Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: UvCzS8dEFASpanVNWCDxA/2KInmxkOsa/zSTQm1wNNE=
Subject key identifier: 86:69:EA:9F:95:B9:6C:08:8C:0E:CD:5D:9F:94:25:8D:49:B1:22:77
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 01A0E5F5AEF0A26465E184AA370787865DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 1A09
Signing time: Mon 28 Sep 2026 03:01:18 +0000
Manifest this update: Mon 28 Sep 2026 03:01:18 +0000
Manifest next update: Tue 29 Sep 2026 03:01:18 +0000
Files and hashes: 1: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (hash: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ=)
2: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: jK28hPHP7rEjRrRWERSlL+SfPIVrV1Eol7pkSTBVIzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:f5:ae:f0:a2:64:65:e1:84:aa:37:07:87:86:5d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Sep 28 03:01:18 2026 GMT
Not After : Sep 29 03:01:18 2026 GMT
Subject: CN=8669ea9f95b96c088c0ecd5d9f94258d49b12277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:69:2d:c3:90:e9:c6:a1:c8:07:5e:ec:1f:b3:
bf:05:87:3a:a2:83:7f:a3:00:0f:ca:5e:35:0e:cd:
7a:eb:e4:3d:af:77:36:3f:82:b1:0f:b9:fc:aa:f1:
4c:98:73:42:79:4f:74:77:cd:7a:c1:6d:f2:19:d4:
9b:45:de:99:51:1c:8f:a5:f3:9c:a7:55:43:4f:45:
b6:e8:fa:53:41:1d:5c:dd:40:d6:b1:4d:02:d5:f1:
bb:84:b0:60:86:a0:00:f1:95:24:3e:ec:e1:e5:bb:
cb:2f:42:ae:f0:cd:f9:85:da:7d:bb:c3:d0:fd:77:
c9:9b:78:7a:e1:bd:f0:ac:29:8e:46:c4:b1:fa:6b:
5c:cc:04:de:c1:59:05:31:1e:d1:c2:16:b8:b8:70:
37:06:f8:2e:6d:5e:21:d4:70:44:90:76:c1:23:2f:
16:0c:5e:e2:b2:43:2c:76:11:42:b5:72:3f:7f:f1:
19:35:90:ff:a2:f1:55:4b:a3:e9:45:fc:44:d5:ec:
91:20:17:46:9f:55:c9:aa:01:3e:78:97:54:39:c0:
15:a7:4e:8b:f7:95:dc:8c:b6:13:f5:48:91:d6:6b:
80:48:98:9b:47:8b:36:b5:88:77:f3:ff:44:f8:cc:
8c:d2:94:24:4a:f5:8e:25:df:d2:12:7c:b6:18:21:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:69:EA:9F:95:B9:6C:08:8C:0E:CD:5D:9F:94:25:8D:49:B1:22:77
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d1:83:ae:b1:5d:7d:3d:27:64:25:dc:df:4c:8b:76:82:00:
d0:66:76:4b:f9:31:1d:4b:ef:56:6f:ca:a9:cb:e8:a5:a6:28:
7b:25:f4:1f:8a:3c:84:cb:25:de:89:ac:05:52:7a:b1:2d:2a:
e8:ad:77:a8:1d:94:7f:6e:bb:57:b3:75:94:b9:6a:79:35:bd:
4b:db:9a:6e:54:21:6a:46:ba:2e:8b:d8:73:df:0e:71:fb:d6:
d9:7b:e7:d1:af:3e:7c:9e:4a:c7:7c:aa:74:4d:68:73:bb:a1:
28:fc:97:46:d0:79:b9:21:2d:3f:b0:85:c1:9e:6a:24:25:55:
b0:8b:3b:91:1d:34:82:ed:16:dd:b1:32:e2:ec:f9:a0:10:5c:
ea:a5:87:13:d8:36:aa:7a:e6:06:5b:7f:7c:e4:70:82:c4:8c:
2f:c8:23:67:13:43:cd:c0:c2:b2:9e:b4:f7:75:80:24:d5:bf:
b3:fe:be:45:fd:a4:e9:3c:69:8d:7c:6a:43:10:1e:c9:7a:e0:
28:54:2f:2e:eb:df:31:b7:f8:6c:63:98:6c:ce:46:1c:89:a4:
c0:9a:9f:fe:56:c6:b0:c4:c0:1c:05:07:0f:e7:90:65:3b:d4:
56:af:82:75:09:e5:fe:6c:68:f1:5e:da:52:48:e9:82:5d:50:
18:13:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:25:26 2026 by rpki-client