Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
File: GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft (raw, json)
Hash identifier: kPAPcv5DbIY6ytkwfy3BAtUaj+yHKbK05s8DhL7v9nk=
Subject key identifier: 35:BC:D5:5E:99:38:44:29:F9:F2:3D:CA:3E:95:A9:67:83:B8:BA:63
Authority key identifier: 1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
Certificate issuer: /CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Certificate serial: 01A1607B006EA5D80F8D3FB48C2DC105770B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
Manifest number: 019E
Signing time: Wed 21 Oct 2026 22:00:36 +0000
Manifest this update: Wed 21 Oct 2026 22:00:36 +0000
Manifest next update: Thu 22 Oct 2026 22:00:36 +0000
Files and hashes: 1: GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl (hash: EeWEHr6UjS/x+zwwEL9SptBsOSTk7x2OrvXNQvZurRg=)
2: zr6qOC2iZhYMAkfVEjFaWAW3Gdg.roa (hash: rfGt0EQo3cdc8IHh8jz9o2EgRv1qNBw2XAoGV+8jWOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:7b:00:6e:a5:d8:0f:8d:3f:b4:8c:2d:c1:05:77:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Validity
Not Before: Oct 21 22:00:36 2026 GMT
Not After : Oct 22 22:00:36 2026 GMT
Subject: CN=35bcd55e99384429f9f23dca3e95a96783b8ba63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:fe:7d:bb:a0:87:28:bf:9a:13:44:c7:29:
c7:5a:a7:c3:57:57:fb:9a:ad:16:dd:76:76:63:52:
a5:ff:76:62:06:96:a2:05:ab:1d:3d:8a:c0:81:fd:
42:37:e6:9e:82:95:af:9c:7f:75:74:69:b5:63:1e:
13:8b:e0:c9:8c:f9:d1:d3:99:3b:ab:db:43:eb:07:
53:c2:f1:df:af:bc:27:bd:da:f6:ea:3b:7a:cc:8d:
10:2d:76:24:b0:82:09:47:4c:bf:d8:ff:1b:2d:c0:
c9:01:86:ac:71:c5:e5:f9:a1:1e:22:3d:83:8d:86:
a6:d0:7d:13:fe:93:bd:d3:52:1d:ae:56:6e:c9:a2:
1f:6b:78:ee:87:7c:2d:28:cc:1d:88:13:13:dc:c6:
e6:08:d8:ca:42:79:93:cc:52:d8:75:72:f0:bf:cf:
07:90:ab:f6:54:53:ed:c8:b3:a3:c4:dd:d5:04:d5:
7b:f0:9f:7c:0f:72:24:b4:b2:f8:f2:88:b2:6d:a7:
41:5b:f5:6e:0c:24:65:15:b7:40:5b:79:12:ee:a1:
af:54:6b:01:35:57:1d:1a:c2:3e:fd:a1:b9:ce:c4:
a9:0d:fb:8c:98:33:3c:94:77:c0:4a:85:cc:18:53:
51:7d:27:d6:9f:ed:85:bd:14:fe:79:ef:b7:c9:45:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BC:D5:5E:99:38:44:29:F9:F2:3D:CA:3E:95:A9:67:83:B8:BA:63
X509v3 Authority Key Identifier:
keyid:1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fa:d8:d6:59:2e:c8:70:f7:73:51:bd:7c:36:36:68:ba:cf:
4d:bb:0d:61:53:2c:9a:c2:57:8e:9a:cc:dc:a3:ef:bc:7a:61:
99:fc:70:12:69:19:ba:48:51:10:1b:ef:b5:e7:2b:f1:c5:ee:
41:ad:d6:c3:a9:68:cc:c4:9e:9d:be:4a:e4:92:97:74:e4:a3:
63:9c:02:c7:62:bd:5b:61:ed:bb:36:22:a5:02:72:ab:ab:de:
fe:85:50:0a:7e:84:5c:47:83:83:4a:73:7b:73:3b:b3:ca:8f:
eb:f9:c1:95:2c:c3:d9:1d:c9:fe:6f:0f:c5:72:4f:9b:e4:1e:
52:ac:44:a9:51:07:77:f1:da:f6:9c:8c:6c:fa:24:af:a9:4e:
35:f2:da:da:5a:57:8b:a5:1a:8b:85:64:a6:05:04:8c:ef:e7:
b7:6d:f2:63:6a:d3:3a:2c:79:b4:fb:4d:7b:d3:90:61:c9:3b:
64:0e:69:4a:9d:0a:74:11:0d:e6:85:4c:ce:c2:19:af:5f:14:
d7:cd:5b:e5:2a:ce:dd:b9:16:4d:ad:c9:e6:eb:b7:aa:97:bf:
31:b0:9a:ec:ba:57:7d:07:e4:37:62:f5:60:16:22:6b:b0:7f:
1c:ca:52:1f:9e:fc:24:99:40:cb:d1:c7:6d:24:aa:c7:32:0f:
88:8a:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:29:07 2026 by rpki-client