Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: Oaj45RlBnAhVNdfr0bAnQIHN5IzBa9uKKSVlu4M50RE=
Subject key identifier: D0:C0:03:69:46:C3:8A:DE:85:09:C7:D9:01:24:B0:A9:8B:28:BE:17
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 01A0F11E2093494FDFE31256B56547ECF068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0DC0
Signing time: Wed 30 Sep 2026 07:01:18 +0000
Manifest this update: Wed 30 Sep 2026 07:01:18 +0000
Manifest next update: Thu 01 Oct 2026 07:01:18 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: 77p1c8jqsU9LtkJtMBdAmicJe62CqQlL1HOZErd+iC4=)
2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:20:93:49:4f:df:e3:12:56:b5:65:47:ec:f0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Sep 30 07:01:18 2026 GMT
Not After : Oct 1 07:01:18 2026 GMT
Subject: CN=d0c0036946c38ade8509c7d90124b0a98b28be17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:d8:ef:8f:8f:0a:41:8f:f6:dd:6c:40:3d:
c4:d4:ff:5a:01:ec:49:be:ba:04:a8:a8:ae:7b:9c:
1a:ed:f1:25:5a:a2:3d:99:eb:6b:cc:18:ac:5a:22:
7a:d6:f7:e0:65:a5:60:74:a1:d2:ca:ef:39:01:8d:
53:4b:aa:01:07:41:98:c2:72:79:5b:c2:5b:02:06:
29:78:f3:97:ac:bb:72:4d:87:b1:8c:25:39:c7:42:
98:b7:8f:7e:e6:98:da:b9:95:2d:0d:b8:44:b8:cb:
0b:da:75:69:0c:5c:9b:1e:55:91:87:04:15:cb:57:
11:0c:30:1d:3b:81:01:9b:41:7d:16:4e:ea:f3:97:
75:f3:6e:88:c3:f6:87:57:84:1e:6f:13:52:6c:8b:
6e:78:ae:6f:40:d2:6d:1e:15:78:31:fb:a3:67:b6:
e9:ee:f3:d2:c5:db:9b:79:3c:8b:ba:30:ca:f4:19:
93:57:d9:f4:26:6b:ae:aa:d5:86:6e:0a:8f:b2:96:
9a:48:ff:f0:91:e7:8f:55:37:a8:87:91:05:19:a0:
1e:5b:44:6c:cb:8f:69:26:8a:10:32:15:47:43:2a:
ff:64:d4:2c:9f:9b:a8:49:d6:64:89:24:5b:3a:1e:
59:ad:a9:1b:6c:8a:16:3c:9e:3a:9c:31:ec:6f:3f:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C0:03:69:46:C3:8A:DE:85:09:C7:D9:01:24:B0:A9:8B:28:BE:17
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:43:9a:26:95:58:14:96:33:33:52:61:62:1b:5a:ed:3a:25:
63:e2:db:b0:9b:34:57:cb:06:1c:8c:cb:86:cb:e8:25:ea:84:
08:95:48:20:27:f3:4f:58:d7:70:c9:97:1f:16:c1:04:85:50:
e5:83:43:12:31:2f:e2:69:dc:c6:78:98:17:f1:a9:38:5f:c6:
3e:6d:2f:91:40:ed:94:b3:44:26:81:23:01:38:c1:be:a4:8b:
c4:17:11:b9:63:ce:81:7a:2d:51:fc:76:40:a7:64:bb:e7:05:
0a:12:c0:75:2f:5e:bc:e3:c9:df:e8:f3:61:72:41:46:e3:f7:
e0:f5:20:31:d9:2e:f5:fc:b8:e6:e4:7c:4e:94:4c:93:43:ea:
bc:09:63:44:7f:0c:17:83:cc:ce:d6:83:f6:5f:da:91:ab:09:
e8:7d:5d:d9:cc:31:a7:dc:ae:2d:66:12:86:43:89:b8:1f:09:
f2:57:ad:99:a6:ec:8e:cd:a0:7f:12:93:da:ed:44:62:53:3d:
26:0c:6f:03:f8:d1:aa:ac:9c:fa:bb:3d:af:2d:b7:72:ef:33:
37:95:ca:17:cc:cd:d9:86:76:69:e0:c6:1a:17:03:1a:e1:da:
d7:c8:d0:5f:54:e1:6d:b3:12:08:1a:18:aa:8a:07:c0:65:2e:
57:f0:65:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxHiCTSU/f4xJWtWVH7PBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmFiNTUwZDgyN2EyZGVmMGQ0ZDI2MTYwNjE0MjVjMmY2
OTRjODQwHhcNMjYwOTMwMDcwMTE4WhcNMjYxMDAxMDcwMTE4WjAzMTEwLwYDVQQD
EyhkMGMwMDM2OTQ2YzM4YWRlODUwOWM3ZDkwMTI0YjBhOThiMjhiZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3fY74+PCkGP9t1sQD3E1P9aAexJ
vroEqKiue5wa7fElWqI9metrzBisWiJ61vfgZaVgdKHSyu85AY1TS6oBB0GYwnJ5
W8JbAgYpePOXrLtyTYexjCU5x0KYt49+5pjauZUtDbhEuMsL2nVpDFybHlWRhwQV
y1cRDDAdO4EBm0F9Fk7q85d1826Iw/aHV4QebxNSbItueK5vQNJtHhV4MfujZ7bp
7vPSxdubeTyLujDK9BmTV9n0JmuuqtWGbgqPspaaSP/wkeePVTeoh5EFGaAeW0Rs
y49pJooQMhVHQyr/ZNQsn5uoSdZkiSRbOh5ZrakbbIoWPJ46nDHsbz8uYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDAA2lGw4rehQnH2QEksKmLKL4XMB8GA1UdIwQY
MBaAFID6tVDYJ6Le8NTSYWBhQlwvaUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAt
Zjc2MjkyOWYxZjA4LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAtZjc2MjkyOWYxZjA4
LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEOaJpVY
FJYzM1JhYhta7TolY+LbsJs0V8sGHIzLhsvoJeqECJVIICfzT1jXcMmXHxbBBIVQ
5YNDEjEv4mncxniYF/GpOF/GPm0vkUDtlLNEJoEjATjBvqSLxBcRuWPOgXotUfx2
QKdku+cFChLAdS9evOPJ3+jzYXJBRuP34PUgMdku9fy45uR8TpRMk0PqvAljRH8M
F4PMztaD9l/akasJ6H1d2cwxp9yuLWYShkOJuB8J8letmabsjs2gfxKT2u1EYlM9
JgxvA/jRqqyc+rs9ry23cu8zN5XKF8zN2YZ2aeDGGhcDGuHa18jQX1ThbbMSCBoY
qooHwGUuV/Blyg==
-----END CERTIFICATE-----
Generated at Wed Sep 30 15:08:39 2026 by rpki-client