Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: azI/9ZbeTdC9cNIiU4/vciN5+VBPU8nPkpNjvat8EDk=
Subject key identifier: 17:10:0A:2D:B2:85:91:1C:0C:02:DF:7C:BA:44:28:ED:B0:A5:99:52
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 01A0E8536AF4E6389A3D39E8A1831C45F8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0C5D
Signing time: Mon 28 Sep 2026 14:02:56 +0000
Manifest this update: Mon 28 Sep 2026 14:02:56 +0000
Manifest next update: Tue 29 Sep 2026 14:02:56 +0000
Files and hashes: 1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: dLdDUlch6JG9VO+BAZ1F2ibOgw3fvUqaAWUypuHaK/k=)
3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:6a:f4:e6:38:9a:3d:39:e8:a1:83:1c:45:f8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Sep 28 14:02:56 2026 GMT
Not After : Sep 29 14:02:56 2026 GMT
Subject: CN=17100a2db285911c0c02df7cba4428edb0a59952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:1f:aa:f7:7a:24:9d:38:ae:83:7a:80:cc:
be:eb:25:dd:3e:f7:2e:5a:c6:2b:71:02:36:71:1a:
2b:7e:51:72:14:4b:2a:c1:ca:a5:44:e9:f2:0b:68:
5c:cb:5e:a8:89:36:d0:b4:d1:48:50:b5:26:e8:13:
81:62:18:04:fe:a9:b7:36:fb:37:7d:8e:79:8d:f3:
e3:b8:8c:6e:ec:cb:0c:9d:5d:a8:31:98:11:4e:39:
f8:3f:4f:dc:ca:2c:0f:fd:be:9c:dd:e6:f2:46:e9:
87:b8:44:fc:cf:2f:84:19:ed:31:9b:d4:1f:f1:bb:
f3:1e:80:c5:33:d1:4d:ef:19:e1:73:d2:87:32:cb:
a4:83:9b:bf:31:25:de:95:14:14:5d:3c:58:6b:48:
22:97:2d:86:79:d4:0d:f5:d2:fc:65:9c:0d:50:9a:
f1:54:e9:7d:37:b1:f2:d9:5d:a5:ef:c2:ce:7b:dc:
01:a8:46:e9:c4:4f:e9:7b:92:a0:c3:80:35:54:dd:
0b:74:c3:4a:ae:7e:79:dc:3c:7a:a3:67:4e:a3:bf:
88:8a:e2:51:c5:e4:59:b3:08:0a:72:de:1c:62:0c:
9b:4c:69:cd:4b:9b:13:5d:a9:31:87:2e:26:d9:3d:
f3:1e:61:6c:b6:59:74:3e:64:8a:d5:36:70:f7:ea:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:10:0A:2D:B2:85:91:1C:0C:02:DF:7C:BA:44:28:ED:B0:A5:99:52
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dc:dc:ff:58:c3:9e:e3:04:6b:6c:62:1c:d5:53:ee:62:04:
ee:5b:08:00:82:d3:27:f2:d4:35:b1:08:f0:07:4a:ab:fc:5f:
aa:4e:49:64:9d:dc:95:8f:8d:ee:73:ad:8e:da:bc:d9:9b:21:
65:f9:af:4c:fd:ec:68:47:ab:c5:34:50:01:ac:2d:f5:6b:4c:
22:4a:cb:9f:62:6a:c6:54:57:37:f3:4a:f6:e8:68:6f:da:fd:
16:66:07:41:9b:61:cf:72:f7:9c:e4:72:2a:36:71:fc:9c:3f:
7b:6b:b5:76:6d:f1:8c:70:d9:8f:e1:7b:4a:c8:21:f9:ab:0e:
af:04:88:1e:8c:68:8b:6a:b7:a9:43:fe:20:a9:f3:11:a7:ef:
8e:9a:71:b4:a0:1f:07:4b:ca:20:2c:82:e0:1f:df:1e:7a:23:
dc:7b:46:21:bb:37:0a:0e:2c:2c:16:d4:5e:0e:12:60:71:eb:
5d:e2:78:03:04:f7:4e:7f:a4:ec:cf:e8:49:4c:01:f8:4f:d2:
4a:2b:dd:d0:9e:89:6e:95:39:98:4f:6e:e9:e4:43:1c:5d:31:
50:07:82:69:a7:f4:9a:27:c0:72:4b:9a:1b:d8:f7:50:f1:53:
ae:e7:82:8f:b2:8f:23:a6:1d:1c:03:03:d0:bd:c8:5c:75:69:
99:36:46:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:49:11 2026 by rpki-client