Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: e8+VXsBdyNXtrD4VV/m4EDq4p+S6WqoALpza9ymJcDM=
Subject key identifier: 00:AE:8A:7E:8B:E8:B9:0B:C8:E5:64:35:5C:6F:35:C3:ED:FA:A8:36
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 01A0D048B72754316EC5CADD007EE71F325F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 19FF
Signing time: Wed 23 Sep 2026 22:00:21 +0000
Manifest this update: Wed 23 Sep 2026 22:00:21 +0000
Manifest next update: Thu 24 Sep 2026 22:00:21 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: LSp+wrKH1lYY69xG6H3Bwa8vpFexAhhNZIGhn2EB3Fs=)
2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:b7:27:54:31:6e:c5:ca:dd:00:7e:e7:1f:32:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Sep 23 22:00:21 2026 GMT
Not After : Sep 24 22:00:21 2026 GMT
Subject: CN=00ae8a7e8be8b90bc8e564355c6f35c3edfaa836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:8d:b9:90:7c:ed:bf:91:9a:ca:7f:1b:11:
a5:8b:ee:48:c1:63:1c:40:75:21:17:e5:68:e3:32:
9f:29:67:39:dd:f2:89:f6:9c:a9:ea:c4:82:ff:5c:
97:d8:93:e9:8b:9b:d4:e0:da:f1:1e:b0:89:bb:c6:
e2:be:82:94:46:4e:ba:3b:5b:29:fa:fc:e2:fe:5c:
7a:19:dd:53:9c:d2:81:82:2b:45:98:71:b3:6c:b3:
86:16:3e:35:fd:cc:14:82:26:47:4a:db:53:f2:a7:
fc:fb:78:be:43:61:23:3b:ca:a4:f0:98:6c:c3:be:
0d:8c:54:56:93:5b:c5:9f:60:e8:59:8a:8f:37:39:
b4:86:e6:3d:64:2e:d6:f5:d5:6d:50:63:38:95:50:
d6:f8:53:18:01:22:6d:4c:fb:e2:d3:60:3e:56:de:
1a:7a:de:1b:bf:c6:10:c7:7b:73:72:af:1f:ac:b7:
38:b2:ba:99:5f:1d:f7:3e:b3:4b:0b:79:88:ff:7e:
fd:0e:26:b8:97:37:60:6f:fb:d8:c4:cd:83:79:b4:
dc:b9:8d:2e:02:33:88:9e:b4:d4:a8:f6:2a:2e:dd:
5b:a1:a5:20:e9:96:4f:12:20:5f:0f:bc:8e:2d:e8:
45:7c:64:18:c2:2f:ce:1f:1a:3a:61:17:37:e3:91:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AE:8A:7E:8B:E8:B9:0B:C8:E5:64:35:5C:6F:35:C3:ED:FA:A8:36
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:ee:3f:fc:f7:d0:27:14:ef:93:31:6e:0e:c8:59:37:8e:be:
16:a9:0d:bf:ba:87:45:47:55:e7:da:06:1b:ab:4a:d8:cf:2e:
e0:d2:f6:6a:90:19:05:ae:6c:b7:ce:70:82:49:5c:b1:44:bc:
09:db:6c:b9:66:1d:e4:51:22:52:78:79:1e:0a:69:f3:b5:a0:
f4:38:e8:9e:54:ec:57:39:eb:dd:6a:63:b6:e9:2e:b8:2b:54:
9e:99:5c:1e:f0:ad:4b:7f:52:af:0b:f2:d9:13:aa:75:7f:a7:
ba:f0:d5:6f:a3:b1:d7:81:2b:83:d8:d9:a7:fd:a2:a6:5a:38:
d7:28:de:0e:a6:35:80:43:b4:7e:24:6a:6c:bc:59:e7:d4:02:
d7:35:d1:6d:af:65:3f:77:65:c4:df:73:ad:d7:3e:01:b6:6e:
4d:0e:46:2d:47:b0:d2:92:cc:14:31:76:6b:f4:de:2b:0d:e4:
b3:0a:06:38:d7:71:64:79:55:e4:d0:66:ed:1b:3f:75:61:1a:
21:1e:40:9b:62:f1:53:b5:a2:a8:5a:1f:54:18:40:7b:13:86:
ca:78:6e:36:ea:bd:45:75:ce:ea:37:8f:57:6d:fc:c3:32:88:
fa:73:29:51:fe:b4:20:33:c1:4f:78:75:f5:99:85:fb:ba:ed:
a5:c8:fb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:53:36 2026 by rpki-client