Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: ecJ48NiQgAB6Wd5ksf+nZlKmxNEfvAhRYpeGub3lQ4U=
Subject key identifier: 9E:DC:BF:C4:5A:2D:A6:96:B0:A1:12:A5:1C:AE:27:90:01:DD:9E:5A
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 01A0E1E201DCE473B03979748A6572A01A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0FFA
Signing time: Sun 27 Sep 2026 08:01:20 +0000
Manifest this update: Sun 27 Sep 2026 08:01:20 +0000
Manifest next update: Mon 28 Sep 2026 08:01:20 +0000
Files and hashes: 1: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: RCbETsdEO4XymQMqM/Oq87gTEYT+FOwySShLCcYQ9iA=)
2: ioSKJKkF_4HM_F6u6RJnkLY1uWU.roa (hash: WbXNH1FTymiYyoPgw712is108gr5GM8N98thfxq0yjg=)
3: s7B9p4vTJAow4sBYhbnToQXwFKo.roa (hash: nHDCoe/MNgEdbVoOhEHnJFTP5BTnyS6pKwNLw3+w7aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:01:dc:e4:73:b0:39:79:74:8a:65:72:a0:1a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Sep 27 08:01:20 2026 GMT
Not After : Sep 28 08:01:20 2026 GMT
Subject: CN=9edcbfc45a2da696b0a112a51cae279001dd9e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:b4:20:e3:3c:1a:2f:67:b8:76:45:e9:0f:
f9:70:c8:dc:3d:aa:9e:2f:47:ef:0d:e3:fd:25:7c:
91:3c:51:ed:1d:8b:bc:46:35:4a:b8:16:31:61:32:
bd:d6:3e:97:92:cd:c6:6a:fa:29:6a:53:7e:45:c9:
52:42:c3:2f:07:21:fb:c3:3b:d3:7f:ef:cf:17:f9:
5e:ee:b8:56:54:ca:fc:44:9e:4d:ac:55:06:f4:f0:
18:ca:60:9c:7a:a7:30:8d:fb:30:96:7e:d5:47:41:
6f:94:7c:a9:53:2a:e3:b7:e1:d1:8d:86:fe:f5:8c:
91:e9:21:06:d6:88:68:f6:de:1b:25:7d:8a:82:aa:
2a:1a:ce:9b:ff:78:e1:dd:98:cc:b6:45:d1:7b:6f:
a1:af:c8:05:90:eb:9e:9c:bf:60:85:2d:32:56:de:
7f:6c:9c:5d:fe:a9:17:2a:2f:85:ec:97:04:f4:2f:
1a:7b:64:92:23:c5:b5:f5:b5:c6:0d:9d:83:55:77:
f8:59:b0:54:74:8f:16:95:71:92:96:aa:2c:c4:ba:
7f:24:8c:04:a2:9c:d7:6c:b6:90:05:ff:8a:b9:b9:
7f:2f:e6:10:ac:55:4f:cc:8a:fb:a7:59:f4:5c:40:
71:7f:9b:f4:1b:d2:50:e1:2a:56:1c:80:74:ea:e4:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DC:BF:C4:5A:2D:A6:96:B0:A1:12:A5:1C:AE:27:90:01:DD:9E:5A
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:09:da:20:dc:19:bc:f3:04:a4:57:e4:91:8e:76:0a:e0:b2:
5e:52:a1:79:36:25:6c:e0:49:68:67:03:b0:04:93:16:99:0b:
d0:3a:de:46:58:ce:94:3f:15:cc:a7:db:c0:51:32:04:eb:58:
a6:fb:66:ed:94:2e:03:e1:2b:1b:4e:ba:27:15:ea:d2:69:a3:
bc:99:d8:94:98:1b:00:a0:4f:be:2f:d0:a9:6f:15:4e:00:86:
a9:79:89:4e:82:e5:80:99:95:0e:97:9d:35:2d:d0:b4:28:44:
24:ad:d2:90:cf:1f:25:a3:ba:2e:3b:60:5c:b5:27:19:9b:a5:
1d:be:23:10:7d:f8:68:92:b4:62:d9:81:1d:fc:05:22:0c:9c:
dc:64:d1:f4:63:57:84:6e:f1:42:41:86:36:63:a5:06:a5:19:
32:37:d5:a0:b5:04:82:81:2f:30:b6:e5:69:58:5e:8a:ef:a8:
76:06:14:48:b2:45:ed:ba:b4:27:05:db:7d:cf:6e:e2:2e:45:
06:a3:23:65:04:e1:55:54:a9:98:68:10:92:f7:7e:b5:86:00:
6e:c0:2a:81:c7:b1:37:87:94:74:a9:cb:76:ef:8f:ba:22:35:
c2:fa:b4:f8:ae:7c:ef:92:b9:33:b3:cb:94:a4:49:15:82:c9:
9a:b4:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:09:18 2026 by rpki-client