Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier: 70egW1M+Rj145PQ0a5mo3OAzhMV/3BKAKt95c0+7yrA=
Subject key identifier: 8A:19:B9:B9:38:3E:BB:04:81:E6:98:F3:C9:EA:D0:51:DA:EF:8F:3A
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial: 01A0D80418518AD7329ACA37290B40F23A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number: 1A04
Signing time: Fri 25 Sep 2026 10:02:22 +0000
Manifest this update: Fri 25 Sep 2026 10:02:22 +0000
Manifest next update: Sat 26 Sep 2026 10:02:22 +0000
Files and hashes: 1: 4otQnggN5_uQC9wKi00qa0eySrY.roa (hash: mMnLCC58FrEpo9AcseP6Ttc1YSWB7rt8x7N2xaBJU6E=)
2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: qp3S3gSYjMeL1HjOi5AkEN1pKfOV4Xy48cgRd01yzgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:18:51:8a:d7:32:9a:ca:37:29:0b:40:f2:3a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Validity
Not Before: Sep 25 10:02:22 2026 GMT
Not After : Sep 26 10:02:22 2026 GMT
Subject: CN=8a19b9b9383ebb0481e698f3c9ead051daef8f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:14:d0:2f:52:3a:a7:59:f3:05:2a:6c:25:a9:
4f:68:b9:ff:66:16:fa:71:85:81:33:be:a8:b9:ee:
9e:95:33:fa:52:d0:35:08:94:4e:fb:cd:2b:6f:57:
5c:3b:67:c8:54:b7:7c:88:f5:a2:77:7f:45:dc:3a:
f2:0d:6f:7e:c2:b2:fc:42:ce:12:c5:8b:90:b5:b8:
96:23:79:21:d8:c6:29:0f:10:f9:aa:46:d5:38:9f:
bc:a3:de:fa:1d:fa:15:02:4c:1f:4f:a5:c8:cf:cc:
00:c8:df:58:7d:53:da:6b:96:7d:e5:ad:f5:d9:ce:
99:0e:f5:70:f3:84:86:bd:21:15:c3:1a:3e:79:e4:
72:a9:f0:e7:70:2e:01:90:f1:07:bb:4e:49:69:b0:
73:5b:b1:51:97:23:f3:41:d5:f9:5e:86:bf:d4:c9:
5a:f9:91:ab:e9:d8:cf:25:b6:91:ef:e8:a6:43:29:
ee:90:73:93:70:0f:17:19:e3:01:6b:ea:1e:c8:c3:
b5:37:d6:67:0a:de:85:25:1d:9c:70:b3:4c:32:db:
a3:0b:58:55:36:fb:5c:fb:a5:e2:00:e3:23:e9:1d:
7c:57:c8:98:ff:0e:13:23:ac:ad:42:52:a1:5e:60:
34:8e:4b:50:ab:7f:74:ae:a0:ad:85:60:90:ba:f6:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:19:B9:B9:38:3E:BB:04:81:E6:98:F3:C9:EA:D0:51:DA:EF:8F:3A
X509v3 Authority Key Identifier:
keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f8:7d:4c:0b:1d:c9:72:dd:8e:3c:cf:da:37:03:30:8f:81:
08:fd:20:87:d7:b3:1b:97:ab:0c:2b:48:e9:47:2c:eb:c5:72:
fa:ed:76:cc:6b:0f:90:ad:c1:b9:27:a5:4d:11:4e:72:4f:cd:
fd:f1:5f:84:5d:12:66:17:73:2c:fa:86:57:d4:e3:a0:ba:2f:
6a:fe:47:13:f1:ce:5a:dc:26:2e:17:73:d7:f7:50:23:ba:80:
f2:4b:4c:bc:23:b6:7b:ce:5c:a2:91:3d:44:77:15:19:57:2b:
48:88:5c:fe:65:59:dd:df:23:65:83:21:62:9b:a8:26:b3:ac:
86:b2:76:7c:93:51:31:95:7f:0b:8e:9b:58:fd:11:46:c3:22:
7b:e7:f9:0a:34:de:6f:65:5c:f0:a0:d3:97:5b:3b:7f:9e:52:
6e:6e:25:25:93:4e:30:ed:4a:7b:ab:c0:a6:6c:c8:b3:35:04:
f0:f8:b1:fd:62:97:be:07:d5:2f:91:e5:b1:43:d9:28:36:23:
6c:ce:90:af:9c:26:b3:37:ea:75:26:8b:68:d9:6f:ba:ba:31:
a6:3e:50:2a:8c:88:3b:8f:62:07:f4:55:94:99:aa:b7:2a:4b:
28:4e:30:57:fc:d5:68:fd:3c:bf:7e:06:cd:ac:b8:1a:b8:d9:
90:87:b7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:13:43 2026 by rpki-client