
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
File: gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft (raw, json)
Hash identifier: 53HUkKtGjcCdUkMuY70sx1KZcW5D8hwqFjdAJNgCF7Y=
Subject key identifier: D2:BD:EE:1B:92:BA:3D:BD:33:DD:70:EA:7A:EB:F8:1E:45:93:8E:ED
Authority key identifier: 81:94:36:4C:BF:27:68:7A:9E:59:52:82:CB:61:69:75:A0:63:FB:FC
Certificate issuer: /CN=8194364cbf27687a9e595282cb616975a063fbfc
Certificate serial: 01A08C7B0B79CA14ED071721122E25A03F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
Manifest number: A0
Signing time: Thu 10 Sep 2026 18:01:09 +0000
Manifest this update: Thu 10 Sep 2026 18:01:09 +0000
Manifest next update: Fri 11 Sep 2026 18:01:09 +0000
Files and hashes: 1: 2bj5-0BZd7k7PxCQQt3dR6sMa_c.roa (hash: FbdQo9ph3iDjpX3oiKqtQfo2fgWCcSI1MBdgV3YQnqY=)
2: gZQ2TL8naHqeWVKCy2FpdaBj-_w.crl (hash: Q/wDTmy/suaLpp4w8TAzMMWtrz5zNTI/McgmQtfT0AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:0b:79:ca:14:ed:07:17:21:12:2e:25:a0:3f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194364cbf27687a9e595282cb616975a063fbfc
Validity
Not Before: Sep 10 18:01:09 2026 GMT
Not After : Sep 11 18:01:09 2026 GMT
Subject: CN=d2bdee1b92ba3dbd33dd70ea7aebf81e45938eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3b:44:97:36:b7:ad:1a:46:ae:f0:4e:75:74:
f9:80:6a:86:58:d6:56:94:bb:7a:35:fe:23:10:cd:
93:91:52:b0:c1:eb:1b:eb:06:8f:5c:d6:3d:c7:d5:
85:36:e3:f3:58:cd:3b:55:bc:94:37:96:11:b4:ae:
10:55:c3:e1:a2:b3:e2:c6:85:71:a5:4c:e0:e6:d8:
8c:a9:16:27:a5:f8:b4:3a:6d:f2:55:95:db:7a:14:
4d:f2:53:70:ea:99:26:7c:2d:b4:8d:c4:a5:6c:20:
7d:be:81:23:57:56:7d:61:a3:95:0a:3c:67:b1:2a:
ac:b0:c1:c0:a4:a4:0d:e4:5a:9c:8e:de:f6:3d:41:
57:2c:a8:d5:56:88:fd:75:e1:39:4a:d1:4f:75:d6:
8b:5c:de:7d:fd:b4:06:5d:c3:62:57:a4:b2:1e:16:
d3:84:93:74:91:6c:bf:91:c0:4f:16:4a:f2:30:d4:
75:1a:07:0e:cc:72:57:47:3f:2b:2c:f1:6b:de:dd:
1e:d8:48:f8:63:3f:e0:ed:82:6d:ed:d1:c5:cd:ad:
59:d8:4a:ac:72:9e:a0:9e:1a:4d:44:70:8e:cd:a7:
1a:18:58:07:9a:59:65:13:32:40:93:10:3b:7a:71:
37:cc:00:7d:18:6b:3f:7f:43:65:e3:dd:a8:56:6a:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BD:EE:1B:92:BA:3D:BD:33:DD:70:EA:7A:EB:F8:1E:45:93:8E:ED
X509v3 Authority Key Identifier:
keyid:81:94:36:4C:BF:27:68:7A:9E:59:52:82:CB:61:69:75:A0:63:FB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e5:e4:0f:73:37:56:54:c0:1b:8c:4f:b6:be:82:d4:3c:b0:
36:76:a4:c4:32:85:ba:52:12:76:ed:01:94:1c:23:fe:0e:13:
06:a2:82:58:e1:07:a8:36:79:93:f0:fe:3b:7c:ee:0a:79:61:
c2:5e:8e:21:2e:7e:52:04:ce:63:3e:f7:ab:52:de:3a:86:77:
d1:84:b0:80:3b:79:c5:eb:9e:3d:32:cd:18:b2:12:dc:23:52:
2c:0b:50:c8:94:a3:88:f3:ac:26:32:13:62:b8:19:ca:2b:8f:
62:84:3c:07:41:bd:4f:75:27:a8:e8:30:05:c7:30:5d:6e:dd:
79:2b:0e:44:1f:c7:0d:9f:e7:a7:3d:86:5d:08:43:a0:c8:02:
fd:71:1d:74:b3:7f:7e:7f:43:75:4e:49:32:16:ae:24:70:70:
47:36:a9:33:85:27:23:31:ea:1b:40:70:5a:a4:59:a8:49:a6:
ea:df:b1:3b:98:68:1d:8b:99:18:49:4c:73:2a:c1:78:51:c9:
bc:0e:1b:6f:0c:c8:a6:e5:f9:ee:70:fc:8e:6b:ec:ce:f1:54:
b4:fc:3f:1a:c8:3f:36:b5:cc:4f:2b:f3:8d:bf:96:b5:3a:30:
57:31:f1:f2:f8:71:7f:76:6e:e0:dd:74:6f:e1:8f:6f:0c:8b:
1c:f8:63:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:44:50 2026 by rpki-client