Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
File: GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json)
Hash identifier: /g1G+5U5fW597zhwFTKUwCDCwmydSnoXyoz14UD2++o=
Subject key identifier: AD:75:DF:0D:1A:BE:42:14:61:DC:73:D9:20:CF:07:EE:99:FA:46:52
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Certificate issuer: /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial: 01A104DC1F7ABA6E43C80F5282B00C903D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
Manifest number: 1A8A
Signing time: Sun 04 Oct 2026 03:01:37 +0000
Manifest this update: Sun 04 Oct 2026 03:01:37 +0000
Manifest next update: Mon 05 Oct 2026 03:01:37 +0000
Files and hashes: 1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: 89mUlM8985iMJkH+FmfgVYPIqPkDiFGuhHEEI2GsyN8=)
2: bKXgGvwUcZq1b-BeaoItS6otSlo.roa (hash: PDK23D7wtUzyyScY6vF+EO4aImIoOx+/JSHwWylCCQM=)
3: xyvm0YxS6IqKrvF4Ilx5NStC9dY.roa (hash: +/wn7ZC0EOVgIlsUt9PZ6BtD5t6jlIZ56I0cWiXqnWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:dc:1f:7a:ba:6e:43:c8:0f:52:82:b0:0c:90:3d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Validity
Not Before: Oct 4 03:01:37 2026 GMT
Not After : Oct 5 03:01:37 2026 GMT
Subject: CN=ad75df0d1abe421461dc73d920cf07ee99fa4652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:eb:65:ea:4c:ad:00:7a:e7:a5:ca:7e:3f:
0f:81:6a:60:aa:e2:c8:c0:1e:a2:67:76:12:97:d7:
61:91:39:cf:57:40:91:1c:55:a9:55:9b:87:70:6e:
f5:f2:ae:e3:a8:3a:26:c5:dd:24:28:77:32:7c:71:
16:9c:bd:a7:53:7f:58:54:ec:bd:31:39:6f:b7:d3:
c7:8b:f2:c2:75:fb:71:5e:c1:8a:40:a6:2f:88:5d:
13:1e:6d:60:fe:ef:26:9c:49:f9:91:d6:4b:bb:87:
10:f2:0c:07:8e:01:25:86:80:9c:35:7c:55:43:c4:
5d:dc:84:b6:b7:4b:56:7a:eb:5c:64:94:0c:bf:95:
15:c6:f4:16:2f:55:f7:9b:a7:97:0e:57:f1:74:23:
35:e4:f4:36:64:3f:ab:4f:9a:34:83:71:2d:d9:0f:
45:01:83:55:72:bf:f1:7a:18:ca:71:44:73:de:5a:
5f:90:00:fb:0e:67:1f:3c:f6:ab:20:17:7b:d1:ab:
b4:32:12:c2:0e:9d:41:78:90:5f:66:f2:ec:c6:99:
5d:f0:ed:10:7b:b6:13:d1:7e:5a:22:a9:29:94:c4:
9f:df:2a:85:f7:3b:e6:0a:e2:ba:12:76:8d:37:f3:
93:09:38:81:29:09:8a:9d:9f:b8:a6:e4:58:a5:99:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:75:DF:0D:1A:BE:42:14:61:DC:73:D9:20:CF:07:EE:99:FA:46:52
X509v3 Authority Key Identifier:
keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:03:02:a8:cc:1f:4e:ac:14:99:b3:97:7b:36:14:ba:3a:62:
ba:70:e4:67:20:58:ef:27:a2:4a:e7:a3:22:92:24:66:bf:72:
87:a3:75:56:38:cc:02:eb:bb:cf:aa:61:4d:9a:4c:81:f6:2f:
00:7b:7d:82:4a:9d:3e:fb:cb:4f:e2:de:bc:de:51:64:de:4f:
81:78:eb:19:69:65:52:f2:7c:80:ea:00:26:7e:ee:48:c6:c1:
84:ff:77:d1:0b:d7:a6:48:40:5b:64:07:ec:d4:54:83:55:2f:
8e:6e:28:94:58:99:5d:18:e2:34:f1:27:79:8d:38:7d:a7:44:
71:b8:c0:63:0e:2e:99:ef:7f:30:44:84:5a:a9:04:50:cf:d3:
89:9d:b3:82:c9:86:b9:01:db:77:87:eb:c5:52:68:c0:e0:8e:
a2:47:0b:98:fa:01:05:fd:90:89:f2:52:10:e4:0e:98:7d:ce:
dc:50:9c:9f:a0:aa:8a:7b:35:c8:c1:3f:e6:79:5c:01:03:d4:
53:91:e9:93:a3:8a:b4:77:fe:28:f8:80:28:49:a7:21:89:95:
fe:81:5c:30:aa:92:d7:9e:c5:cf:4e:9e:e1:1e:38:1b:a0:28:
30:9f:a9:11:69:5a:cc:7b:f4:8c:b3:5c:a0:f5:a7:0b:e8:6b:
31:23:d5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:09:28 2026 by rpki-client