Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: PYDYojLDqRUFmayfoYezAGYhrI3wOGmprwiZw1OVGtc=
Subject key identifier: 7F:99:1F:B2:CC:0D:CC:59:7C:66:D8:0B:8F:21:7B:27:98:D3:10:C6
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 01A0249FF6B2357C61F7A067038638EDF358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 0BA7
Signing time: Fri 21 Aug 2026 14:00:57 +0000
Manifest this update: Fri 21 Aug 2026 14:00:57 +0000
Manifest next update: Sat 22 Aug 2026 14:00:57 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: Gt2+7DPuwrhiaKgfMg39HX0BUuCWMH78O53Y/dYL55k=)
2: oeqcCmqzmosVxM-WY8lmXD_44Ic.roa (hash: QSB9wBcelhQw6T6s+EAUaG07z6Fs95UlwbhmHAqSneQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:9f:f6:b2:35:7c:61:f7:a0:67:03:86:38:ed:f3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Aug 21 14:00:57 2026 GMT
Not After : Aug 22 14:00:57 2026 GMT
Subject: CN=7f991fb2cc0dcc597c66d80b8f217b2798d310c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:99:62:7f:d5:46:5a:2c:65:9e:41:ab:d5:df:
2b:72:ac:8b:17:cd:71:31:44:12:f0:83:70:37:26:
19:37:f1:19:0d:ce:a4:bc:7c:66:c1:03:76:44:80:
39:6a:ba:78:3f:36:40:05:b5:01:23:84:10:b2:72:
5c:aa:a0:34:bb:f3:d0:b9:1f:20:a0:c4:96:91:2f:
37:17:d1:44:bc:9d:84:ed:f2:76:1c:f1:54:d4:84:
0c:f6:c5:20:f3:5b:3f:a5:3c:0e:fe:e4:3c:84:74:
f1:f2:b7:3f:b4:24:5a:54:a6:36:55:8b:0a:5b:e3:
36:8a:6d:7e:1a:d9:e9:27:71:27:8e:53:d7:38:6b:
44:21:b3:6c:4f:fe:86:ce:b3:f5:32:5b:07:70:f9:
8c:1d:0c:e0:80:0e:81:69:7a:a3:80:11:0a:c5:8f:
8d:22:d1:87:7b:82:b8:83:7a:e3:8e:67:ad:94:af:
d5:03:9b:7e:c8:68:38:ea:98:11:c6:d0:c3:03:03:
14:c6:a4:58:02:92:11:51:3a:83:c5:f4:a4:51:3e:
49:11:0a:72:74:43:55:7d:e2:06:53:b2:f4:e7:42:
1f:d8:2c:23:b9:52:a6:f3:cd:01:d6:92:38:90:16:
ba:59:8a:c4:71:22:59:15:de:52:a4:22:5a:cb:24:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:99:1F:B2:CC:0D:CC:59:7C:66:D8:0B:8F:21:7B:27:98:D3:10:C6
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2a:e6:fe:fd:25:ca:bb:07:94:ec:51:5e:a8:5c:c5:26:c1:
3c:69:35:af:53:cd:26:4a:69:cb:2c:43:41:6b:9e:4a:48:f6:
e4:2c:20:f2:2d:26:df:84:37:e8:bd:7b:c4:51:38:11:94:e0:
bb:45:45:15:9e:42:ef:63:40:43:f7:fe:49:2f:b0:38:fd:c7:
a8:a5:12:a9:cb:e6:9c:e7:19:db:b7:6c:d7:4d:0c:06:0b:5e:
a9:27:c1:38:7d:4e:1a:c8:50:85:91:13:02:ac:ec:1f:59:a4:
e8:73:60:4b:e0:69:4b:b3:a6:6a:23:0b:de:12:9f:83:31:0e:
83:31:8a:ad:1e:f4:09:76:fd:91:8c:61:00:5a:b2:d8:6f:5f:
79:d2:4f:6f:53:21:59:46:71:11:84:2e:90:be:1b:52:b4:4b:
84:7c:08:6c:ef:14:57:94:99:4e:34:06:87:37:c7:d4:45:d0:
e3:a7:46:c5:94:39:4e:55:cb:47:33:f1:8c:bb:ab:c9:d3:5a:
a5:da:3e:3d:5a:b7:03:a2:22:d1:f1:23:2e:fe:d0:fa:38:75:
bd:d9:4a:99:8a:15:ad:ac:7c:45:6d:24:b7:54:85:c3:d4:37:
17:95:dd:45:86:50:4d:63:f0:c0:7e:67:e4:1d:1b:d5:79:69:
75:b1:21:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:09:42 2026 by rpki-client