Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
File: gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft (raw, json)
Hash identifier: lqHGClLIJlDGyFwAVuFJD4yW2vePvKC6V3w7PHjn//E=
Subject key identifier: FD:C8:6E:35:35:DA:8C:81:2D:52:8B:1A:C3:22:5D:24:E8:2B:D2:2D
Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
Certificate issuer: /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Certificate serial: 01A0CE23350011CCEFF8B5519EDCC3CD7F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
Manifest number: 0489
Signing time: Wed 23 Sep 2026 12:00:08 +0000
Manifest this update: Wed 23 Sep 2026 12:00:08 +0000
Manifest next update: Thu 24 Sep 2026 12:00:08 +0000
Files and hashes: 1: G2YFM4i4daVeiu-YZOfdZi2K_5s.roa (hash: fZ6PKIPyu2LKbUXBpMg9IVsm03a/5oYSb04pbpjHKZ8=)
2: gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl (hash: cGyzCSbg4/2UEqXfZ5X7N1cxD0b2vn/JwLnyEP61q7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:35:00:11:cc:ef:f8:b5:51:9e:dc:c3:cd:7f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Validity
Not Before: Sep 23 12:00:08 2026 GMT
Not After : Sep 24 12:00:08 2026 GMT
Subject: CN=fdc86e3535da8c812d528b1ac3225d24e82bd22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:4f:1d:5c:37:95:fe:95:91:99:29:86:a7:
ce:25:88:af:c1:0e:4d:63:7b:75:47:b7:69:c0:05:
c8:d5:7c:8a:68:32:62:38:05:e0:4d:d0:24:ee:8a:
f4:64:97:d5:2e:13:16:c5:2b:fb:81:9b:27:0e:4d:
d0:37:04:f4:97:15:82:ba:90:7a:43:b3:d2:54:76:
18:b0:dd:6a:1d:ad:96:e1:13:42:d2:7d:1d:76:e0:
b4:85:cf:b9:c4:36:4e:ff:64:ec:c5:1e:9c:6f:c0:
ce:2d:32:a3:d9:9d:84:b5:8d:3b:60:cc:de:f6:2d:
7b:ab:11:d2:53:f3:24:3e:95:f4:07:9d:03:49:b0:
82:ac:9b:ab:ad:d9:46:40:c3:5a:a6:63:36:0b:bf:
2c:a1:93:06:e7:dd:33:47:bb:0a:ad:bf:a4:f0:f9:
c3:e4:ed:b4:0a:e6:4d:d4:5e:0c:76:f9:13:79:0a:
46:72:5b:89:81:bc:3f:64:a1:c6:46:95:34:7b:2d:
8a:a5:e7:c9:ca:5d:a3:88:cb:07:ac:d0:e0:dc:ab:
1c:ed:75:90:ce:81:be:fc:96:cf:a0:a1:7a:1b:00:
9d:5c:41:85:bf:9a:40:2a:b4:41:76:d2:6b:6e:c9:
9b:43:c6:3d:fa:d4:57:a3:8d:ca:23:57:4b:af:89:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C8:6E:35:35:DA:8C:81:2D:52:8B:1A:C3:22:5D:24:E8:2B:D2:2D
X509v3 Authority Key Identifier:
keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f2:9f:fd:7c:a3:b7:18:c0:df:73:d1:90:ac:66:ea:b3:a2:
60:87:86:c3:a6:e6:2c:cd:b9:7a:1a:ac:22:37:b1:0e:00:30:
48:a2:0f:ae:63:58:05:80:be:85:0b:0b:e8:7d:5f:4c:08:04:
ee:f6:07:92:59:a2:d4:fa:ae:cd:b2:e6:98:33:21:3c:b6:dc:
68:8c:ee:98:a4:9b:ef:79:67:57:ca:81:e9:d4:b4:07:c6:96:
69:f9:80:66:6c:88:ca:bc:05:11:77:61:ee:93:31:1e:2d:f4:
5e:fa:f7:2a:72:20:c3:f3:c0:23:cc:32:33:92:b6:45:a1:58:
5e:dc:bc:6e:41:00:53:2e:53:f7:fb:ce:ce:20:f1:a7:36:98:
82:7a:e9:0a:5e:79:24:cb:ed:8a:26:9a:c2:a8:0a:b8:00:36:
4d:29:a2:e2:a5:84:ba:09:66:bf:37:7c:1d:b6:57:9c:77:f9:
78:76:9f:a1:19:db:c2:91:8b:75:54:2d:4f:22:0c:04:39:df:
bb:1f:3c:e2:7f:56:95:45:a5:3d:c7:56:41:c9:4d:63:46:77:
64:54:6a:3d:df:72:82:cd:12:e9:03:8c:5b:20:ec:b8:02:3d:
df:e2:35:0d:45:4c:05:79:0c:9e:88:86:d2:6f:c0:71:2e:e6:
4c:88:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:58:46 2026 by rpki-client