Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File: gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier: 8cS6RMzKqTNRxzXqnDucsTzkKh9Hvir8yituGcRT4Yw=
Subject key identifier: 23:8F:83:DD:65:20:D2:CC:2A:21:0D:12:A3:00:ED:66:CF:0A:47:DC
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer: /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial: 01A1859A5C108EE1A734BA9D2A5CF1C3EAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number: 1AD1
Signing time: Thu 29 Oct 2026 03:00:48 +0000
Manifest this update: Thu 29 Oct 2026 03:00:48 +0000
Manifest next update: Fri 30 Oct 2026 03:00:48 +0000
Files and hashes: 1: 17V0jzStQoCb_AQ6tvGaBLavGoM.roa (hash: xin2ArbEF/v8y8IFPHvAh0sLnYeJkUxdnoEAhdH3Knc=)
2: P3hxeobOBa_A0xJ0xlGfKnSdNVU.roa (hash: mHchc2zREYZlnOuz8p+co3qUvhS0H4UpE0PWUACDroc=)
3: fn22VffPk13JEZ43P7QzWAHfKUI.roa (hash: jLIrzazW1c/8A69YDLVF5OeAhGmqg599WqHWOZ8LrQc=)
4: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: sKIYFwF/0ru8/SaPCmJamCr4gcFjH6KX3cCTx9h8928=)
5: lvjXs-MIPCkpvks5PHkIN5Ickrg.roa (hash: rbC/bc1gnAJSprju+NYQ5fdLrBRf1LuhW2461H5788Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9a:5c:10:8e:e1:a7:34:ba:9d:2a:5c:f1:c3:ea:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
Validity
Not Before: Oct 29 03:00:48 2026 GMT
Not After : Oct 30 03:00:48 2026 GMT
Subject: CN=238f83dd6520d2cc2a210d12a300ed66cf0a47dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:51:39:04:46:23:c6:47:bc:15:69:e0:1a:
b0:39:5a:c9:7a:32:f6:00:72:2e:a4:9b:24:94:97:
c9:97:7a:eb:48:48:e6:41:06:63:f3:f7:d9:66:29:
76:e1:b2:d9:9c:21:ad:6b:4c:e5:ff:ef:d1:63:19:
0c:ba:87:61:05:c3:0d:5f:db:72:4b:87:8c:63:3d:
da:1f:d2:d6:60:d2:8d:a9:5b:38:42:9b:c4:e4:0a:
57:21:c1:20:c5:71:40:7d:3a:ce:f1:41:de:02:dc:
e3:f8:ed:fa:61:ca:f1:df:08:a5:c5:b2:ca:93:4d:
a9:9f:16:ee:ab:14:83:01:c3:9a:fa:cb:02:8d:3e:
18:c6:27:66:c0:3b:be:9e:17:e3:15:31:c8:95:75:
ad:15:65:45:df:81:79:f7:91:b7:63:de:58:3a:70:
49:1e:6b:d5:a6:ca:ad:3b:22:a3:15:ec:b6:ca:32:
ae:a4:78:f8:5e:1b:2f:61:a2:b3:8d:6a:ae:a8:44:
45:22:43:fc:ac:77:6d:59:12:15:65:79:d6:df:47:
65:f7:c8:1b:b5:87:f9:90:c9:bc:5a:6e:01:a6:52:
be:63:dc:d5:4c:1c:c1:6e:0e:a7:dc:8b:15:80:fc:
ed:96:9c:5c:94:8f:5c:4e:cd:3f:ce:ea:da:8e:99:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8F:83:DD:65:20:D2:CC:2A:21:0D:12:A3:00:ED:66:CF:0A:47:DC
X509v3 Authority Key Identifier:
keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3d:d8:96:73:51:60:69:45:7c:bf:ca:18:ff:a7:16:28:22:
6a:84:c4:f1:f7:6d:d3:a0:5e:f8:46:89:d1:9d:19:e8:09:c2:
d7:ce:8d:c1:fc:77:63:e4:01:77:8e:0b:36:86:21:7d:d4:78:
af:d4:31:f1:9c:7e:e5:15:b2:c8:6f:0e:4b:bf:7a:49:7d:05:
c3:42:05:e8:c9:81:d7:7d:aa:11:70:1e:e1:8d:28:99:a1:06:
64:e1:7c:75:d4:f7:69:d1:db:4a:14:5c:d4:1c:35:b6:35:c1:
bc:c9:32:69:9a:3c:57:bc:3e:0c:7d:1d:5c:00:1e:19:9a:ad:
b3:6a:4e:f7:0d:c4:e1:23:5d:56:94:b8:ab:2a:ca:6f:6f:6f:
e3:44:99:ab:98:9c:21:04:be:46:33:48:20:a4:a2:37:f3:3f:
22:fa:b3:6b:90:95:98:ec:2b:6b:26:48:d1:09:84:a2:67:2f:
10:d2:19:33:43:6e:c0:7f:ad:24:15:51:68:93:5f:d1:35:dc:
24:64:1c:ce:e7:82:a8:96:2c:ce:5b:90:14:c9:c9:f1:95:9b:
ae:94:3f:63:b0:96:1a:3a:a9:bf:f0:97:e3:c2:10:06:89:34:
3c:04:6e:4c:cc:af:6d:57:46:d5:0a:8f:50:5b:66:d0:bc:b1:
9a:91:5d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 07:27:55 2026 by rpki-client