Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: pvBUVjINrb1jk2AJyyHBLW0KFituqJcivn/M5+ljm1E=
Subject key identifier: CA:A4:50:26:C9:A2:7D:DC:3F:89:15:A6:F8:3C:E9:A1:F4:3F:D4:96
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 01A0DA28C2C4A0D6E0ABA5A1B13328C19DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 1A2A
Signing time: Fri 25 Sep 2026 20:01:39 +0000
Manifest this update: Fri 25 Sep 2026 20:01:39 +0000
Manifest next update: Sat 26 Sep 2026 20:01:39 +0000
Files and hashes: 1: 6K4rT6VCuHtrpHkb6XBvfHzGcts.roa (hash: rcgp9RRt2ZMAtK8hgAgj71whrGluIkO7wLBZN77JUi8=)
2: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (hash: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8=)
3: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (hash: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00=)
4: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (hash: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo=)
5: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (hash: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso=)
6: aLeBPPf7ugWBDmXZtGstFAYR5d8.roa (hash: WCjwJf715go5YX++trIsBUfbf3PUAGqQfhdqAZp7NwQ=)
7: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (hash: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI=)
8: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: vePevCVKE/6JbjU4eOZFx18YrsFhxi6NzLLrZIoS3os=)
9: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (hash: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:c2:c4:a0:d6:e0:ab:a5:a1:b1:33:28:c1:9d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Sep 25 20:01:39 2026 GMT
Not After : Sep 26 20:01:39 2026 GMT
Subject: CN=caa45026c9a27ddc3f8915a6f83ce9a1f43fd496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:76:d4:57:9f:64:31:e3:40:0e:bf:13:cb:a6:
40:d2:dc:7a:16:f1:62:39:b7:9c:2a:d3:b6:91:db:
64:86:f6:7f:bc:7f:5c:41:2b:40:99:e2:70:b9:89:
21:ee:18:fd:1b:b4:65:bb:91:1a:87:67:9b:73:b3:
d9:4d:40:95:b8:9f:48:a9:c7:fd:a3:81:07:78:20:
e9:b1:01:d2:07:ed:f9:6e:1a:2b:6c:6e:75:38:7f:
72:75:62:7d:7f:73:3f:f4:36:32:f7:1e:18:a0:67:
0e:56:0f:ba:31:2f:60:34:7d:ac:a9:cd:0a:d2:04:
e7:24:a9:43:9b:09:f9:4c:bc:e1:3a:b0:c6:4c:0b:
6e:7f:fe:1b:19:23:d2:5b:9f:3b:53:d5:3d:b4:f0:
43:d0:83:2f:77:ae:dc:fd:02:8d:f8:40:82:6c:80:
0c:f3:fd:e0:cd:95:db:30:1d:2c:8e:bd:74:94:48:
9f:ed:75:3e:5d:be:6d:82:ed:a7:18:93:ec:2f:fe:
04:0e:db:68:d9:1b:bf:1a:c1:7b:ca:95:ff:e4:37:
e1:c2:79:23:9c:ea:7f:02:07:93:e6:58:37:57:71:
76:44:2e:f0:d5:0a:92:b9:4a:e3:fb:07:cd:b7:fa:
0b:19:d3:7b:32:51:5d:40:01:40:7d:53:05:16:6c:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A4:50:26:C9:A2:7D:DC:3F:89:15:A6:F8:3C:E9:A1:F4:3F:D4:96
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e3:7f:1e:c5:05:f4:db:55:0b:4b:93:57:45:80:c5:c6:b8:
3f:e1:22:b1:73:ac:d1:ad:4e:dd:80:7e:7b:b8:ad:b1:a9:42:
0b:4d:c3:c7:6d:af:8d:e8:7a:fd:b9:7e:de:0e:f3:9a:a8:15:
04:7c:3f:a3:dd:ee:a7:82:c1:bd:24:d8:84:95:f1:c0:98:4f:
68:97:2d:d7:5f:9f:4b:e9:04:57:0c:0a:32:c3:0e:63:a5:d6:
36:55:4c:cb:5a:2b:e5:34:30:a1:70:d9:1e:e3:b0:a0:ea:bf:
a2:7d:77:ac:35:50:0d:85:2d:05:6b:5e:8f:6b:3d:2f:41:3f:
82:41:ce:6e:d1:4e:40:a8:84:cf:ea:27:42:86:93:36:0c:4a:
18:1b:58:d9:c3:e3:3a:18:c6:f3:a8:58:7e:0a:5e:55:ff:b2:
66:25:41:50:c4:ae:4b:ae:61:3b:8f:d6:f3:bf:bf:00:15:7c:
a0:e8:b2:fc:9b:2c:dc:cb:38:28:ee:4a:eb:1e:26:04:51:31:
c2:50:df:97:ea:e4:f7:2f:b9:5b:0a:d8:11:ad:98:90:9d:e3:
2e:3b:e0:4d:bc:b4:4e:1b:d8:f1:1e:04:58:af:43:37:04:54:
f7:75:7a:58:3a:7d:8a:ec:b5:7f:a1:ff:9a:46:a2:67:05:f8:
d8:cd:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:15:08 2026 by rpki-client