Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
File: GifvY687wptvZBikmfAnZKQ4PLc.mft (raw, json)
Hash identifier: UgwaxJf64T6k2f14FlYW4p5yhE54MiipsTT7G9/xdNk=
Subject key identifier: BB:02:DC:73:39:CB:28:E5:CE:40:5D:C1:59:FF:D3:61:85:4F:72:36
Authority key identifier: 1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
Certificate issuer: /CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Certificate serial: 01A1DA947E25638BFCB09CD589942376F9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
Manifest number: 012A
Signing time: Sat 14 Nov 2026 15:02:07 +0000
Manifest this update: Sat 14 Nov 2026 15:02:07 +0000
Manifest next update: Sun 15 Nov 2026 15:02:07 +0000
Files and hashes: 1: GifvY687wptvZBikmfAnZKQ4PLc.crl (hash: TntWpv5/xDBAEcfEeD8V8CEq3xWS0P78qK1tQ213YmY=)
2: jasqyusTyG-UyVTvUiFxovakIMA.asa (hash: Bvg9V+XXYmQ0mBfPNmI16zoLSVqyVKXkkbwL0JWyFM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:94:7e:25:63:8b:fc:b0:9c:d5:89:94:23:76:f9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Validity
Not Before: Nov 14 15:02:07 2026 GMT
Not After : Nov 15 15:02:07 2026 GMT
Subject: CN=bb02dc7339cb28e5ce405dc159ffd361854f7236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:40:9e:a0:18:e9:aa:b0:53:ce:6a:50:d3:
c8:ac:b0:8b:ee:a5:1d:ab:f0:91:fc:c7:e0:14:60:
c7:fc:89:17:ef:e2:9c:4b:b9:f0:98:27:83:f2:50:
65:53:9b:68:fe:fd:fc:72:69:ee:dd:45:37:aa:e9:
45:f9:71:73:79:ff:2b:a3:a9:ef:e8:b2:75:ea:eb:
e9:6c:48:67:d7:28:3c:8d:d2:e3:6a:94:6e:1a:00:
56:68:00:fe:a1:fc:71:8c:7b:54:1c:62:87:fc:45:
63:92:1d:32:1e:26:8c:59:ab:9b:1e:7f:82:36:c9:
2d:03:c3:2f:0f:cd:8a:71:ee:75:35:80:32:11:b3:
e5:32:e9:68:c3:0b:6f:77:5c:0d:d7:dc:94:ea:92:
a6:df:b5:3c:e7:d4:7c:63:63:01:50:83:c2:99:e5:
ef:70:9f:7c:9a:69:b3:04:02:8e:a6:a6:e9:0c:9b:
fd:55:6a:75:22:2a:cc:57:f5:19:ec:24:7d:e8:79:
1b:2d:63:35:9e:51:ff:e2:b4:93:38:d1:d0:b9:1d:
a9:df:6c:a7:9e:ae:d0:70:bc:bf:42:cc:15:27:50:
f7:cd:1d:7e:75:f6:81:77:18:4e:c8:92:b2:26:c9:
28:b6:b3:5b:38:f6:8c:4b:de:a8:c9:75:83:c9:c0:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:02:DC:73:39:CB:28:E5:CE:40:5D:C1:59:FF:D3:61:85:4F:72:36
X509v3 Authority Key Identifier:
keyid:1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1c:1b:ce:14:b4:98:a1:89:72:4c:11:f0:7b:42:1e:b1:1e:
56:10:bd:00:9c:3a:f6:5f:58:c0:a8:38:b2:65:b0:44:60:a9:
26:39:c4:90:69:9e:8f:f7:f5:3b:7a:f9:c9:6f:93:9b:12:be:
bd:b5:06:ed:0e:62:ef:b0:fb:c5:92:6d:89:a1:52:8e:58:e0:
5c:4a:51:f2:9d:59:81:07:82:48:29:59:60:3b:a7:19:99:4d:
1d:8f:07:88:d7:c3:a5:88:b5:13:3c:74:d9:95:e4:7c:eb:5a:
32:ab:ff:73:3b:b0:ba:6b:49:67:1f:b2:f9:56:08:ac:96:c8:
4b:2e:14:13:1c:0f:59:c7:57:ba:cb:08:0d:2b:c9:59:a0:8f:
ca:f5:ef:6a:53:6e:5a:a9:a5:99:58:ed:56:80:19:41:4b:72:
59:57:e8:8f:9e:c1:52:6f:1a:e1:fd:4f:78:83:05:83:60:a5:
8e:dd:9a:ca:59:6f:42:92:8e:71:18:d8:03:22:a2:30:54:d1:
6b:96:67:0d:70:c6:2e:8d:c1:20:9b:7b:da:51:ac:94:f4:79:
28:e7:d4:e6:d0:60:2d:32:d7:9f:cc:c9:22:f9:6b:ec:ec:93:
dd:c0:2d:2c:76:98:17:cf:67:bf:56:ca:d7:e0:fe:a7:2f:82:
26:03:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:39:37 2026 by rpki-client