Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
File: gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft (raw, json)
Hash identifier: frBK8hmPEpimUXJlBLrdSUK6VSo6CZAu2mB6mZXpftQ=
Subject key identifier: AC:47:C8:9F:1D:E7:65:D0:86:7B:A2:D6:41:3C:57:30:F3:74:3B:D5
Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
Certificate issuer: /CN=819b97b20ccb4f696518e47c437259a8913e72ae
Certificate serial: 01A1950D197FF3B871F22C7F4B32D4CCD4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
Manifest number: 1521
Signing time: Sun 01 Nov 2026 03:00:25 +0000
Manifest this update: Sun 01 Nov 2026 03:00:25 +0000
Manifest next update: Mon 02 Nov 2026 03:00:25 +0000
Files and hashes: 1: L2sVy84YNgdXdVRcFvky1jOyapo.roa (hash: 3nfkWDukO5seERRcNCHmDmoRPYQO0LEHGFHMMpgINH8=)
2: ehALNgmvDMXOCz1qDVIzrXU9qPs.roa (hash: dn6QOi6y7D3WWFMRmemHXTmqvY1tGOW3y/+Az1xAbxM=)
3: gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl (hash: 4m4D++kdHXJezIZLpYp7gh9zfqzA4VEsUofeTFjygY4=)
4: hwtVlXCFjo--idd4yO5s0tt7X3I.roa (hash: NUHjZYJkOekWUWwDXQIom+k1M6skxKicFwBdcoVK9n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:0d:19:7f:f3:b8:71:f2:2c:7f:4b:32:d4:cc:d4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae
Validity
Not Before: Nov 1 03:00:25 2026 GMT
Not After : Nov 2 03:00:25 2026 GMT
Subject: CN=ac47c89f1de765d0867ba2d6413c5730f3743bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:9b:e8:01:b0:9a:07:a8:82:01:81:76:2b:
2f:c8:a8:ee:40:46:eb:0c:03:59:bb:45:32:19:e0:
9c:20:35:79:90:69:ca:1a:b7:9a:f4:e7:01:06:01:
68:d5:7b:f5:12:10:80:d3:22:96:66:7e:ba:7d:ff:
cb:18:60:a4:d9:fb:6e:65:db:8c:5e:54:4e:83:63:
68:4c:c0:eb:f5:a1:69:2a:43:14:c7:67:be:6a:1b:
6d:5b:68:64:a3:8f:cc:80:79:83:eb:f0:40:f5:5a:
f2:0c:bc:96:33:d1:d8:9d:4a:f3:1c:ef:b7:e9:ad:
c4:37:04:f0:5c:e0:a0:80:f9:64:e8:bf:b1:5b:21:
cf:f4:dc:2b:15:1c:18:5f:db:bb:0e:1c:67:65:7e:
a5:3a:ae:23:28:16:57:88:23:37:06:46:fa:a7:64:
42:52:3b:bf:78:d5:f4:ca:33:9d:99:e5:cf:16:f4:
b5:df:9b:ba:2e:1a:1f:58:7d:4c:4b:48:2a:f8:45:
c0:76:6a:4d:cf:cb:4d:08:60:85:a9:f0:5c:70:f5:
18:c0:65:5e:f5:10:95:8f:17:76:dc:d3:e9:c6:98:
bf:d8:22:79:c3:11:b7:cd:1b:39:38:85:7c:0d:d2:
ed:e2:fd:5d:92:d6:ce:ab:5f:ff:01:e0:21:70:33:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:47:C8:9F:1D:E7:65:D0:86:7B:A2:D6:41:3C:57:30:F3:74:3B:D5
X509v3 Authority Key Identifier:
keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:01:51:e1:42:16:8a:08:b1:ef:ba:91:5f:d1:9f:f7:c0:cc:
0b:eb:fa:ba:ec:73:25:ce:50:74:ab:12:bf:c4:dc:77:39:ee:
8e:4d:e6:1f:a6:8c:81:05:45:61:d6:7b:61:55:e9:72:48:f0:
d9:5f:d3:a4:55:b9:6e:38:1e:d3:89:5c:af:12:70:04:a7:a5:
53:87:c5:d4:37:32:5f:53:c3:da:7b:c0:d4:5f:45:70:34:68:
1d:5f:b1:fe:70:7b:61:3b:c4:bc:e9:43:b1:8e:ed:b0:67:05:
aa:9e:67:5d:62:bc:c6:05:f4:25:b6:89:05:ce:1f:f6:01:9e:
7c:30:50:b4:1e:61:77:e9:67:f8:f8:7d:40:41:1c:66:73:0e:
00:47:c0:2c:57:0a:7d:34:ad:6d:66:83:bc:f8:1c:a0:bf:d2:
df:c1:14:4a:91:c7:99:4f:7b:1c:ac:6e:35:94:57:8d:f7:15:
62:e6:68:5d:12:d7:ea:90:4f:2c:d4:a8:9f:35:50:56:24:95:
c2:48:3a:02:6a:7f:99:be:d6:57:36:86:40:dd:d6:d2:ba:48:
42:ea:5a:08:88:95:b4:c0:9b:06:8b:4a:87:49:47:21:62:f9:
31:32:4e:26:04:e0:4a:0d:c8:ca:c1:6b:41:ab:7f:0f:27:45:
f2:2a:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 10:49:28 2026 by rpki-client