Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
File: gFOrw9SfVluUh47Y8iDOMn-XSjI.mft (raw, json)
Hash identifier: DrT+7qPQH4rJ7Y+f1LGDmWCDNLy4WiJq5ewLm6znK8A=
Subject key identifier: BF:54:F6:CA:4B:A0:E1:24:A4:35:52:92:C5:BD:4A:97:0F:08:35:63
Authority key identifier: 80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
Certificate issuer: /CN=8053abc3d49f565b94878ed8f220ce327f974a32
Certificate serial: 01A157AF8EC6B55D05C5A76FB7F89A18DD8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
Manifest number: 01AF
Signing time: Tue 20 Oct 2026 05:01:25 +0000
Manifest this update: Tue 20 Oct 2026 05:01:25 +0000
Manifest next update: Wed 21 Oct 2026 05:01:25 +0000
Files and hashes: 1: GPJ5YibQX7Qs5zXj8y25gwD4O7o.roa (hash: dw68P8crMQR+t7pqyZ2DtV9eQd5KOVoGJFGq3g9A+8E=)
2: _5dlpHFSfnZB5fPESdwe0vcQoK0.roa (hash: 648yr+Yw2hgriwVmDfKLpfCh/5rjlF0ILGcl2PNzoO4=)
3: gFOrw9SfVluUh47Y8iDOMn-XSjI.crl (hash: N0Z9r7ru43RtDtiKK4xaa/GpqIpgJsIDpndeROfAfMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:af:8e:c6:b5:5d:05:c5:a7:6f:b7:f8:9a:18:dd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053abc3d49f565b94878ed8f220ce327f974a32
Validity
Not Before: Oct 20 05:01:25 2026 GMT
Not After : Oct 21 05:01:25 2026 GMT
Subject: CN=bf54f6ca4ba0e124a4355292c5bd4a970f083563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:c9:42:b0:63:49:e8:49:07:16:6b:61:18:
b2:52:df:0c:2a:9e:cc:6d:e0:d0:04:96:b0:35:18:
7a:37:2b:1f:15:35:04:13:59:84:b6:8a:99:c4:f5:
52:da:c0:9b:6d:07:ad:52:49:dd:dc:53:1c:52:56:
93:89:bc:74:c5:86:f7:a4:cc:3e:b3:dd:6e:35:27:
30:92:25:27:42:92:43:cf:16:11:b5:1d:2f:50:05:
67:84:ac:9f:dd:b2:b8:b2:4a:c0:73:41:f7:be:22:
07:a8:92:21:dc:68:ee:ea:35:68:38:f0:a4:a2:f8:
c9:0e:6c:34:b6:aa:fe:bb:a2:e7:18:04:b6:da:ec:
c1:6b:26:8c:55:54:96:d8:42:5d:a4:57:04:bf:04:
14:d7:bd:c4:ee:0a:0a:31:a3:56:dd:c3:f3:48:1b:
4d:52:e5:16:46:3e:4d:09:ae:27:05:34:5e:27:02:
66:5c:db:e3:f7:88:8d:8d:db:a4:04:b5:91:19:5d:
75:0b:74:09:c0:ca:5e:35:86:6e:e1:16:03:87:01:
32:aa:63:db:b3:b6:cd:ad:db:85:e3:f4:c2:3c:81:
5a:bd:68:01:4a:96:94:2d:3f:9e:b8:d3:9a:0e:35:
27:58:f9:af:37:60:ee:e4:fb:d7:c4:3e:d4:aa:5e:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:54:F6:CA:4B:A0:E1:24:A4:35:52:92:C5:BD:4A:97:0F:08:35:63
X509v3 Authority Key Identifier:
keyid:80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:06:30:12:27:65:53:0c:f7:e0:11:35:6e:4c:2d:ae:0a:25:
34:c6:63:cf:b2:e2:08:5b:2e:c8:c5:1c:7f:56:ad:5c:00:88:
08:aa:1a:79:da:eb:02:d6:29:f0:66:de:da:2f:03:e3:34:1c:
6d:9f:a1:02:b8:16:34:33:77:b7:6c:5d:62:09:bc:b5:51:ca:
5a:a4:25:82:7f:77:f7:74:f3:b4:f1:d3:ca:0a:d0:e5:3f:98:
06:c1:33:2a:29:6e:84:5a:df:88:9a:4b:e9:06:da:c5:58:47:
b3:e0:53:78:0b:79:30:2e:d7:89:c5:a7:3c:14:ce:42:42:98:
a5:44:5b:e1:11:41:64:60:00:e7:70:f2:2a:fb:70:6b:14:51:
3a:eb:eb:27:e5:18:df:f0:25:92:ec:09:85:4b:e3:27:4f:c3:
28:7b:b1:9f:65:3f:51:57:c2:27:ef:50:84:55:6b:cd:46:ec:
5c:5f:c8:8e:32:0c:1d:fb:90:94:87:72:cb:78:f5:e6:1f:37:
e9:e3:1f:c8:7c:83:41:f6:78:4e:f1:83:59:6b:5b:8e:d7:62:
a9:36:d4:0a:9a:1f:1d:1a:c1:e6:c9:b6:c0:54:90:d4:7a:b7:
f1:a0:db:02:46:5e:f5:0f:bc:8f:6f:9c:53:2e:ab:50:b1:6e:
95:f1:e4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 10:11:17 2026 by rpki-client