Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: dc81wfpsFgL6R+dNlYxTGeavM27h2DQ7L5ntfK6rnUk=
Subject key identifier: C6:28:F5:82:D2:74:0F:4A:0D:31:E3:0B:58:12:1B:A2:AB:19:94:54
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 01A0D6F0759C2374EBBD3856850965423403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 1A84
Signing time: Fri 25 Sep 2026 05:01:17 +0000
Manifest this update: Fri 25 Sep 2026 05:01:17 +0000
Manifest next update: Sat 26 Sep 2026 05:01:17 +0000
Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: sMuwdS80Bepscvk1ceDmm+33WilenBA85PSFkbWvMcs=)
2: fGGjLVgPA4LKzeQccN40Sqp57_M.roa (hash: FQZQxdVxTubVpPk55UZw5AIOaDT8fpk0qYAYzWlOgeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:75:9c:23:74:eb:bd:38:56:85:09:65:42:34:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Sep 25 05:01:17 2026 GMT
Not After : Sep 26 05:01:17 2026 GMT
Subject: CN=c628f582d2740f4a0d31e30b58121ba2ab199454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:bf:94:fa:47:14:cf:6b:73:44:5a:7e:f2:
0e:19:2d:0b:e5:f5:bf:1b:93:9d:21:9c:91:f6:ea:
cb:6e:70:7c:8e:57:fe:b9:00:61:1d:86:2f:93:e8:
e6:a9:c6:f7:c5:4e:70:aa:28:53:38:e3:91:9e:3d:
a3:7f:7f:81:1d:41:1f:6b:75:d5:d9:62:a8:4a:67:
c4:ed:9e:81:1b:48:e5:1b:0b:ec:87:35:e5:d1:3a:
54:b0:e8:3b:ef:8e:16:0d:9a:ca:63:c7:ce:b3:99:
ef:86:9e:0c:a1:a5:f7:62:17:0c:b3:9c:79:87:45:
d5:06:77:59:e3:f4:f5:b3:4e:8c:e0:12:8c:24:b3:
72:60:91:78:41:ee:73:bd:c5:bb:2a:2e:d0:9b:03:
3f:1e:38:ea:96:e6:58:52:f4:25:9c:88:ae:af:8e:
0c:fc:69:db:de:30:f7:19:ae:ab:c1:36:56:34:a9:
00:4a:0f:f2:27:d7:c8:4d:3b:97:24:a2:53:28:35:
60:60:26:92:f5:b4:e5:15:9e:d9:a9:f3:b8:c7:e1:
79:9c:ea:89:2f:b4:c2:74:6d:e0:a3:6f:4a:62:3d:
79:c5:dd:ca:c9:92:c2:ff:63:82:ac:62:77:fb:a0:
3f:f2:aa:31:45:cb:b8:15:46:1e:62:32:88:ec:77:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:28:F5:82:D2:74:0F:4A:0D:31:E3:0B:58:12:1B:A2:AB:19:94:54
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:22:a6:10:ce:93:f4:c6:ae:3b:dd:b2:05:dd:9a:10:16:98:
ea:3b:9b:22:1c:36:0a:98:86:6d:21:d8:00:82:bc:1c:b2:bf:
72:fd:6f:bc:59:f1:62:0e:a7:02:48:0f:e5:06:ab:18:7c:f6:
f4:98:ce:eb:69:ea:51:90:6d:f5:2e:c0:0e:54:cc:3b:72:01:
e4:cc:a7:d1:f6:df:d8:42:ce:91:fd:c8:51:28:38:de:c1:25:
8e:fd:01:5d:e1:c7:15:73:72:97:e4:5e:ff:bf:a3:31:10:00:
27:2b:88:bc:2f:5b:61:46:0d:dd:88:46:15:8d:ad:f2:b7:db:
36:f3:8c:7f:85:c8:35:d5:5c:05:04:5d:77:53:8d:ae:31:93:
10:e7:db:25:45:f4:87:6c:9c:6f:33:71:97:06:62:e2:a5:c6:
31:cd:85:b2:8b:8e:9b:ec:62:c5:7b:fb:2e:51:85:0b:77:a5:
04:0d:07:4a:cd:90:77:19:69:2a:fb:55:50:7a:de:d0:a8:65:
c3:1d:bb:c3:15:0d:4c:d8:3e:44:e3:ec:46:38:d5:67:ef:97:
27:ab:e4:c7:71:4a:28:9f:23:fb:bd:04:8e:81:e6:11:38:1e:
9b:2c:07:fb:96:2e:20:32:4f:67:34:82:c9:b6:2b:12:a3:ec:
02:18:ee:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:56:18 2026 by rpki-client