Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3cecb1-04af-4031-9a32-3c7c3cb1a31f/1/g0djLafWPT63uqbLvPJOmGq8aCE.mft
File: g0djLafWPT63uqbLvPJOmGq8aCE.mft (raw, json)
Hash identifier: 8PEjZ5rdN5sslz74Bjv/XKrZ+qyWjySSA4mhysIiIU4=
Subject key identifier: CC:45:31:A1:2D:33:7F:65:36:07:48:90:45:74:C4:19:F5:CF:F5:4D
Authority key identifier: 83:47:63:2D:A7:D6:3D:3E:B7:BA:A6:CB:BC:F2:4E:98:6A:BC:68:21
Certificate issuer: /CN=8347632da7d63d3eb7baa6cbbcf24e986abc6821
Certificate serial: 01A1562F2918282DA1709347D2359ACB4E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0djLafWPT63uqbLvPJOmGq8aCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3cecb1-04af-4031-9a32-3c7c3cb1a31f/1/g0djLafWPT63uqbLvPJOmGq8aCE.mft
Manifest number: 28
Signing time: Mon 19 Oct 2026 22:01:33 +0000
Manifest this update: Mon 19 Oct 2026 22:01:33 +0000
Manifest next update: Tue 20 Oct 2026 22:01:33 +0000
Files and hashes: 1: ShUcOAOf7NtFGcFSoJQohGHqI6A.asa (hash: fH6zYXyEsdTyocbFL8gM2pzeraajx0Oo7BcUZDkU36c=)
2: XOhgn7pGRtzSsh1ARAU6rIaXlck.roa (hash: yyMmpdVjtyMnj1bE7AUUOokdJhPtrwDQpFFTBMYuLm0=)
3: g0djLafWPT63uqbLvPJOmGq8aCE.crl (hash: wFJhJyP00inRj6qRETybb5/E9Ztqf6rl92wu2Ky8y6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3cecb1-04af-4031-9a32-3c7c3cb1a31f/1/g0djLafWPT63uqbLvPJOmGq8aCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3cecb1-04af-4031-9a32-3c7c3cb1a31f/1/g0djLafWPT63uqbLvPJOmGq8aCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0djLafWPT63uqbLvPJOmGq8aCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:2f:29:18:28:2d:a1:70:93:47:d2:35:9a:cb:4e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8347632da7d63d3eb7baa6cbbcf24e986abc6821
Validity
Not Before: Oct 19 22:01:33 2026 GMT
Not After : Oct 20 22:01:33 2026 GMT
Subject: CN=cc4531a12d337f65360748904574c419f5cff54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:59:8d:60:d7:a5:29:1d:b8:3c:30:b5:cf:
0a:e7:3e:f5:d5:97:0e:4a:d6:92:da:0f:0e:aa:6a:
ee:be:3e:89:38:b0:ad:23:53:f3:42:69:7c:fd:d3:
0d:d3:d2:d4:18:d2:7a:23:17:c5:f3:e7:dc:90:0f:
80:55:d8:44:81:45:66:62:f6:0d:64:33:6f:ca:f8:
5b:da:f5:1f:e7:9c:e1:76:ed:32:5b:76:7d:c7:e5:
1c:f9:05:63:0f:e2:6e:29:db:39:85:38:6d:44:2f:
c6:c7:a2:ee:7f:85:fb:f9:0c:a9:46:1f:4e:7d:14:
b4:3d:99:c2:e1:d5:d3:73:b3:b9:cd:7c:5c:57:d9:
d8:32:38:30:5c:64:64:54:0f:a4:82:21:35:10:ef:
32:11:de:a1:c0:1a:42:24:f5:6f:d4:54:83:d8:fa:
32:9c:19:52:4c:31:20:e1:92:85:f5:67:13:12:41:
1c:aa:da:a6:5e:a5:18:91:01:e9:5c:7a:ca:ab:c8:
e6:1e:41:bf:62:a2:af:6d:2e:0d:36:ad:ed:47:69:
0b:8d:a5:ac:e5:6d:90:45:cc:60:f1:fb:f8:b5:6a:
e3:f7:61:20:f4:09:82:49:45:64:15:d3:a6:e0:c2:
f4:e3:4d:b2:83:09:31:c7:2f:df:89:cf:21:3b:a1:
4d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:45:31:A1:2D:33:7F:65:36:07:48:90:45:74:C4:19:F5:CF:F5:4D
X509v3 Authority Key Identifier:
keyid:83:47:63:2D:A7:D6:3D:3E:B7:BA:A6:CB:BC:F2:4E:98:6A:BC:68:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0djLafWPT63uqbLvPJOmGq8aCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3cecb1-04af-4031-9a32-3c7c3cb1a31f/1/g0djLafWPT63uqbLvPJOmGq8aCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3cecb1-04af-4031-9a32-3c7c3cb1a31f/1/g0djLafWPT63uqbLvPJOmGq8aCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f1:01:28:16:90:3f:11:c8:1c:3a:f5:f1:73:af:e4:34:5b:
df:95:5b:bf:11:74:a1:56:cb:77:c3:2c:44:90:c4:ca:6e:9f:
f1:a1:70:ba:c3:17:be:c5:f6:2e:69:23:56:38:88:91:8d:fa:
71:e1:49:8f:37:ed:75:99:29:ef:0e:45:f6:fe:a3:2f:70:3f:
7d:59:83:8a:ed:ee:00:89:6a:d3:8c:05:44:8e:d8:80:ef:6d:
73:34:a7:c3:1f:44:88:22:6c:09:ca:f3:13:3c:8b:2d:c7:f7:
84:13:12:6f:0b:91:b0:71:cb:5c:de:8e:4e:e4:e9:51:c2:35:
0c:ef:c5:b9:f8:b3:be:e1:63:d8:a0:c5:c6:d7:47:56:b2:cc:
23:39:b1:a6:0d:9c:e4:e2:79:a3:ca:25:e1:e2:70:88:c3:0c:
20:08:8e:e5:72:47:69:ce:10:32:15:c1:88:6e:db:2f:42:aa:
7f:79:ae:57:04:ac:46:1a:50:f8:2f:1b:c8:67:81:09:77:f6:
f9:ee:0e:ab:6d:9b:c9:bd:dc:7f:20:8a:00:4e:44:c4:32:b1:
f2:c1:3c:a6:54:87:6e:a5:48:3d:d2:b2:9a:16:59:ef:f3:3f:
2d:f7:9c:22:9b:da:62:bc:b4:c5:83:61:9c:1d:86:e2:38:0b:
3e:8d:2f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:52:16 2026 by rpki-client