Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier: 4Mrjl+CwYd5wnaw3vDaISp2bHBsP+/suQv9jshV9Des=
Subject key identifier: 1A:FA:27:89:A9:75:1A:DD:D4:1A:A8:2D:94:DC:23:65:96:D3:A5:6B
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial: 01A1291F307C5E7C4A85850B1EDF9FFDE596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number: 1AA0
Signing time: Sun 11 Oct 2026 04:01:12 +0000
Manifest this update: Sun 11 Oct 2026 04:01:12 +0000
Manifest next update: Mon 12 Oct 2026 04:01:12 +0000
Files and hashes: 1: 4yhn0zab6G9Xm_NjzDhDVFNViNU.roa (hash: A7LqIa0Mp3Sp/NDA4NIu51kIjL901Apj0xVFgoij29k=)
2: 7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa (hash: x7mGZCpmu0SwOVi3OquDRZc+flnwWQDFf3B9ZxRJHaY=)
3: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: 6pryNTAzarEdqijPpNsuOEznnex2G45A8AmXliNe+W8=)
4: r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa (hash: BZ2IDfhsgXSEeuZ1ehS1OEbZfErOlb6+IBt9JMlf/C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1f:30:7c:5e:7c:4a:85:85:0b:1e:df:9f:fd:e5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Validity
Not Before: Oct 11 04:01:12 2026 GMT
Not After : Oct 12 04:01:12 2026 GMT
Subject: CN=1afa2789a9751addd41aa82d94dc236596d3a56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:88:26:a9:c1:da:e0:cf:89:b4:1e:5d:fe:
33:f4:b1:80:7d:7d:79:bb:14:00:93:20:45:82:82:
d7:0f:f9:de:f9:ff:cb:1f:bf:01:be:31:2e:1f:c5:
a1:66:1c:b5:4a:7d:b0:f7:b8:21:1e:09:56:fe:4a:
a5:e1:cc:a8:6a:9c:44:c7:c9:dd:d1:aa:01:48:1a:
d5:be:bd:58:4b:20:a8:38:e0:90:51:b1:51:83:a3:
68:fb:39:4c:7a:e1:57:6a:6a:95:5a:27:9b:e0:8f:
80:2c:12:30:96:dc:ce:c2:ab:b6:84:74:29:20:b4:
cd:f6:33:56:2a:c4:b9:9a:37:f1:41:84:05:96:88:
f7:da:60:46:e0:a1:4a:91:80:96:b7:84:50:9f:2e:
38:da:55:8a:3e:a2:84:75:00:eb:b4:1a:73:dc:47:
3e:18:f9:e9:45:0d:07:80:24:34:ea:63:26:aa:08:
0c:5f:fb:b1:ba:4f:ce:9f:f6:e9:35:75:8e:c3:6b:
ac:b5:09:c9:73:10:6e:81:b2:0d:74:ef:9c:31:f9:
3a:4f:3c:29:83:46:86:b3:d6:21:4c:b4:65:c2:be:
ac:1f:ca:d7:56:7e:a0:bd:98:00:60:bb:94:c9:83:
7e:18:01:ce:fa:ee:30:10:7f:47:07:47:72:35:df:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FA:27:89:A9:75:1A:DD:D4:1A:A8:2D:94:DC:23:65:96:D3:A5:6B
X509v3 Authority Key Identifier:
keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0d:02:5c:00:9c:41:41:be:b1:ee:18:7d:0f:cc:c8:dd:34:
86:fd:fd:a7:3e:a9:7f:b7:88:71:c7:ea:48:cd:40:3d:54:31:
12:45:d1:9a:2b:39:e9:73:aa:0c:9f:24:6d:27:8e:cd:23:3f:
bf:04:00:d0:1c:61:d8:e9:d6:b0:e0:85:3f:48:9d:2a:33:05:
08:26:38:35:a3:05:25:4c:f2:88:0c:60:30:5e:e2:17:1c:9c:
81:3c:5c:54:64:5c:87:a5:52:f7:82:04:1e:d3:f1:0a:40:ea:
2b:39:90:e1:87:1e:97:41:7a:16:7a:36:05:80:65:18:7a:7f:
e3:c3:e3:1b:d4:8c:bc:86:33:2d:d4:b6:e7:c6:0a:14:0c:a2:
cb:bb:94:d7:6f:ca:55:e5:6c:34:d8:3c:c4:82:c1:ca:1e:56:
ea:30:f5:b9:6a:af:2a:70:90:84:95:e8:56:d0:aa:59:dd:37:
38:fc:b4:e9:b6:18:08:54:05:a9:2a:2a:c8:ff:53:4a:7e:d0:
3c:e0:61:5a:81:ef:f6:c1:df:92:02:d4:2e:cc:55:d4:0e:e9:
e5:4b:97:1d:fa:56:30:e1:52:75:b8:b0:ab:46:b8:4b:7c:de:
61:e7:8e:d7:f3:5c:d8:66:c5:19:9c:9c:e8:50:50:0c:4b:6b:
e4:58:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:00:54 2026 by rpki-client