Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: rfaut3UsfyQkH1tQ9iCehpM8VczMAMFFyWcjtwuHFzo=
Subject key identifier: 49:D9:F7:80:7C:AD:39:15:81:C4:F7:CA:CE:77:2C:EA:38:27:89:22
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 01A11861B92D03429924AD6B6C297A966179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 07C0
Signing time: Wed 07 Oct 2026 22:00:19 +0000
Manifest this update: Wed 07 Oct 2026 22:00:19 +0000
Manifest next update: Thu 08 Oct 2026 22:00:19 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: di5CyMXDAVInAh8oh7ZAQLzvev1lm3Cnl7G/bWn7+WE=)
2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:61:b9:2d:03:42:99:24:ad:6b:6c:29:7a:96:61:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Oct 7 22:00:19 2026 GMT
Not After : Oct 8 22:00:19 2026 GMT
Subject: CN=49d9f7807cad391581c4f7cace772cea38278922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:1f:b9:64:12:b6:23:ce:eb:c4:6e:cb:83:
a8:74:a4:d3:eb:ae:d5:21:ca:a8:fd:dc:b8:86:eb:
cf:e1:8f:98:85:b3:d5:24:b6:da:f6:08:2a:c8:8a:
fc:a0:ff:5d:72:64:ae:84:7b:10:d2:71:76:0c:57:
3e:03:5b:b7:d5:65:ff:44:c1:71:5d:5d:c9:3b:ce:
9f:01:5f:3e:d1:9c:c6:e7:92:2d:f5:f7:4b:0c:48:
4a:b7:87:16:e4:2c:7a:4c:46:1c:da:95:88:34:81:
1a:90:23:9c:62:52:db:bb:e7:b7:d9:b4:e1:ba:c8:
b2:f5:4d:63:38:13:e1:61:14:e2:d3:97:42:0a:78:
c6:61:04:28:fc:51:66:d7:d2:40:f8:80:e0:8e:eb:
31:75:0e:84:ae:89:19:8d:50:87:4c:29:fd:e1:df:
9b:c8:68:e2:ea:12:0d:5f:3b:e9:da:7d:b4:38:ba:
ed:47:96:60:af:79:7e:bd:3d:30:ed:ea:8c:5b:b2:
95:e7:3f:62:c9:17:12:98:98:f0:b8:1e:39:de:85:
f4:68:8c:d2:9e:8f:03:26:6e:ab:49:39:db:46:a9:
63:22:fe:e7:93:d4:4e:3a:12:5a:6f:c5:e8:43:af:
f6:3a:9b:2a:8e:36:a1:49:52:1b:a7:96:80:e0:92:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D9:F7:80:7C:AD:39:15:81:C4:F7:CA:CE:77:2C:EA:38:27:89:22
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c2:d4:fd:fa:4e:36:9a:14:ba:2d:7d:8a:0f:5e:59:de:0c:
b0:3c:f1:7e:4a:34:69:57:44:c3:c3:90:99:93:3b:fe:4b:c3:
8a:6a:92:56:57:9e:fb:55:37:74:72:f4:c4:63:90:c0:bd:0d:
74:10:49:df:4d:46:e5:3b:e0:96:82:af:6e:88:cb:04:86:92:
a7:d1:64:2a:90:f8:6b:b0:8d:43:ca:2d:ab:d3:94:48:b5:d1:
06:4a:16:f6:20:64:88:0f:75:e3:6b:5a:17:83:ad:27:cb:31:
f7:d0:d1:20:90:06:bb:bf:0c:bc:a0:54:5f:6f:b4:aa:3e:47:
c2:40:e5:32:4f:b0:d8:19:72:96:2e:af:c2:ce:63:6c:61:a3:
b2:66:05:98:4f:53:73:95:f7:82:e0:2d:a3:05:d9:16:33:69:
88:1d:50:2a:ff:b0:58:e9:da:70:38:ee:a2:e4:08:5c:5a:7b:
db:32:dc:00:59:68:b8:0e:9e:89:9b:99:59:95:fa:13:89:95:
c8:7c:8b:20:41:7b:9a:69:f6:84:0b:e8:b0:a2:23:fd:e4:a8:
0d:fd:3b:87:7b:80:a7:fb:24:3d:e6:48:c1:ff:9a:64:e3:c7:
49:4d:b3:23:5a:51:51:1d:15:47:ca:f6:ac:9f:d9:9e:21:6f:
a6:dc:4d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:17:35 2026 by rpki-client