Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: vWp95mNSOqXwPgu0i561U6d41g+lvgW6f4z27WjnHxc=
Subject key identifier: 17:CF:BB:45:37:2C:16:BE:EF:C5:FE:56:F9:C1:BD:51:80:64:8E:13
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 01A1DC14A30D7D2BB218A680CBF1B90B2E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 0BD1
Signing time: Sat 14 Nov 2026 22:01:42 +0000
Manifest this update: Sat 14 Nov 2026 22:01:42 +0000
Manifest next update: Sun 15 Nov 2026 22:01:42 +0000
Files and hashes: 1: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (hash: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: fYwztpJtsYfV3XI6DFB43TghxwtrGcLaKXR7TUsjOmk=)
3: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (hash: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY=)
4: XtW69XYWfcYs9FhfW77svXCHmQk.roa (hash: +2PiuVV/xd9FID0vQ4PS/1nWqfCBv4fOx6GV++A7pIo=)
5: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (hash: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:14:a3:0d:7d:2b:b2:18:a6:80:cb:f1:b9:0b:2e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Nov 14 22:01:42 2026 GMT
Not After : Nov 15 22:01:42 2026 GMT
Subject: CN=17cfbb45372c16beefc5fe56f9c1bd5180648e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:0a:91:e6:0a:2b:94:c0:da:7b:72:55:e2:
c0:20:3a:a9:c5:68:99:aa:71:df:7c:b9:f8:7e:55:
d7:50:14:44:32:11:bb:24:0f:fd:e9:c4:de:0f:51:
03:df:e5:2e:43:8d:8c:bd:c1:f8:a9:93:61:04:cf:
f0:05:cd:8f:0d:13:f9:9c:06:ba:2e:76:7f:b2:64:
21:c1:e5:c2:d6:89:fb:b4:7b:f0:34:2b:4c:7d:66:
4d:4a:f5:d9:3b:72:67:2b:77:09:3e:1b:10:01:02:
36:a9:d1:c4:db:7d:1e:cc:e8:07:94:43:7d:9e:36:
44:77:86:eb:90:6e:1d:0c:15:06:b1:68:e2:8a:e8:
f0:80:8b:e0:3c:89:46:7c:ca:9c:d0:12:60:65:64:
33:38:33:ff:1f:08:6f:af:57:d5:e9:e2:45:81:81:
84:8a:ca:1f:87:df:e0:43:71:61:64:28:17:04:fc:
6a:a9:b4:1d:75:e3:b6:df:57:1b:1b:71:57:fe:9b:
e8:46:5e:b9:a7:a6:3d:67:aa:69:fc:59:40:18:30:
4b:c5:72:68:ca:f1:b4:f7:76:4b:ff:8c:0a:13:b9:
7c:cd:5e:2b:8b:72:0c:f7:53:1f:bb:58:29:06:e2:
4e:4e:3d:74:3c:e4:f4:20:57:e9:4c:3f:7b:a7:03:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CF:BB:45:37:2C:16:BE:EF:C5:FE:56:F9:C1:BD:51:80:64:8E:13
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:75:86:ed:9c:1e:e7:4d:69:cb:e1:42:52:01:8c:df:09:d0:
04:bc:0b:39:25:bd:9b:6b:dd:b9:90:13:9a:34:91:af:58:cd:
0a:dc:55:38:ab:f0:c6:64:28:6e:9a:92:0e:75:db:66:70:aa:
43:54:4a:91:39:ab:ca:27:75:a6:7d:2f:cc:ba:c2:5a:af:1f:
be:52:f4:a0:cc:9b:f0:e5:f1:dc:7a:d1:84:3d:58:e6:90:ba:
01:c4:15:a8:b5:19:98:26:85:64:72:8b:f9:dc:66:f9:17:bc:
e7:7d:ac:d7:72:44:a9:47:de:87:ba:21:86:02:c7:14:da:7b:
c7:19:c3:36:de:16:1b:52:8e:0f:f3:b8:62:cf:73:5f:b7:a9:
f7:e4:42:8c:20:e6:48:a2:2f:9a:5e:e9:d1:61:16:0c:f2:68:
98:a8:18:8b:19:44:fc:6a:72:e8:83:9d:5b:57:ad:11:db:f0:
0d:49:fa:ed:a4:e6:5a:2e:8c:47:a8:35:25:55:98:31:67:e6:
15:20:33:4d:00:96:d4:dc:9d:0c:52:9d:9c:b2:ab:6a:21:e8:
de:39:f0:08:09:9c:6d:6f:64:8f:5c:d1:83:04:e5:9e:02:e8:
60:10:77:d2:e3:c4:29:e1:ed:0a:2d:94:52:9c:e6:51:fe:4e:
7a:30:cd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:09:06 2026 by rpki-client