Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
File: GifvY687wptvZBikmfAnZKQ4PLc.mft (raw, json)
Hash identifier: WbDAhPFUh3UCNxK/2ujncMofzn7ipNkUzg564Fu73m8=
Subject key identifier: 45:4F:0D:35:AF:B3:84:5A:3B:30:35:A9:C5:31:F9:0C:0E:14:52:1F
Authority key identifier: 1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
Certificate issuer: /CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Certificate serial: 01A0D94D858BDC43D039B5CA7FBCE782C0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
Manifest number: A3
Signing time: Fri 25 Sep 2026 16:02:11 +0000
Manifest this update: Fri 25 Sep 2026 16:02:11 +0000
Manifest next update: Sat 26 Sep 2026 16:02:11 +0000
Files and hashes: 1: GifvY687wptvZBikmfAnZKQ4PLc.crl (hash: fHMBRW/r40PaFb0m5ewzvziRrRitVe3Lz4BnpmTzSKU=)
2: UiMf7f5n42zTiPf7IakwvZXEbdI.asa (hash: k2dVGaFmamobcWJoIpqC3rtPtcdg0E13E2589Cu8GUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:85:8b:dc:43:d0:39:b5:ca:7f:bc:e7:82:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Validity
Not Before: Sep 25 16:02:11 2026 GMT
Not After : Sep 26 16:02:11 2026 GMT
Subject: CN=454f0d35afb3845a3b3035a9c531f90c0e14521f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:54:d8:a5:ad:92:eb:fb:1a:0c:5a:6f:c1:
cc:1a:ca:c2:f3:85:28:9b:02:33:8b:cc:9e:86:ff:
90:e5:a2:10:e9:51:82:82:e6:3a:83:db:61:19:f8:
d6:c2:e7:ba:92:6b:87:c7:71:db:76:29:2e:38:37:
57:b7:19:22:0d:9f:04:61:f7:01:77:1b:a8:be:e0:
6b:9b:5d:3f:58:a4:2f:89:96:32:fa:2f:58:4e:b5:
92:14:d0:ea:66:ba:54:a9:bd:d5:f2:39:94:24:9f:
ef:b8:2b:14:11:5d:37:47:ff:60:bc:8f:3f:d3:56:
33:71:d7:7b:22:39:23:cf:37:23:87:29:c5:09:e2:
88:ac:8a:0f:4d:33:e9:22:03:86:b0:39:04:17:e6:
15:fd:7c:97:38:be:81:67:28:6c:36:55:79:ef:7d:
1b:48:95:b7:5d:90:83:c4:69:8b:39:9c:69:9a:9a:
b5:0e:e5:79:29:0b:e9:46:53:87:07:75:59:ef:95:
0c:f4:48:c5:cb:05:9a:a5:40:c7:23:b0:49:31:c2:
5c:70:45:3f:6d:c2:b1:c4:15:d7:5a:b3:1b:c8:d9:
da:19:34:a1:da:4e:c9:97:3b:35:56:a2:5f:f5:31:
19:3d:65:8c:bf:17:dd:63:30:61:ef:24:ee:2c:1c:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:0D:35:AF:B3:84:5A:3B:30:35:A9:C5:31:F9:0C:0E:14:52:1F
X509v3 Authority Key Identifier:
keyid:1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:93:30:b5:d5:d6:a4:d5:0b:d6:29:85:d4:df:43:4e:48:a5:
d5:c8:45:05:53:0c:0b:6e:88:ae:c2:24:26:56:c4:28:36:1b:
63:8c:9c:29:58:99:d4:98:8b:48:db:8d:de:fe:cc:a8:26:6d:
6d:5d:9a:56:9e:7e:b6:2f:61:dd:d4:49:32:36:25:49:82:1b:
2f:04:51:a8:35:1b:94:fa:d2:03:a9:75:21:99:7a:89:69:21:
8c:a2:cb:ca:71:a8:f3:ea:25:4c:d8:2b:86:d6:de:0a:f6:3b:
8d:d9:b3:d8:32:ba:24:05:b1:4f:05:b2:dd:ab:13:8b:43:73:
f2:57:b2:3d:6c:79:20:a3:4c:43:27:6c:00:45:6f:46:9b:f4:
98:f1:d4:56:78:25:9a:5a:63:33:9b:69:f7:41:98:71:61:9e:
fc:9d:a2:2c:b1:f4:3c:04:2b:80:fd:99:82:48:92:a7:93:b4:
1b:a8:e6:b2:04:29:a1:17:c6:0b:61:9f:44:13:82:56:a9:46:
ce:bf:10:1f:e7:b6:fa:f4:c5:21:df:21:a1:f3:00:07:53:0c:
26:0b:76:b0:1b:96:3b:4b:12:be:68:a7:d8:b0:99:d5:cd:48:
e0:85:83:44:99:6d:2b:d3:e2:71:af:36:0e:1a:df:0f:16:44:
d1:16:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:02:53 2026 by rpki-client