Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: f022Salq9KWs57t/DKDjRJOpImgn0yp1VVYuVQaKvss=
Subject key identifier: 02:FB:AF:A2:04:7E:43:90:82:5C:91:67:AC:F9:9D:CB:BB:BE:60:44
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 01A08B6821F57758AC05D17A1F0872C10E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 0469
Signing time: Thu 10 Sep 2026 13:00:52 +0000
Manifest this update: Thu 10 Sep 2026 13:00:52 +0000
Manifest next update: Fri 11 Sep 2026 13:00:52 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: 33PTA/S/avPw0QfTBSi07akzlzEhNj6KjZEOFSEn5Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:21:f5:77:58:ac:05:d1:7a:1f:08:72:c1:0e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Sep 10 13:00:52 2026 GMT
Not After : Sep 11 13:00:52 2026 GMT
Subject: CN=02fbafa2047e4390825c9167acf99dcbbbbe6044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:4d:44:c5:fe:34:43:58:22:29:fa:9e:85:
4e:c2:20:fb:61:65:2e:1b:e4:6e:b8:52:20:fc:64:
a5:d6:1e:e0:ba:ed:c8:16:a4:cb:4a:5f:32:5c:b2:
67:35:36:7e:eb:9c:5f:9c:f7:57:63:2d:08:09:48:
ab:73:05:f8:be:35:6e:d7:ee:80:31:7a:f5:a5:91:
57:cb:95:bb:d3:f7:26:41:b1:de:31:84:23:fd:49:
11:33:46:b6:b9:6e:2c:06:50:6e:9a:c7:d1:c4:23:
06:2e:0f:2a:d5:33:d7:04:e7:80:4a:fe:cd:62:32:
31:80:9e:e3:d1:30:2e:d8:53:e1:cb:51:4c:fd:ac:
03:0e:d1:0f:00:14:63:d9:45:9c:c6:df:5a:b2:3e:
1c:6d:64:ac:5c:92:23:3c:5e:c4:dc:d9:5e:2f:71:
80:bb:00:c2:b2:ae:93:32:50:61:78:a9:07:f7:27:
1b:74:cc:68:91:d4:d2:96:3f:93:86:af:1d:aa:1b:
25:01:76:b9:f3:ca:07:7e:79:c4:ec:ae:66:cc:10:
03:79:94:3c:5f:6e:2b:ba:58:13:e4:14:c3:6e:1c:
a8:24:71:50:ba:40:df:fd:84:02:f1:e5:6d:f0:8c:
4b:bc:5d:69:e0:37:3c:ea:53:b4:06:ac:8d:c2:f8:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FB:AF:A2:04:7E:43:90:82:5C:91:67:AC:F9:9D:CB:BB:BE:60:44
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:bc:2e:6e:5c:e0:06:a8:e8:fc:a8:67:ea:e6:f9:f6:62:a5:
69:a3:b8:05:bd:f9:7e:c9:2f:f6:12:39:d1:d6:6b:08:8c:3d:
33:ed:4d:4c:7e:bc:0f:bf:f8:ae:fb:10:55:e2:94:96:0e:3c:
ae:ab:d4:77:1e:5d:3a:16:05:43:02:ff:da:aa:6d:0f:eb:5e:
b8:1e:35:7c:65:4a:59:70:0c:c8:66:d1:d6:68:9d:2a:bf:57:
9e:f1:0d:6c:ca:80:0a:b3:4d:4d:aa:23:d8:92:2a:cc:b3:68:
01:fc:16:39:2f:4a:ed:f3:ce:b0:66:a4:15:bb:e0:a0:04:db:
1e:aa:b8:17:8c:1b:97:53:26:5f:ca:ea:57:2f:37:0e:d4:78:
9f:60:c5:26:f2:a8:e0:a0:ab:66:77:68:fe:53:57:cb:20:a4:
ff:61:22:80:26:bf:7d:d7:ff:55:5e:b1:82:1d:0d:fd:fe:af:
0d:1f:c4:f2:c5:ef:49:25:c5:a3:04:b7:a3:9e:3a:e7:d7:e3:
d4:7f:4b:7c:77:c3:e0:a2:0f:aa:c9:0f:85:8c:1b:a9:90:ac:
e8:2a:41:fc:81:a5:17:8e:90:69:62:d7:ee:79:bf:d3:66:ff:
d4:cb:ea:ad:40:ff:21:f1:5f:7f:42:b3:25:f3:c7:06:65:bb:
d0:b7:aa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:26:10 2026 by rpki-client