Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
File: GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft (raw, json)
Hash identifier: LSI+W/53f7UnFpmhRX9ROaUGZtWISkcu+Lw4HwP3irQ=
Subject key identifier: E9:FD:EE:D6:D9:DD:30:DB:1C:E7:4D:10:70:E1:CD:1F:E7:10:CD:44
Authority key identifier: 1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
Certificate issuer: /CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Certificate serial: 01A06D26AE258B42A0E81FC8475E30F9A556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
Manifest number: 0120
Signing time: Fri 04 Sep 2026 16:00:46 +0000
Manifest this update: Fri 04 Sep 2026 16:00:46 +0000
Manifest next update: Sat 05 Sep 2026 16:00:46 +0000
Files and hashes: 1: GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl (hash: b1b6WAOP1Fxa2bTE2o1FeUW3PvZY0GpvHAKFxFcQbZw=)
2: zr6qOC2iZhYMAkfVEjFaWAW3Gdg.roa (hash: rfGt0EQo3cdc8IHh8jz9o2EgRv1qNBw2XAoGV+8jWOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:26:ae:25:8b:42:a0:e8:1f:c8:47:5e:30:f9:a5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Validity
Not Before: Sep 4 16:00:46 2026 GMT
Not After : Sep 5 16:00:46 2026 GMT
Subject: CN=e9fdeed6d9dd30db1ce74d1070e1cd1fe710cd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:1d:16:ac:6b:19:cd:6f:ce:8c:3d:57:b5:
f3:b3:60:31:4b:87:7e:64:fc:87:cb:46:4b:4f:cd:
f6:71:14:97:28:f2:75:d1:e4:1e:1d:e0:f8:9f:88:
f4:83:0f:db:cd:f1:07:81:f8:de:e5:dc:f0:76:b0:
a1:59:55:bd:a8:40:ea:4d:4e:2c:6a:90:10:b8:86:
79:5b:06:a4:ee:ca:48:ff:4f:c1:e1:01:7f:1d:9c:
24:2f:47:39:57:52:61:aa:be:90:36:9c:40:f0:82:
41:23:a7:ce:62:14:b5:ac:32:89:db:32:9d:43:07:
b8:2f:12:e3:06:4f:57:d6:53:2e:0f:94:c3:5b:e0:
8e:ef:4d:19:87:59:e3:4e:24:c8:9b:38:5c:f0:c5:
00:d6:b9:bb:77:53:7d:ae:b9:5c:4c:79:89:9a:76:
2d:b0:59:28:53:b5:a8:84:22:73:7c:54:9e:9d:20:
52:9e:3b:5e:30:d9:2b:69:2c:d1:fd:6f:99:32:06:
c7:f3:88:b9:11:75:13:ce:9f:bd:24:f9:b6:a4:a3:
ae:e4:2e:34:ae:10:bb:1e:fd:60:e1:32:14:52:c6:
c4:cc:31:8a:5f:b9:37:43:b8:ba:37:8a:22:30:74:
c3:21:44:4f:a3:63:af:77:2b:65:ea:b6:09:76:de:
51:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FD:EE:D6:D9:DD:30:DB:1C:E7:4D:10:70:E1:CD:1F:E7:10:CD:44
X509v3 Authority Key Identifier:
keyid:1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e7:b3:45:7e:a3:51:85:60:33:c8:9a:71:52:91:86:06:6a:
ff:3c:76:62:29:41:19:d5:0c:1b:bc:6d:24:9f:6d:f5:6e:17:
73:ba:17:86:ff:07:0f:ab:7b:58:f6:4a:1b:fe:8a:2a:c7:fe:
ac:f6:b3:5c:02:0e:3e:0a:84:75:a4:92:bf:ee:5b:e8:9b:cf:
44:da:11:e4:2c:56:7d:71:f2:2d:0b:83:c9:28:27:f7:a9:d7:
e2:c8:a4:94:81:a0:6b:24:7e:e5:10:de:c4:ef:d1:cb:37:e0:
c7:56:97:ab:20:2b:dc:c2:1d:42:33:1b:a6:44:b6:19:36:b1:
35:d9:32:33:67:7a:42:51:57:93:6b:f6:4d:56:0d:7a:a6:23:
34:40:3e:b1:21:23:c0:15:c7:af:8b:74:e6:9d:aa:9a:8d:7c:
1a:63:6d:88:15:25:e9:0f:74:4e:1b:40:55:1e:b2:35:38:50:
41:d8:47:c4:e2:ab:89:83:51:84:56:21:c3:3c:3d:c0:32:8f:
52:29:52:39:34:fb:1c:4f:b0:a5:cc:24:23:e8:a6:a3:b7:0c:
d5:ca:84:4e:f9:d3:38:6d:aa:c7:1b:51:4f:8c:af:7b:0d:1b:
4a:88:25:20:ad:f5:01:54:bd:0d:28:13:73:5b:61:44:e6:2a:
e4:3f:c1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:45:00 2026 by rpki-client