Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier: ARMdPSdQiuEWqW2ji+1Io0m9SomXfrH8E9hb0WrH8tk=
Subject key identifier: 13:BB:26:A5:53:C3:77:A1:11:0A:66:66:39:EE:06:71:B5:04:64:16
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 01A0DCBB74D9F18EF26A5F2142F3104B771E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number: 1A7A
Signing time: Sat 26 Sep 2026 08:01:07 +0000
Manifest this update: Sat 26 Sep 2026 08:01:07 +0000
Manifest next update: Sun 27 Sep 2026 08:01:07 +0000
Files and hashes: 1: BdSuQVDQN0VvLBhw0-t0KDo8T2w.roa (hash: Adx+9mj7hvvMFLBS193scbpgC/haFVM6A5WGrKZ0rkc=)
2: RB3MCZgDbeMI6s-D2_JUTZ_rqbY.roa (hash: JrGHevSUwFCGVeEzLDEb8HtCJMbEOdcnxPcVOLqyOAc=)
3: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: ETuBVw8KIGYq6zI3C+xkoaXCp4QGT+Gzd/GRo2azYM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:74:d9:f1:8e:f2:6a:5f:21:42:f3:10:4b:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Sep 26 08:01:07 2026 GMT
Not After : Sep 27 08:01:07 2026 GMT
Subject: CN=13bb26a553c377a1110a666639ee0671b5046416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:c3:46:60:ce:b3:31:51:1a:dd:4c:e1:f3:
00:43:01:82:32:a3:5f:3e:6c:58:c6:bc:f6:00:ee:
5e:02:ff:66:79:6b:5a:b5:5b:ab:b4:2c:8c:bb:49:
00:af:5f:f0:2b:98:76:7a:2d:1e:ab:65:63:68:21:
8e:b6:b6:4a:af:07:11:5a:5d:62:a6:ae:db:c5:8f:
7e:3d:ab:97:d1:3b:1c:0f:fe:ab:1d:6c:e3:99:24:
dd:76:8f:93:43:e6:ef:c5:25:c1:75:ed:44:cc:99:
4a:15:08:4d:a6:94:62:bc:38:c3:ed:1c:81:c1:06:
46:93:08:03:73:ee:b0:5f:ff:ca:6b:27:c0:39:9d:
14:b4:bd:ae:ae:be:24:9f:04:a0:09:d0:ad:b2:ca:
ef:f7:c3:91:e3:5e:74:71:5c:3c:7f:3e:98:72:50:
9e:ce:e6:92:cd:ba:48:ff:c7:c0:55:a5:f4:6b:09:
b3:75:4d:9b:75:ec:dd:66:d3:50:b7:62:3d:c6:ba:
86:e5:ed:f6:e4:0c:a6:e5:53:bb:bf:58:1d:89:84:
58:17:fe:25:69:d8:2b:4b:46:61:b1:c8:ed:e9:41:
be:f7:b1:03:a8:74:0c:3d:84:b2:a4:1f:36:51:03:
bd:14:46:1a:0f:74:bd:e2:a4:8b:f4:e8:8b:a9:b9:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BB:26:A5:53:C3:77:A1:11:0A:66:66:39:EE:06:71:B5:04:64:16
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2c:44:a5:19:52:50:16:1f:3a:77:d3:47:18:5c:a9:ed:f2:
af:26:4f:29:9b:e6:63:9d:85:36:9d:19:9d:3c:36:b8:53:30:
ad:12:4e:72:a2:65:4e:a4:d3:b7:ad:1d:01:27:53:0f:6b:f9:
06:a1:67:86:85:d0:76:aa:98:fb:a5:5f:13:3b:2d:81:0e:ee:
5c:46:6b:a2:8d:35:6d:c4:40:fa:d6:28:45:f9:58:9a:df:9d:
1e:1a:c9:9b:fb:5a:21:fb:90:88:ed:11:72:e6:71:3f:aa:62:
59:f0:a5:98:a8:47:90:3a:4a:64:4f:4c:bb:1c:be:88:65:84:
f3:89:0b:85:33:56:04:53:56:ec:a5:ec:d0:2f:7e:01:b0:52:
18:c3:50:3c:d7:57:b7:9f:13:76:b2:6b:06:93:7d:7b:6e:f1:
68:4b:35:2c:f0:05:ff:75:f8:17:89:9d:d6:c3:5c:16:36:f8:
6a:72:73:fb:87:33:bf:34:a0:8b:c2:e2:c9:83:45:6c:3e:94:
5a:87:88:15:c7:53:ad:9f:21:c8:da:e9:eb:e1:60:57:5f:23:
48:f8:9a:a3:68:f4:24:b0:56:11:f9:af:41:84:b0:45:f8:8f:
ab:0e:0d:58:87:74:93:bd:88:3b:74:21:5a:5b:37:6b:e8:32:
47:d1:f1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:52:18 2026 by rpki-client