:31:fc:aa:fc:12:db:87:96:2e:4f:cd:
35:63:6f:23:e3:77:da:0b:69:86:c2:41:9b:37:90:
85:f9:47:a7:53:30:87:e7:d8:75:ed:b5:06:f9:39:
06:6c:b2:77:6b:5c:32:19:fe:b7:51:cf:61:3e:04:
ef:a5:7b:b5:3b:dd:f6:07:b3:35:c6:d5:51:05:91:
81:b0:de:0e:c5:fd:32:a5:29:ce:f3:2c:fd:2d:de:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:54:2E:0C:FD:5C:AE:1E:F0:12:7A:82:6E:D3:96:E6:06:25:47:E4
X509v3 Authority Key Identifier:
keyid:80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d4:2b:0b:b4:8a:b1:36:4d:7d:64:01:36:22:f6:3e:81:6c:
9c:90:b2:dc:72:8d:ad:fa:fb:ca:3d:3f:8a:9d:76:03:33:56:
c5:2f:ec:43:84:e7:68:00:74:77:fa:e3:1d:88:7b:7d:d7:93:
e3:24:bd:d1:67:c1:e1:ae:d5:bd:8a:7a:5c:fd:a6:ac:f7:90:
22:53:de:a1:11:a4:2e:77:d4:4c:22:5b:e7:84:19:46:fe:a2:
0d:ee:47:f9:2c:08:cb:da:bf:3e:90:9b:84:d0:53:27:44:4b:
02:4e:3b:5c:09:8e:cd:64:d7:05:3a:48:03:33:72:fe:38:a1:
cf:31:93:70:ac:55:f1:07:4e:74:5a:48:57:2f:24:17:d0:25:
04:15:d2:16:05:07:e8:ef:89:f1:bc:be:08:b2:65:86:84:1f:
d1:d2:5c:c5:0c:82:d3:2f:88:b1:3a:37:73:aa:7a:56:ac:49:
0c:d6:10:b1:b9:fc:fa:a2:03:34:68:a8:d7:b5:7c:80:5f:96:
4f:3f:69:6e:03:6a:65:d5:86:9f:ec:cb:08:7c:09:5e:83:43:
26:06:e1:98:7f:db:0c:36:a5:62:ec:5a:e4:f1:a3:0f:85:e3:
9c:93:ba:d2:ef:76:56:0b:c7:0f:97:ac:8d:8e:ca:20:5c:67:
75:9a:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:09:46 2026 by rpki-client