Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: XDwpLSTuFc8gq9t0zHUrCMdWzuKsF0hESzerX9sJDKc=
Subject key identifier: 3D:18:3A:92:CC:95:DD:DE:1F:4F:D4:FD:A4:C0:46:78:79:E0:C8:2E
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 01A0D9BAB8A1FEA1C9E872C31619B970FD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 18:01:27 +0000
Manifest this update: Fri 25 Sep 2026 18:01:27 +0000
Manifest next update: Sat 26 Sep 2026 18:01:27 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: yi+34VVH9+a6i2ttnKkixlhnzoG1GpYrEtNdfqR9bT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:b8:a1:fe:a1:c9:e8:72:c3:16:19:b9:70:fd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Sep 25 18:01:27 2026 GMT
Not After : Sep 26 18:01:27 2026 GMT
Subject: CN=3d183a92cc95ddde1f4fd4fda4c0467879e0c82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:92:2c:ea:26:50:ef:da:e3:c1:f4:a0:23:
37:24:76:da:c6:be:fa:b9:f4:0e:8d:eb:67:5a:27:
17:0f:10:60:0d:9f:ef:14:41:a2:eb:9a:9c:79:e4:
8c:c2:4b:c3:ba:e6:64:05:e2:72:eb:c0:5a:f4:82:
c4:d3:08:cd:b6:f0:e2:7a:fa:17:ae:9f:57:40:0e:
a1:b2:17:a7:11:bf:af:da:12:06:34:46:54:74:2b:
85:e9:34:a0:21:ac:7f:69:21:e2:e4:9e:16:50:e0:
8d:ef:f5:11:a5:ce:a3:33:9f:06:ec:1b:b0:34:67:
71:0f:60:8c:08:28:e8:b2:e4:64:42:29:ec:85:3a:
77:0e:78:22:fe:46:13:70:66:a2:3d:1e:9e:d7:3a:
f4:81:01:2b:16:ef:15:c1:13:11:99:67:2a:59:a9:
3b:c7:a9:55:fb:0a:c4:70:e4:4b:66:ad:bb:99:ee:
a4:5d:71:77:81:3b:0f:ef:aa:c7:fb:4a:4b:b9:00:
89:0c:ff:87:2b:2b:54:c0:58:e8:bd:91:ff:80:30:
46:9b:bc:8c:f0:6a:1b:b0:bc:67:20:4d:e7:67:90:
d4:39:b1:e9:9f:c6:26:21:f9:e8:55:b1:98:20:a1:
1d:5e:44:3d:81:10:ae:93:7f:bc:ba:52:4b:0c:b2:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:18:3A:92:CC:95:DD:DE:1F:4F:D4:FD:A4:C0:46:78:79:E0:C8:2E
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c5:d3:ac:47:e2:5a:78:c5:5f:c5:1e:68:a6:65:e1:e7:ce:
3c:2a:0a:88:16:a8:d5:9c:c3:4f:39:26:71:4c:07:b8:06:48:
74:8e:3b:98:0a:0a:90:85:15:15:3e:85:54:08:e3:b3:e9:3f:
3c:c7:64:a1:81:d7:c8:3b:2b:cd:bd:d8:50:f9:39:a9:24:a8:
54:f0:32:1b:d7:86:9a:58:c5:5d:81:6c:18:6a:03:35:71:34:
d3:90:6c:d0:fb:90:14:24:d3:11:f7:26:d3:8a:f0:c1:aa:2a:
5e:5a:da:d5:30:36:78:ed:16:8b:08:fc:09:6e:23:21:8f:59:
b9:f2:1b:3c:bb:f2:a3:e1:f3:05:e4:dd:70:b2:9a:17:fb:cc:
46:cf:96:3e:ee:94:14:7f:72:58:80:d7:d7:6f:6a:af:82:a6:
1c:3d:0f:3e:0e:53:62:5d:ad:87:6d:8a:dd:ef:3e:2a:64:42:
6a:de:28:2e:cc:90:62:e5:01:14:95:d4:9a:be:bd:1f:26:6c:
72:3f:7e:33:83:71:49:c1:7c:3b:74:73:e7:cf:ec:e9:d2:21:
35:d2:0e:cd:4d:00:1a:0a:c0:7b:be:3f:f8:4f:fc:c5:8e:50:
20:cd:64:7e:07:81:4d:54:60:b8:1f:8e:40:da:58:89:c2:10:
e6:ad:fa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:50:32 2026 by rpki-client