Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: 9KchI0PsagqaWqu/3N2nz2E53uDg1MLtCkz3mbL4D4k=
Subject key identifier: E6:D7:B2:79:92:35:56:4C:98:C4:7E:35:E6:68:17:26:CE:DE:3C:9D
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 01A119E2EB81F3C4CC93C784AFDB0B370FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 0C26
Signing time: Thu 08 Oct 2026 05:01:04 +0000
Manifest this update: Thu 08 Oct 2026 05:01:04 +0000
Manifest next update: Fri 09 Oct 2026 05:01:04 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: tRNsA+7pAMldp/Tdznf/jDcUFqLDeI1X1mbGQ5JAdJk=)
2: oeqcCmqzmosVxM-WY8lmXD_44Ic.roa (hash: QSB9wBcelhQw6T6s+EAUaG07z6Fs95UlwbhmHAqSneQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:eb:81:f3:c4:cc:93:c7:84:af:db:0b:37:0f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Oct 8 05:01:04 2026 GMT
Not After : Oct 9 05:01:04 2026 GMT
Subject: CN=e6d7b2799235564c98c47e35e6681726cede3c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:bb:a9:71:29:17:c6:94:85:61:94:89:8f:
07:ba:a4:05:2b:e4:7f:4e:b4:80:3e:2b:a0:7d:0c:
c6:44:0f:4c:c3:89:06:41:98:3a:a6:bb:3e:41:09:
fd:2a:da:70:ac:0d:b0:d3:12:72:b1:a3:03:bf:d9:
c8:d3:88:4f:81:84:02:97:76:6c:f8:ef:66:a9:f9:
bd:3c:a9:0b:cc:ef:be:e3:88:d1:5d:0f:79:10:8d:
8b:85:60:58:94:74:5e:3b:3c:fe:ef:1c:1c:ba:2a:
a8:ff:0f:71:a5:e8:b7:89:8a:71:01:06:d3:a7:d5:
0b:51:2e:f3:64:c9:b3:3a:54:f7:70:8a:ac:c7:ae:
5c:7b:04:de:5e:5c:fb:7c:6d:51:08:ad:d9:19:5d:
bd:16:25:e6:7e:85:60:b6:64:19:1b:5d:da:0f:00:
ac:47:67:c3:5d:ba:f5:69:b2:57:5f:65:e2:93:b5:
63:18:00:ec:da:0c:95:3b:d6:a5:ba:01:c0:50:b8:
fa:89:30:5b:9c:4b:84:b3:97:58:d5:98:45:88:ff:
b2:7c:a6:68:63:50:0b:f5:3b:ca:1f:b6:1d:d8:36:
ac:2e:9f:e0:19:57:75:30:96:19:66:c3:d7:7a:49:
0b:cb:2c:33:57:60:01:70:d0:34:9e:75:96:25:7e:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D7:B2:79:92:35:56:4C:98:C4:7E:35:E6:68:17:26:CE:DE:3C:9D
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:55:2d:47:dc:02:04:28:a0:3a:99:fb:2a:3a:f3:26:6a:4c:
a2:c1:1a:6e:60:b5:70:5d:73:4d:c4:e7:43:a9:3d:db:49:bf:
e8:a9:79:ae:d2:0b:52:db:35:dc:e1:c1:e2:6f:79:74:ac:57:
df:df:df:7d:6b:ca:40:4e:f4:2d:3c:d0:01:e2:4f:6e:22:a5:
bc:55:9d:3b:16:d5:62:d8:7f:f8:21:f7:54:eb:8d:f9:82:00:
60:62:89:08:7a:da:85:23:76:9b:cb:2c:cf:21:ed:a2:54:7b:
f2:b5:c4:2e:fe:f1:28:9e:98:c6:aa:21:b9:1e:54:93:bf:56:
a7:a5:38:bf:11:e5:f6:2b:e8:a1:5e:ab:f8:72:f4:92:34:91:
dd:b9:e7:6c:3a:bc:37:fa:96:6e:3c:dc:d9:27:45:2a:ab:d4:
4a:12:a4:d4:13:83:d9:a5:2d:59:ce:01:56:1b:19:ca:1d:9b:
33:df:bf:39:3e:87:cd:70:df:8b:0f:45:39:84:9f:ff:8f:db:
37:df:fb:cb:15:d6:f1:c5:94:ef:c2:74:c5:3b:f3:67:3f:7f:
72:b1:57:b1:c7:f0:33:71:ce:24:3e:ed:fc:34:3a:07:66:43:
38:e5:ca:02:a1:a5:95:7b:c8:59:6d:f4:ac:0b:ac:a6:20:85:
11:b1:81:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:28:34 2026 by rpki-client