Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: LiHxSqeugQH3z/up9dhKCcka7z0rSR5w1w6SiG32mkw=
Subject key identifier: 19:B1:8B:12:37:B1:91:E0:1C:54:E3:7D:8E:2F:F0:41:AC:D1:65:52
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 01A0EB8A231A95F093AEC315C48E67B3687B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0FFF
Signing time: Tue 29 Sep 2026 05:01:33 +0000
Manifest this update: Tue 29 Sep 2026 05:01:33 +0000
Manifest next update: Wed 30 Sep 2026 05:01:33 +0000
Files and hashes: 1: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: z6Utb2PMP0j1O/HRSvb1mOvllJPeBXexBvk69ItKVDQ=)
2: ioSKJKkF_4HM_F6u6RJnkLY1uWU.roa (hash: WbXNH1FTymiYyoPgw712is108gr5GM8N98thfxq0yjg=)
3: s7B9p4vTJAow4sBYhbnToQXwFKo.roa (hash: nHDCoe/MNgEdbVoOhEHnJFTP5BTnyS6pKwNLw3+w7aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:23:1a:95:f0:93:ae:c3:15:c4:8e:67:b3:68:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Sep 29 05:01:33 2026 GMT
Not After : Sep 30 05:01:33 2026 GMT
Subject: CN=19b18b1237b191e01c54e37d8e2ff041acd16552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:b6:a6:cc:19:57:cc:f3:0e:74:bf:7e:c2:
8e:e1:5d:87:ed:b3:9a:ad:d6:4c:6e:12:02:4c:5d:
09:76:82:a1:82:a1:c1:bd:9e:db:d7:6b:a2:8e:cd:
c2:f3:44:b0:2e:44:62:7a:13:63:c4:c0:b4:bf:c1:
bc:e2:ae:f6:ff:4c:84:8a:d6:9d:fa:ed:8f:02:ad:
14:f0:c5:a4:e7:82:ef:3c:c3:bc:c5:30:39:99:8d:
07:c8:b7:e2:07:f0:df:51:04:af:94:c4:fe:d9:87:
87:ea:f9:38:f3:a4:a6:9c:30:61:76:c9:d2:90:9c:
f0:ae:df:24:28:41:fc:61:c5:59:88:9f:21:01:02:
ba:2e:ee:20:4e:47:43:75:af:bf:ee:07:3b:cd:86:
d7:75:d7:6e:35:7e:63:b3:42:7a:35:a8:38:41:af:
f1:26:a0:fe:1f:de:cd:4f:ba:78:a8:20:4a:a2:5b:
ad:a6:16:ff:a5:69:57:e2:f6:ec:a8:5f:16:76:34:
17:67:89:dc:99:27:9a:3c:eb:47:0b:20:1f:b1:10:
69:f8:4e:06:d6:75:a0:f0:21:ae:fa:18:34:af:65:
5d:dd:d2:d4:01:b5:80:38:99:70:e0:56:90:e2:e4:
f8:0b:02:b1:99:3e:d9:8f:ca:1b:02:24:7c:d7:9c:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B1:8B:12:37:B1:91:E0:1C:54:E3:7D:8E:2F:F0:41:AC:D1:65:52
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:de:5b:73:ca:00:5e:63:b1:da:05:6a:ca:c4:79:7b:4a:7c:
3c:53:23:f0:23:e5:ea:d9:70:14:05:20:12:77:a5:24:7d:7f:
f4:d9:2f:ed:06:43:ed:ff:bf:53:0c:80:ba:7d:1e:d0:61:ef:
6d:3a:b5:fe:47:d2:f4:0e:08:dd:e6:e2:a6:09:ce:a9:0f:44:
39:2e:7c:52:a0:09:34:29:27:f5:7a:13:87:87:2a:03:60:36:
76:2e:b2:91:51:86:59:42:66:8f:c3:ee:d8:37:15:5a:8b:21:
9e:02:01:0f:85:9c:69:a0:0d:73:08:c0:07:7b:55:de:a8:31:
29:4a:e1:f0:4f:e9:e6:3f:ca:fc:8e:05:a0:1b:66:5d:53:fa:
10:ca:d1:1f:09:f6:3a:58:73:fe:82:0d:a6:6a:01:05:70:82:
ee:71:6b:11:4c:ca:73:02:9b:14:25:cb:23:ba:da:21:2a:4b:
bd:6c:57:ed:ed:76:88:02:1b:0d:ea:fe:50:c7:1b:9e:e9:ce:
83:2a:73:79:a9:18:ed:0a:a8:61:47:7c:ed:50:14:df:37:71:
31:88:93:61:b1:a8:a1:1e:af:e6:b6:cf:98:06:20:53:9d:28:
7e:b8:9c:fc:82:fa:68:b7:38:de:18:00:40:26:fc:07:ca:ec:
58:32:74:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:15:37 2026 by rpki-client