Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: W0nQgJai2b62t4j8NeWDFAyobFiqXSbYrCuV92rtOfM=
Subject key identifier: A1:AC:CE:73:52:43:E9:50:D4:FC:2F:F3:1F:C9:4F:04:5E:2D:67:8C
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 01A11B9A5FC8F1386D661D7D5666E44EF0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 1A97
Signing time: Thu 08 Oct 2026 13:01:04 +0000
Manifest this update: Thu 08 Oct 2026 13:01:04 +0000
Manifest next update: Fri 09 Oct 2026 13:01:04 +0000
Files and hashes: 1: K4rNlv6gYUKRgIqav4ptqCTSNGg.roa (hash: peGnClYWPqnMOOfi13oSusAgZ5+U+k8ztyI3Zgy/aPo=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: H6YKjbFfXLO1yi/N9Qm30H00DI7B6jt7XQj1bc18ZEo=)
3: zposQW8-Ml33uc3ENu1a83hxjEI.roa (hash: aFqmx16M5gCNIMqJZ5eqfmDRHZVtOgPSXQjK2JfuQ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:9a:5f:c8:f1:38:6d:66:1d:7d:56:66:e4:4e:f0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Oct 8 13:01:04 2026 GMT
Not After : Oct 9 13:01:04 2026 GMT
Subject: CN=a1acce735243e950d4fc2ff31fc94f045e2d678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:1b:97:48:e6:eb:fb:33:5b:65:22:06:e5:
ee:d5:2b:53:3e:22:1a:64:56:f0:b2:f4:54:99:c0:
c8:5c:ad:84:c5:04:17:30:42:e4:3a:13:e3:76:71:
78:44:f0:27:fd:c2:ce:3d:92:d3:a0:0e:9d:e5:7d:
32:6c:3f:6c:c0:24:87:16:43:75:20:c3:83:69:b0:
70:9d:fd:47:08:2f:49:24:bf:b5:a5:f6:81:bc:5b:
0d:6e:af:dd:1e:c8:ae:5b:4a:48:22:4a:5c:7a:48:
31:29:cf:e2:b9:8b:f4:fa:a2:81:ba:1a:e3:69:b6:
d4:5d:58:ab:2e:50:35:e0:d1:b4:7e:3e:69:c9:4b:
27:65:0f:64:46:4b:18:d8:7b:af:30:6f:31:7b:df:
da:d0:04:40:99:33:15:aa:72:86:4d:b3:02:98:de:
51:b0:a1:9a:12:b3:84:b9:19:a2:04:8f:a8:33:d0:
80:39:90:f9:b0:97:75:c8:e8:0f:c6:b8:64:bf:32:
2c:a9:fa:a7:7d:c8:85:26:f5:6a:e7:50:5b:24:2a:
f3:d2:6d:9b:c2:a8:9d:0a:14:3f:40:6e:5c:79:e0:
e7:4a:9e:d8:f2:0b:32:6f:9e:74:e9:65:d5:2a:d1:
30:f1:34:c8:1c:b4:5d:84:f7:e8:6c:5f:72:07:ca:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AC:CE:73:52:43:E9:50:D4:FC:2F:F3:1F:C9:4F:04:5E:2D:67:8C
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:95:9a:f8:4f:ff:9e:96:3b:31:ef:59:1b:17:e2:6d:0b:e8:
62:c4:b6:97:85:aa:4f:f7:00:65:eb:64:89:b1:7b:3b:00:af:
6c:8c:e1:fd:31:93:19:33:10:a3:46:91:06:ee:cb:6d:45:5e:
48:e0:ee:3e:85:05:98:75:b9:0f:6b:3c:9e:50:6c:cb:50:06:
ee:05:de:5d:4b:08:0f:e2:47:ff:a1:0d:71:d5:f3:98:e1:ff:
8b:ab:e1:c6:0f:31:db:08:f7:bb:94:37:61:6f:0b:58:69:2d:
e3:29:24:dd:0b:36:b4:a0:0f:6a:61:9e:ca:7f:13:05:1c:d1:
d4:21:36:02:4f:17:9e:19:27:f4:4a:23:e9:b4:77:84:3d:f0:
cb:80:68:32:fc:b6:f7:71:bb:bf:6d:53:fe:c5:11:e1:86:22:
cf:18:12:42:2c:5f:44:b0:67:e1:90:b5:ce:e2:90:ac:4e:dc:
84:8f:5b:f4:ee:1b:5b:16:24:b6:84:21:43:2c:78:b2:f8:00:
ad:c9:cb:cc:d1:bf:e2:2f:e7:c2:0f:c8:4a:49:09:f7:db:a8:
8f:73:1b:cc:04:ff:8e:2b:49:29:4b:b3:23:72:90:3c:75:60:
67:32:95:89:09:80:74:f7:e6:5e:b3:55:de:80:1e:17:52:dc:
c6:7c:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:26:14 2026 by rpki-client