Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: 8nUq+JtPZJvczen9GDPvzw0gMRRhB6F7ll4lRzd5Awg=
Subject key identifier: 01:31:F7:6D:5A:74:70:B3:A2:65:8E:EE:79:AA:AD:DB:7A:4E:83:08
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 019E1ED99B904B0726404491DF8E34A3BC0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0C4A
Signing time: Wed 13 May 2026 01:00:37 +0000
Manifest this update: Wed 13 May 2026 01:00:37 +0000
Manifest next update: Thu 14 May 2026 01:00:37 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: gh3/DdcXk0pGl0arcHXWehQFFx08ZcjBFTwbSIXH3fQ=)
2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:9b:90:4b:07:26:40:44:91:df:8e:34:a3:bc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: May 13 01:00:37 2026 GMT
Not After : May 14 01:00:37 2026 GMT
Subject: CN=0131f76d5a7470b3a2658eee79aaaddb7a4e8308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:61:c0:aa:91:4a:c9:12:37:59:80:24:cd:eb:
d9:82:64:40:88:bb:eb:2e:a2:28:9a:da:c7:73:d3:
6e:3f:a7:f9:16:95:0a:62:19:80:26:28:6e:cf:0c:
14:a3:af:07:e3:b0:e0:b4:c0:38:2d:aa:86:28:d5:
55:a9:4d:f6:c8:d3:20:1e:80:e3:38:9d:fc:2b:fb:
b9:e1:da:69:bf:d9:dc:0b:cd:9e:15:4a:1e:91:60:
bd:88:39:a7:d0:a1:ee:39:52:d3:3a:1c:ec:64:29:
f1:06:81:82:db:29:60:a0:eb:e3:26:b4:32:be:3b:
6c:c2:03:b7:ef:68:cf:4b:8f:bb:bc:8c:a9:ea:a6:
3d:ee:dd:e9:81:0f:4a:61:22:00:5d:26:2b:35:4e:
66:47:8f:21:27:12:cc:bf:15:ff:86:71:63:bb:07:
e0:02:38:9a:c9:e3:ee:4e:2a:17:f6:ac:4a:8a:7b:
8f:5b:f7:4e:fa:0e:38:0c:be:54:6b:44:91:b3:9a:
59:f4:55:d9:45:6e:72:58:a9:d4:de:fb:67:5c:91:
95:7a:86:11:fd:69:99:b1:27:66:68:82:40:9d:ce:
75:2d:c5:3d:91:38:9f:cb:88:ad:76:02:ac:3e:5f:
31:e2:fa:e6:8d:ee:36:46:d1:33:07:ac:f3:ff:1a:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:31:F7:6D:5A:74:70:B3:A2:65:8E:EE:79:AA:AD:DB:7A:4E:83:08
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:20:2a:59:bd:1d:4b:4f:1e:01:61:c3:37:5a:8c:2c:b8:bc:
38:85:09:6f:ab:a7:e9:41:6e:95:59:5d:20:c9:65:97:01:f2:
88:99:0b:b7:71:43:5f:54:13:cd:18:5a:48:ab:ef:d4:f6:01:
87:97:4d:96:14:66:51:f4:4b:22:83:aa:d3:2a:4b:a8:62:c0:
e7:c4:2a:b3:c2:df:82:cf:2e:d4:e9:cb:d4:ba:54:f8:66:57:
de:ea:9d:90:d6:be:fa:93:77:06:ae:95:32:b9:d5:a8:05:91:
b7:ce:08:86:e7:a3:c7:03:da:6c:03:56:9c:1e:a6:23:a3:50:
3d:bc:a7:2a:21:2c:c6:e9:98:69:d2:d0:86:dd:17:11:6a:1c:
fc:32:49:42:f1:db:d0:aa:b2:2f:ea:02:d0:bd:14:95:7d:e7:
61:d1:da:3c:ba:27:d2:12:12:fb:6a:b2:fd:58:27:8a:cc:b6:
57:8e:66:e3:46:75:52:b0:d3:52:6a:d3:52:a7:1f:76:e8:2e:
62:4b:8d:0b:ca:6a:3e:b5:ec:0d:f6:6e:53:db:5b:fa:da:70:
04:79:19:25:11:94:3e:c6:ec:ef:48:97:16:f7:77:5d:8e:23:
fa:35:de:bc:3d:16:23:a2:ca:ef:e1:fd:3b:51:77:87:03:36:
b5:dd:94:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:58:26 2026 by rpki-client