Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: WE7B+y/1t0SJ+i2hhVpxLNv8gL27Q8UagTFHSjdnM/I=
Subject key identifier: D4:67:0F:9C:EE:BB:46:A4:58:B9:F3:A3:A8:EA:6C:63:76:57:E3:8C
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 01A0D0121312634C8E1A2809794D8C58D048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 21:00:40 +0000
Manifest this update: Wed 23 Sep 2026 21:00:40 +0000
Manifest next update: Thu 24 Sep 2026 21:00:40 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: 3S4Y5RaKn6JEMVhe9EDRaCRDMh59q88DhZPjot9v1P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:13:12:63:4c:8e:1a:28:09:79:4d:8c:58:d0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Sep 23 21:00:40 2026 GMT
Not After : Sep 24 21:00:40 2026 GMT
Subject: CN=d4670f9ceebb46a458b9f3a3a8ea6c637657e38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:06:20:b6:95:6f:f8:65:4f:08:37:0a:31:
b1:8e:af:c4:15:5b:fe:95:0c:2f:e8:e4:04:f5:a4:
6d:41:5d:f0:2e:99:fc:51:ea:af:e7:74:94:d1:39:
99:b3:0a:1f:a6:39:fa:30:91:21:e0:9a:55:38:18:
35:8a:08:df:5e:7a:36:6b:ae:0c:ea:17:e7:5b:b4:
7d:17:bb:9e:d4:ba:ae:28:39:90:35:6d:5a:7d:e5:
7d:f6:d3:df:73:a4:87:4e:cb:10:bb:5e:71:4d:a7:
b3:88:68:49:12:77:63:a7:db:ff:0b:38:6c:b5:71:
5f:41:66:3d:af:3d:26:19:2d:1c:21:53:0d:e7:0e:
bc:75:40:7f:fc:29:72:ac:58:a3:7f:bb:ca:08:4c:
78:79:42:dc:ea:50:70:3e:91:2f:47:f2:d7:0e:7a:
06:e5:e3:3a:4c:3f:d5:31:1a:ba:22:59:1f:73:db:
a2:8d:7e:63:31:f2:bf:24:8b:80:ee:cc:92:90:19:
3b:8a:d1:93:3d:61:ba:3b:57:cc:cc:32:e9:19:bb:
50:b4:02:af:56:8d:ac:a8:f2:e9:cf:44:96:0b:2c:
53:f6:a7:e7:c5:55:03:86:0b:fb:d4:0b:59:19:ba:
32:ca:cf:d4:06:92:cd:e4:59:00:52:5b:10:c2:25:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:67:0F:9C:EE:BB:46:A4:58:B9:F3:A3:A8:EA:6C:63:76:57:E3:8C
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:51:1c:b8:8e:c5:89:b4:1c:3f:d7:90:1c:d2:26:26:5a:3e:
38:b2:35:25:ce:44:e8:a0:84:12:4e:54:1d:59:73:ac:5a:4f:
1c:c8:20:fd:6c:eb:98:7f:40:26:8b:34:75:f3:97:31:1d:52:
98:e7:54:43:f8:d3:cb:b6:dd:07:36:2f:66:ae:e0:b7:fc:6e:
0b:73:d0:ab:45:f9:20:eb:1a:c2:d0:da:05:2a:b3:e7:70:15:
72:ae:73:72:53:64:9b:1c:44:39:bf:c0:6e:c8:32:aa:42:7c:
f1:b4:5c:ca:9e:e9:13:fd:95:06:3a:27:c5:35:f5:5e:28:88:
d9:2d:c4:15:ef:c8:0b:2f:64:cd:53:85:cd:bb:5c:8d:28:2b:
d9:f4:19:cc:a6:52:74:3a:f6:4b:d9:62:4e:e0:af:c8:42:28:
17:2a:fd:80:5e:ad:3b:22:c1:37:81:3d:74:e6:65:7e:4e:74:
47:4f:5e:d5:81:3e:61:90:c9:6a:eb:41:e1:d2:40:74:be:bd:
bd:7c:81:4f:86:1c:83:36:1f:c3:aa:4e:12:8c:b2:4d:26:47:
45:83:1d:83:f6:a6:16:28:da:12:58:ce:86:8d:b9:67:d6:5a:
6d:ad:0d:79:40:86:6b:23:cf:73:ab:fc:04:0c:bc:9d:24:f3:
d8:3f:f5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:03:23 2026 by rpki-client