Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
File: gtiJtzM2c4evJNBuf5IeHrwOjMA.mft (raw, json)
Hash identifier: Be8ATXTXtlbdhu0RM/x24JmV+3RNe2nkdf4ypudmBaE=
Subject key identifier: 86:2B:36:C7:C8:9A:4E:BC:4E:67:0C:E9:3E:BC:62:E2:21:3C:14:64
Authority key identifier: 82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
Certificate issuer: /CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Certificate serial: 01A0E1749EFCB942C1AC395A40BBEE2F147A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:51 +0000
Manifest this update: Sun 27 Sep 2026 06:01:51 +0000
Manifest next update: Mon 28 Sep 2026 06:01:51 +0000
Files and hashes: 1: Ivo9foptlHgZGm6u5gb6QwW3XyE.roa (hash: 2DKjAU7c2CAk3rfklrUELipPt0YMxIA0kvbW1SiZbks=)
2: bd0fr_kRPnaKLvLN9ZpO5e3Kz2I.roa (hash: WDxxU0O54RTfygWfLBj7mncB1ZZMMpBFwyQajkCAytc=)
3: gtiJtzM2c4evJNBuf5IeHrwOjMA.crl (hash: T2pwsWEQj0m4ciFuXZOQs3Na0yUYaHmRwhHm989qRdQ=)
4: i_5GgFY65mhct5XMfGA2cRGx7lE.roa (hash: u8f3lfAClBezvakZmVD5y6jZdKYCu72g+x8pASRVo2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:9e:fc:b9:42:c1:ac:39:5a:40:bb:ee:2f:14:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Validity
Not Before: Sep 27 06:01:51 2026 GMT
Not After : Sep 28 06:01:51 2026 GMT
Subject: CN=862b36c7c89a4ebc4e670ce93ebc62e2213c1464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:f9:2b:ff:f4:c5:01:c4:7e:db:b2:a2:c3:
9c:72:8e:10:55:8c:ed:dd:af:9f:ae:16:1a:d0:a1:
d8:6a:db:7a:a3:37:00:d7:0e:72:9e:3c:ba:49:39:
61:e2:6d:cf:93:53:73:64:3f:bd:d2:3a:44:61:91:
d2:e5:ad:c3:0e:01:0b:25:a9:7b:d9:97:7f:a9:80:
84:ef:ce:9d:f2:61:68:42:fe:4c:1b:a5:f0:06:d8:
45:72:9a:25:bd:1d:d5:26:f0:99:f1:0a:49:4e:2b:
25:f9:61:10:15:d2:1b:bd:4f:f1:0e:b3:bd:ee:d9:
8c:25:26:52:ca:c0:65:8a:15:14:4f:c2:f6:6a:b2:
a6:7f:74:07:6b:30:37:64:58:ae:a4:2b:08:1a:20:
2f:d0:ff:c2:27:a5:df:da:ee:05:96:ba:30:eb:0a:
80:5e:39:21:4b:f5:06:c2:1d:b4:97:f4:42:0b:b5:
60:2a:fb:cf:cb:f0:69:42:81:6b:a5:37:b2:9a:6a:
8d:ad:d1:f8:7f:a4:43:e0:4a:bb:d2:94:71:45:da:
d6:2f:9f:02:a1:91:63:88:57:d5:50:a6:33:2c:56:
b5:90:29:c3:aa:2b:e7:51:f7:16:09:c4:83:38:bd:
a3:2f:7c:7e:71:fc:2e:4f:b5:2b:c3:45:26:bd:9c:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2B:36:C7:C8:9A:4E:BC:4E:67:0C:E9:3E:BC:62:E2:21:3C:14:64
X509v3 Authority Key Identifier:
keyid:82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ef:5e:b3:f7:6f:19:81:9a:15:bd:94:76:ed:ee:3f:da:81:
98:46:db:c5:8f:fb:16:ce:06:5d:13:5b:2e:62:a2:d4:68:9c:
f7:f5:e3:60:f4:1b:2f:7a:c3:de:75:c4:cc:92:20:db:cb:d0:
72:fb:58:d8:d0:02:00:b1:6c:d4:96:db:7a:d7:48:d8:26:50:
03:42:3f:67:24:20:40:78:f2:da:14:85:39:83:4d:69:b3:79:
d2:45:82:d4:58:98:07:2e:a7:d0:b4:cd:87:ea:9c:c9:91:b1:
49:57:b3:5a:2c:5b:28:17:a2:89:ff:16:e4:e5:23:86:a7:c7:
8b:a3:b8:63:c7:6c:6c:f4:9f:a2:8f:0f:04:54:b1:09:f9:53:
28:70:72:f5:0a:87:ff:1d:35:73:ca:9c:e1:d3:67:2b:39:80:
c3:42:1d:38:60:20:65:25:48:14:a6:13:85:b7:c4:8d:5b:bb:
ae:26:98:77:43:8b:f4:50:ae:07:ee:20:ef:de:c4:a4:d1:52:
34:3d:dd:3b:80:53:8c:ea:8c:95:ed:6e:94:c9:58:cd:72:90:
89:d2:d0:91:ae:35:23:c1:e5:32:e0:f6:c0:cd:0d:8e:d6:24:
eb:4b:8c:77:41:88:23:c2:3f:da:ad:9e:cd:5b:38:69:f9:af:
04:28:90:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:10:49 2026 by rpki-client