Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
File: gV1MO26b-NpPoYWDUtVnCXSU64A.mft (raw, json)
Hash identifier: 97PDm7MvClbDOgrwRrY/rgE4izmlv1x/gofw3eCJaO8=
Subject key identifier: C9:95:90:D8:F0:D6:B3:74:C1:14:E3:05:DB:F4:88:22:8B:E6:18:C3
Authority key identifier: 81:5D:4C:3B:6E:9B:F8:DA:4F:A1:85:83:52:D5:67:09:74:94:EB:80
Certificate issuer: /CN=815d4c3b6e9bf8da4fa1858352d567097494eb80
Certificate serial: 01A0DF859C1BF92F6067C441A65B91C23F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:01:10 +0000
Manifest this update: Sat 26 Sep 2026 21:01:10 +0000
Manifest next update: Sun 27 Sep 2026 21:01:10 +0000
Files and hashes: 1: 9OSNQHYwP7hMCYqH3m4FGoNr2h0.roa (hash: oI3UIYnZEeaaqKn53u1eLaxo0kke+QgwtslSgUJGtVo=)
2: eS4B6UGXaj1jtg698wa76I6I9s0.roa (hash: ee1yHXEYh01F57rf9ic6LVAj3dkGow/zQH8cnd6TnOc=)
3: gV1MO26b-NpPoYWDUtVnCXSU64A.crl (hash: vsXXqBWN/3rOb7J7xmUE1UBzrP2tA7TI6i4JA1/XN1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:9c:1b:f9:2f:60:67:c4:41:a6:5b:91:c2:3f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815d4c3b6e9bf8da4fa1858352d567097494eb80
Validity
Not Before: Sep 26 21:01:10 2026 GMT
Not After : Sep 27 21:01:10 2026 GMT
Subject: CN=c99590d8f0d6b374c114e305dbf488228be618c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:c1:1e:41:be:23:a5:ec:d4:e3:0b:21:36:
08:13:30:f1:83:e6:f4:e8:71:43:d3:04:e3:09:cd:
89:b7:41:8c:85:1f:b1:06:0d:b5:01:86:bd:95:14:
5b:65:0c:67:94:2f:7d:9c:91:98:b7:42:0d:06:35:
20:4e:21:d2:ed:c3:54:45:06:e0:44:ac:04:03:2d:
6b:2c:e0:37:c5:a0:8a:fd:53:83:6c:93:9b:ff:8a:
c3:26:d2:f6:18:5d:ce:d2:e0:c3:26:29:a1:c7:a6:
4b:4a:27:8b:63:73:42:16:c5:ad:dc:c4:49:68:47:
da:06:33:90:e1:8e:c8:4f:3d:d0:a6:bb:0d:3e:6a:
18:0f:87:2b:8d:ef:7f:5c:6c:fc:84:40:eb:25:ac:
77:dd:60:06:91:d7:12:de:1e:94:82:05:fd:ba:b6:
7c:b1:81:68:c4:23:3d:15:8d:46:e2:07:fa:06:cb:
1b:16:44:4d:c4:8c:9f:c6:90:3d:f8:ff:cb:37:43:
8e:55:36:61:b3:f1:8f:cf:fd:55:5e:bf:b2:ea:31:
fd:48:d6:d6:97:2d:cd:d7:4f:b2:dc:09:96:8e:64:
43:52:28:d3:21:08:b7:7f:01:7f:e3:5f:54:36:d4:
4c:91:e7:4a:23:40:f9:e8:9a:10:78:48:b0:a5:bc:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:95:90:D8:F0:D6:B3:74:C1:14:E3:05:DB:F4:88:22:8B:E6:18:C3
X509v3 Authority Key Identifier:
keyid:81:5D:4C:3B:6E:9B:F8:DA:4F:A1:85:83:52:D5:67:09:74:94:EB:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fe:a5:3e:a2:77:dc:d2:6d:84:c3:a9:14:ab:9d:ab:c7:18:
4f:2d:16:85:26:d0:5e:93:39:3f:bc:87:3b:f1:5a:18:e9:63:
5c:39:db:0d:bc:e3:51:72:4a:50:aa:da:99:0d:34:1f:7f:37:
5f:f5:b1:1c:c4:12:47:2d:d3:d9:cf:99:0c:3a:9c:98:84:43:
76:46:f4:91:48:e4:39:64:dc:77:73:d8:67:9d:c7:29:1c:b8:
9f:7e:e1:63:c5:93:cf:e5:b0:a4:4e:f7:be:31:c3:26:a0:b7:
d2:82:96:79:73:22:4c:7a:10:2e:af:cf:9c:6d:f1:75:bf:d3:
5e:53:dc:c6:41:9b:ec:89:55:d6:1a:0e:36:28:b6:ed:4b:b5:
89:de:93:89:18:a0:bd:0b:2e:7d:a8:37:5a:5e:30:bf:24:bb:
f8:f6:75:aa:95:62:28:9d:39:57:73:33:02:a6:4f:a1:aa:c9:
97:d3:f4:39:e6:d1:c6:49:1b:22:33:dd:ec:ec:cf:19:d5:0c:
3a:17:bd:86:41:8e:7a:1f:1b:4b:23:cb:28:c3:f7:f3:5a:fb:
00:f7:c6:5e:9d:d8:a2:ed:8f:44:db:d2:9c:ce:2b:4d:d0:f9:
bf:f5:e2:c1:46:04:4f:77:cc:da:31:57:81:d8:4c:6d:4e:13:
75:76:b3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:47:43 2026 by rpki-client