Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
File: GifvY687wptvZBikmfAnZKQ4PLc.mft (raw, json)
Hash identifier: Hywe9J/hcLpiWH+OhOp6hzd+3vYoK8MpGqm8uYE9RSk=
Subject key identifier: 80:5D:0D:8B:6E:C7:56:23:F5:7D:FD:CA:C9:16:BF:84:F5:ED:43:D1
Authority key identifier: 1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
Certificate issuer: /CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Certificate serial: 01A17DE1F6C6B0509E539E237270756282BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
Manifest number: FA
Signing time: Tue 27 Oct 2026 15:02:03 +0000
Manifest this update: Tue 27 Oct 2026 15:02:03 +0000
Manifest next update: Wed 28 Oct 2026 15:02:03 +0000
Files and hashes: 1: GifvY687wptvZBikmfAnZKQ4PLc.crl (hash: Y1nwlxqG8nd8yimZWspXMVuFc7sXXQC4uQaTtFzx0sM=)
2: jasqyusTyG-UyVTvUiFxovakIMA.asa (hash: Bvg9V+XXYmQ0mBfPNmI16zoLSVqyVKXkkbwL0JWyFM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:f6:c6:b0:50:9e:53:9e:23:72:70:75:62:82:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Validity
Not Before: Oct 27 15:02:03 2026 GMT
Not After : Oct 28 15:02:03 2026 GMT
Subject: CN=805d0d8b6ec75623f57dfdcac916bf84f5ed43d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:a7:9e:83:88:7f:cc:07:fd:c5:53:eb:6b:
29:3d:2f:f1:d5:83:88:5c:55:fc:81:62:31:a2:33:
c8:95:ff:3d:97:9a:b1:57:5f:cf:e0:0c:13:08:af:
13:84:66:33:3a:7f:80:8a:dd:ae:18:5c:a8:c7:ac:
5b:9a:e9:07:65:d0:b5:b5:a8:d3:5e:7c:1e:6d:b2:
1d:b1:b1:ae:c2:82:72:94:73:07:b0:c3:10:90:9a:
97:39:56:9b:4a:3a:44:18:59:91:54:c1:ce:d4:7f:
54:10:2e:b5:d2:13:0e:24:eb:1a:e5:41:b5:4c:34:
75:6a:f1:e3:5d:d2:29:31:4a:ac:03:ff:5f:ee:f3:
48:df:ff:f8:6b:ba:c9:c1:d4:96:9d:81:fb:d2:f5:
57:29:13:20:78:2d:3f:c1:02:f7:e5:5b:8a:ef:62:
d8:66:dd:fd:6d:d5:09:ca:1d:82:e4:e0:a7:25:12:
99:1c:07:6c:97:dc:27:5a:ef:43:bc:8b:55:f8:ba:
ab:a0:1a:d0:36:31:28:5f:22:1e:53:69:b8:6e:5a:
3c:2d:11:a4:32:d4:ff:9b:04:3c:9f:62:71:ef:1e:
6b:fb:f9:70:e0:d8:f8:5a:5e:4f:59:5c:5f:50:9c:
b1:ff:f4:12:57:12:b0:09:c8:f5:97:9f:68:b3:8b:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5D:0D:8B:6E:C7:56:23:F5:7D:FD:CA:C9:16:BF:84:F5:ED:43:D1
X509v3 Authority Key Identifier:
keyid:1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:36:8a:0e:f7:b1:d1:9f:09:08:2d:42:14:1a:b0:c3:0e:38:
80:e2:fa:6e:bf:3e:a2:37:0f:e4:5c:7a:6f:a6:6d:60:7c:f8:
0b:fb:ad:00:69:98:8d:d7:8d:42:2f:5a:59:eb:8a:1c:c8:e6:
c0:b7:10:e4:bd:ab:bf:5a:55:d5:25:25:94:f0:72:9a:ad:c2:
b6:06:48:35:51:08:4e:45:de:c7:94:e3:e0:03:3a:a0:7b:12:
40:a8:04:ab:f6:a9:33:d3:b6:e9:b9:94:63:b2:4e:9d:28:1b:
81:58:3e:c2:ec:84:4c:3f:a1:76:7b:b9:23:61:95:c5:e6:a9:
7c:f3:62:24:d4:bd:7b:a8:2a:4a:bf:de:52:75:7f:0b:3a:c8:
9f:24:8e:e8:8c:0c:0e:66:08:52:f5:95:ce:5b:9c:53:fa:b1:
c5:41:41:84:b9:86:35:ac:7f:d5:4a:75:a9:93:d4:f3:a4:b6:
02:d0:97:eb:a8:f6:82:b2:a3:b1:88:5c:db:9f:d2:08:cf:cb:
17:3d:1f:b3:a6:b1:ce:c9:fa:11:a8:61:a3:66:bc:21:f3:80:
ee:15:f0:4d:ff:87:50:ef:ef:33:90:0d:1b:4f:73:0a:42:5a:
80:56:c7:43:8c:85:fe:38:97:9b:98:a4:b7:1e:0f:1e:42:75:
fe:ea:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 19:44:41 2026 by rpki-client