
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier: EOtdEQLqhFAgBQk2M+16hYvWuCGjVl+7HejpM/ekOSA=
Subject key identifier: 17:FF:EA:6D:AA:8A:40:A0:45:29:B5:4F:26:94:C5:71:C5:AD:0F:99
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 01A12B44D576B17524034F5A4A159349A5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number: 1AA1
Signing time: Sun 11 Oct 2026 14:01:33 +0000
Manifest this update: Sun 11 Oct 2026 14:01:33 +0000
Manifest next update: Mon 12 Oct 2026 14:01:33 +0000
Files and hashes: 1: 1-GJxYFfHhPUGldIW84G9cSjaROo.roa (hash: xnT7kV2Yd837mUQZhjujVXj3ng6jUmkGRRzKFJTHREg=)
2: 7QBS3aveMjEIt5V3oI4muIcCVe4.roa (hash: GsyoiBHqEicecqi/mcF/bo2NUxKmjfbUVwAMQEmmias=)
3: FcCot_n8byTOtYnTcT9gqTdXqgI.roa (hash: W7M2MGUSVVgsXq7kupYfdmxLZ/fDswJFwIWF+JWAWi0=)
4: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: rsfn4JVryreEq5H4PUtNpBRRlTVLgWMZTgvuBMrg3CU=)
5: jZxaU0gUqcmTgelMnTTUvkNfM7g.roa (hash: fm/mYWmhHVRNa3vFUylMM5LunZsCT8Akl9JuHlA1Fb8=)
6: lGhTp3LLyxy8beBvhY8lnM4Yjhs.roa (hash: /3CeCfqpeIvLkc9UntZNryGgsw4LpxUtcTdUNK/e4Hk=)
7: nmKKjuvrKpu6Q_V0_c5Z74FUduw.roa (hash: jrXk8p4lSqYPTjIdM+K2z4RnJA6RydCcUOEGFn8KQoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:d5:76:b1:75:24:03:4f:5a:4a:15:93:49:a5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Oct 11 14:01:33 2026 GMT
Not After : Oct 12 14:01:33 2026 GMT
Subject: CN=17ffea6daa8a40a04529b54f2694c571c5ad0f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:64:14:96:da:14:08:8f:16:50:4c:74:eb:
59:00:31:36:29:f0:0b:8c:3a:35:c3:55:f6:d9:9f:
0c:ca:ea:16:da:e5:64:d6:38:bd:52:73:31:a1:c4:
49:bc:11:ca:73:eb:15:d2:73:85:a3:f6:f6:2a:12:
ff:49:93:d9:a9:25:5a:7d:7c:1d:f1:da:79:9b:9c:
1e:9b:04:0e:51:d2:fe:16:d4:4f:7d:75:03:13:01:
81:c5:a1:fb:8e:61:bc:e5:05:96:c8:14:15:90:b5:
6f:f4:bf:48:53:e4:fb:28:3a:bf:80:75:4c:81:1c:
2a:3f:a5:07:27:4e:3b:c6:96:ac:d9:94:7f:c2:4f:
fe:2f:83:b5:37:48:d6:23:19:28:5b:b0:d4:ba:42:
db:2f:1e:d7:d3:b4:cc:08:eb:ae:e9:00:0d:e6:e9:
33:0e:4d:f6:99:0d:a0:4b:0f:8a:06:0b:8f:a4:37:
dd:94:05:1b:2d:15:be:c1:42:ec:5b:7c:3e:6a:ab:
4a:08:27:60:ec:9e:fd:0d:cb:6f:ac:41:74:ff:11:
ba:b4:e1:63:ed:19:dc:32:8e:82:d0:b9:53:40:52:
64:d6:02:33:9c:db:fe:8a:f3:71:b5:81:f5:65:57:
1a:39:9a:28:45:fc:c4:ff:48:7a:96:5c:00:a8:27:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:EA:6D:AA:8A:40:A0:45:29:B5:4F:26:94:C5:71:C5:AD:0F:99
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a4:dd:eb:db:88:6f:47:97:75:58:8d:19:47:65:68:c3:c5:
6e:32:c2:43:49:06:49:fa:ac:ad:8c:ee:4d:04:96:fa:24:46:
a1:13:86:91:80:e9:25:3d:2d:05:d5:03:5d:59:7d:da:61:ee:
b0:43:91:2a:12:a2:07:dd:f4:40:f7:7a:f1:f0:17:6c:7b:62:
8a:b5:1a:0a:37:60:ef:5c:64:9b:f7:db:01:ba:ef:25:ca:4d:
4a:ec:ba:ee:66:66:39:9b:28:73:1d:89:11:6c:fe:0f:66:60:
54:f0:2b:b5:5f:69:17:d2:d3:13:ef:59:6b:aa:4d:9a:5e:85:
da:82:26:ae:d1:86:8d:65:02:59:bf:94:e6:35:31:cf:2c:82:
a4:c3:86:ab:f0:f0:d2:ab:6b:bf:31:cd:f8:ab:ed:71:08:87:
89:ab:88:86:2c:b6:85:ca:a5:aa:0b:45:04:e4:fc:bd:bb:86:
57:2f:b3:68:dd:e6:5a:5f:5b:9b:54:85:38:de:33:60:c8:c8:
6f:36:45:3d:01:80:e2:32:77:d4:f2:4e:74:16:30:81:aa:c9:
32:23:ab:fd:ba:90:22:87:d2:d8:b5:dc:66:b5:f0:c2:83:1e:
42:86:1f:b4:66:18:76:ac:fe:f1:1b:92:ae:f9:eb:cf:6d:74:
d5:54:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:05:09 2026 by rpki-client