Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.mft
File: GN3Zj2vDOXdK7q5UcnicQsADEAk.mft (raw, json)
Hash identifier: jkZ5uJuORxddt4rOBw2ACgtkIBij6QZ5RlIYZk2frK0=
Subject key identifier: DB:E0:83:64:26:56:C3:91:9C:17:ED:AA:78:9D:DD:67:B9:33:0C:7D
Authority key identifier: 18:DD:D9:8F:6B:C3:39:77:4A:EE:AE:54:72:78:9C:42:C0:03:10:09
Certificate issuer: /CN=18ddd98f6bc339774aeeae5472789c42c0031009
Certificate serial: 01A0DDCE0E4443245A6EAF2F0C023F772A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GN3Zj2vDOXdK7q5UcnicQsADEAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.mft
Manifest number: 9E
Signing time: Sat 26 Sep 2026 13:01:03 +0000
Manifest this update: Sat 26 Sep 2026 13:01:03 +0000
Manifest next update: Sun 27 Sep 2026 13:01:03 +0000
Files and hashes: 1: 1-SjSk5srbQUmR71vyugabNrFPhk.roa (hash: 5tKd92URWMi7laCdF3UArKAQG+a0No+/QGtPmeVh8M4=)
2: GN3Zj2vDOXdK7q5UcnicQsADEAk.crl (hash: gAUw2hYXDKBo71424ex36aGTZbMwbnyy7sL8EaQq+ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GN3Zj2vDOXdK7q5UcnicQsADEAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:0e:44:43:24:5a:6e:af:2f:0c:02:3f:77:2a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ddd98f6bc339774aeeae5472789c42c0031009
Validity
Not Before: Sep 26 13:01:03 2026 GMT
Not After : Sep 27 13:01:03 2026 GMT
Subject: CN=dbe083642656c3919c17edaa789ddd67b9330c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9a:0a:a6:5d:4e:21:a9:8e:f2:fe:66:81:10:
12:f0:db:2b:ab:d3:bf:50:bd:68:bf:92:f0:7c:38:
05:8e:37:9d:8b:55:ea:53:82:1e:b8:68:7a:42:08:
17:f7:4e:a8:af:2f:cc:6f:28:9d:94:89:dd:7d:70:
52:dd:96:26:48:37:ec:c7:b9:67:7d:ce:b9:51:09:
47:4a:03:5d:34:6e:7a:29:4e:17:33:ae:72:07:05:
d0:25:69:7b:46:e3:00:8e:6b:e0:a8:50:a9:11:89:
b8:65:48:da:b6:93:46:83:6b:26:c7:5e:00:d8:4a:
75:29:9c:7b:fc:57:ce:26:a6:65:2b:1c:af:fb:58:
40:84:d7:9e:75:0f:43:2b:f4:f0:df:dd:a5:9e:78:
f4:b3:e5:bf:20:fc:e7:e6:68:ca:b6:0c:4d:05:aa:
1b:ef:ee:44:49:f9:51:2b:cc:ab:02:2e:fc:c8:b2:
36:05:eb:49:10:25:2c:be:11:2b:7f:ee:db:24:54:
01:47:61:c8:06:2e:21:de:53:bb:3d:2e:c6:8a:98:
6f:c4:d2:03:c5:fb:2a:bc:0e:91:37:f8:df:ad:b3:
88:c2:15:24:08:22:f2:5c:ef:f0:df:86:01:45:1b:
d2:0c:53:75:ab:d0:f0:32:17:16:01:b2:97:9d:5c:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E0:83:64:26:56:C3:91:9C:17:ED:AA:78:9D:DD:67:B9:33:0C:7D
X509v3 Authority Key Identifier:
keyid:18:DD:D9:8F:6B:C3:39:77:4A:EE:AE:54:72:78:9C:42:C0:03:10:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GN3Zj2vDOXdK7q5UcnicQsADEAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0b:da:4e:b3:92:fc:5c:8e:7a:16:b9:37:f2:ad:67:99:5a:
eb:b0:86:8d:94:84:b8:8f:ea:da:d9:3e:4f:0a:36:5f:e6:a9:
3f:bc:4a:2f:69:0f:d9:d1:7d:94:e5:fe:9e:0f:de:d0:6a:e1:
82:b4:92:71:9c:24:0e:ea:30:dc:68:01:4b:71:d2:17:48:88:
b7:bc:de:da:09:f7:57:6e:2a:46:ea:75:08:98:b4:fd:fd:2d:
ce:39:2d:a0:84:3f:82:07:74:f5:61:c4:c5:f6:ef:07:b4:7c:
91:2b:12:ca:2f:4f:a4:f5:38:0b:a5:ed:9f:ca:10:fe:81:5b:
c5:af:23:2b:50:cb:37:9a:36:b5:b0:59:ce:55:60:a1:a4:d7:
5d:26:2f:f3:39:45:15:08:db:e2:f1:54:5c:33:d9:01:95:ed:
c8:45:08:f3:2e:0e:d6:53:24:24:92:4d:80:70:f8:3e:24:1f:
c8:e1:5d:24:be:27:c0:5a:1b:06:b4:23:2f:49:4c:d3:a0:ec:
a9:ac:be:9a:fe:00:35:0f:8b:33:7d:0b:25:53:ed:d1:fb:e4:
c2:77:1e:ed:da:e3:dc:b4:c3:5f:15:8c:cf:e0:f3:ce:6e:2a:
a3:f7:a5:9a:68:dd:23:69:5b:b9:78:96:a9:6f:53:dc:73:1a:
df:0c:e4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:49:51 2026 by rpki-client