Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
File: gDCVaDspR93Unu6sDb2eqVSuoUQ.mft (raw, json)
Hash identifier: TCUQ2owSwEpj0WK3KzqQwBRAxIKUFu2GmrsOPRHRZIo=
Subject key identifier: 0D:85:10:05:DD:4C:2A:97:7B:89:D0:84:FB:2B:23:A8:8A:F8:A8:00
Authority key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
Certificate issuer: /CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Certificate serial: 01A0D26DDFC8EFDDD0D0DFDFDB1E0E0250AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
Manifest number: 0983
Signing time: Thu 24 Sep 2026 08:00:11 +0000
Manifest this update: Thu 24 Sep 2026 08:00:11 +0000
Manifest next update: Fri 25 Sep 2026 08:00:11 +0000
Files and hashes: 1: gDCVaDspR93Unu6sDb2eqVSuoUQ.crl (hash: p3qZJ1s+pznt5xovxebgqGiW1xm5C+NhD9wkEwn2nkk=)
2: vH_sEfDU81k82bCyQ3wMyP5PVWE.roa (hash: FwaLONRBNXLNCaY37uk5cOKRRSKJajQin0uHoBoCrh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6d:df:c8:ef:dd:d0:d0:df:df:db:1e:0e:02:50:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Validity
Not Before: Sep 24 08:00:11 2026 GMT
Not After : Sep 25 08:00:11 2026 GMT
Subject: CN=0d851005dd4c2a977b89d084fb2b23a88af8a800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8a:a8:c7:30:0a:f5:20:6a:76:5d:31:c3:e1:
ad:ac:15:59:6c:69:da:fd:32:35:ac:ba:18:fc:e7:
e7:50:3f:54:ee:05:15:5a:02:ff:70:f4:66:f9:f8:
f6:aa:10:a3:f7:71:a7:87:33:16:2a:b6:0c:56:99:
ea:c9:83:f3:ad:25:59:0c:53:d5:3f:23:4e:99:3c:
d3:4d:2b:b8:ed:15:b6:58:47:d0:0f:9b:04:88:39:
6a:c4:a4:3a:fb:55:43:60:17:3c:7a:1b:6b:b8:dc:
b0:65:98:62:cf:ac:a4:f0:42:e5:01:ac:96:34:8e:
64:e4:75:c7:91:f7:5d:f9:ac:e3:92:3c:2c:13:07:
3f:22:bd:7a:a5:3d:48:f1:4d:29:93:8d:4e:a6:fc:
b3:25:74:1e:d1:93:53:35:50:a8:65:0f:69:cb:87:
ff:25:ce:ec:b5:8b:1f:b7:f4:63:a5:53:80:be:3a:
5d:2a:4d:7b:c0:a9:b7:e0:2e:63:49:6f:c8:9c:43:
49:68:90:46:b6:ce:ab:bf:a2:84:f1:2a:52:f1:f4:
75:5b:d4:ed:3c:c8:12:a6:51:14:93:01:c2:14:4c:
91:1b:77:f1:13:43:1b:8d:0c:f3:7a:df:5e:0b:61:
13:64:80:03:94:bb:0a:af:f2:50:67:51:cc:1b:83:
23:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:10:05:DD:4C:2A:97:7B:89:D0:84:FB:2B:23:A8:8A:F8:A8:00
X509v3 Authority Key Identifier:
keyid:80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:41:06:93:db:b8:cb:20:06:2d:45:70:a8:c7:0f:e7:f2:bc:
08:9f:aa:8a:7f:6c:32:4d:d9:bc:96:50:44:26:89:0d:88:dc:
2a:49:31:1a:d9:31:9c:bc:df:10:6c:ff:ed:87:e7:ab:8c:20:
94:19:82:dc:21:b3:7e:1f:81:82:6a:f8:8d:c4:ba:d8:0a:f9:
0c:b7:ca:ad:ed:4a:ac:60:4f:7e:fe:76:be:a0:8f:1f:1e:6d:
0e:ee:d1:f4:c2:ae:8f:17:ee:d9:43:40:c7:8b:30:7f:23:c1:
ab:41:f4:e1:70:1a:29:c4:8c:61:f8:d9:cd:90:a7:be:c7:70:
9e:cc:ff:a2:d4:0f:08:e0:3d:54:3e:d2:29:3d:d6:18:7f:36:
f2:5b:65:0c:c5:4c:1e:0a:ae:6e:b1:38:6c:7e:7e:ed:33:9d:
6e:c3:d9:91:7a:82:0c:a8:4e:f3:99:6f:09:65:d5:ca:4d:f3:
74:d3:66:dc:79:e7:e0:68:23:c4:5c:9d:88:73:5a:34:27:36:
3c:fd:03:44:d3:c8:8a:d6:ce:03:a2:fa:f1:c2:ef:c1:ac:68:
64:ea:47:82:71:38:87:f4:16:29:f4:c3:30:30:5a:be:10:85:
56:55:e9:1c:70:e0:49:cc:60:98:a4:81:c0:f7:63:04:f3:18:
c7:0f:db:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:28:21 2026 by rpki-client