Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: 9kLSIMxecMZT8M3VH9RogWOLKrVEcdDbKhdKJwV9qCE=
Subject key identifier: 37:81:37:05:C2:C1:0C:6E:FF:A1:8F:1F:C5:B8:DC:EF:2A:B3:B1:B0
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 01A17F98472A69FAEA991C7CA77341779CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 23:00:48 +0000
Manifest this update: Tue 27 Oct 2026 23:00:48 +0000
Manifest next update: Wed 28 Oct 2026 23:00:48 +0000
Files and hashes: 1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: 7PKc9ZU5nRGlXsy7B7r+8af12+Hyf/ybcB8xE6V4WCk=)
3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:47:2a:69:fa:ea:99:1c:7c:a7:73:41:77:9c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Oct 27 23:00:48 2026 GMT
Not After : Oct 28 23:00:48 2026 GMT
Subject: CN=37813705c2c10c6effa18f1fc5b8dcef2ab3b1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:4d:f3:0e:fd:e0:68:1c:47:f8:60:e2:31:
66:fe:05:f2:40:01:49:74:01:3b:0e:f6:73:8a:96:
fa:41:92:35:6c:49:c2:9a:77:69:57:fd:67:03:f8:
8e:79:c3:9e:93:ac:f3:8a:91:68:75:ec:40:69:ae:
81:b5:0b:bc:20:52:72:50:66:7d:4d:e8:51:00:c6:
ca:29:17:3e:6c:0b:c9:74:74:91:1b:2c:08:2b:e6:
59:f8:da:37:9c:7f:8a:71:db:8b:3e:89:a8:c8:f3:
35:0b:0c:e1:f1:a1:cf:03:8e:28:cf:5c:67:c5:c2:
1c:97:9f:d3:40:5f:06:f6:01:b6:88:ed:25:ce:fe:
71:80:45:2c:3d:bd:d3:a8:44:5c:fa:4b:0a:d5:d6:
83:2e:63:de:2b:a9:8e:18:63:ed:88:66:fa:a4:d9:
da:ba:c6:a9:65:4d:d2:13:6e:d3:05:c0:9e:3b:e1:
85:83:23:7c:61:92:03:13:5f:f2:a2:bb:6f:d5:83:
fd:d4:ee:9b:98:c7:58:54:69:07:1a:07:3c:49:d7:
c6:5f:59:9f:1f:99:a1:2e:ed:0a:d5:fa:42:0d:f9:
72:ef:29:0a:38:11:bf:7f:ec:74:80:7b:52:3e:57:
f9:45:f9:55:be:29:2c:0e:2c:36:ad:9a:89:78:36:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:81:37:05:C2:C1:0C:6E:FF:A1:8F:1F:C5:B8:DC:EF:2A:B3:B1:B0
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:dd:a0:92:a5:ac:ed:a7:81:2b:0b:28:cc:59:f4:a1:1b:88:
8c:31:19:50:87:92:4d:e8:a6:be:62:a7:72:b4:d2:de:d3:81:
df:c7:d4:6c:1f:37:26:6f:ca:fb:8d:2a:2d:f6:a3:d4:19:cf:
d7:12:21:5b:8b:4f:a7:96:22:2d:f8:2e:a4:8e:c0:0b:36:33:
90:0a:b0:1a:91:1d:41:5b:c7:6d:f5:7b:4f:13:15:b1:25:bd:
cb:f3:bf:c7:3d:bf:54:dd:1d:20:66:a5:12:c0:cc:97:43:56:
1f:69:d2:af:0b:30:04:8d:a3:9c:7e:3c:48:d5:73:6b:52:89:
1a:6b:91:23:d5:f1:b2:54:80:76:f5:f2:dd:5d:46:84:d7:c5:
c6:c1:34:38:a2:76:47:0f:09:e7:c5:22:0e:98:24:aa:c6:10:
cc:59:ea:ed:b4:cd:90:7c:66:e1:33:bf:86:65:59:3c:a5:e6:
0f:1e:46:97:5e:aa:2d:26:9c:cb:10:ab:ba:61:dc:77:3d:2a:
12:43:5b:d8:6f:c3:12:13:bd:b1:62:c0:fb:a3:eb:8e:63:de:
a1:84:4f:54:45:71:1b:65:d2:f3:5f:f6:9c:f0:08:76:ff:78:
97:17:0b:ce:de:17:96:5c:e4:18:1d:48:fa:3b:d5:38:98:c4:
00:90:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:46:14 2026 by rpki-client