Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
File: GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft (raw, json)
Hash identifier: wOebiC4uUgG4iqnRglnulzSkspQf69NxuEDFqRLOy/g=
Subject key identifier: 40:C6:78:9F:8C:F0:B1:AC:B1:32:49:46:57:00:66:B8:5E:FD:DE:13
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Certificate issuer: /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial: 01A175F0BC6928935D24F9799545F6A207CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
Manifest number: 19BF
Signing time: Mon 26 Oct 2026 02:01:13 +0000
Manifest this update: Mon 26 Oct 2026 02:01:13 +0000
Manifest next update: Tue 27 Oct 2026 02:01:13 +0000
Files and hashes: 1: GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl (hash: q8XgkBuQFZhwGWksljCPCix5qjui35vFFEAGQcLFjh0=)
2: Z0_zAV1Qro2ldozAcdxyKQi0OQU.roa (hash: xEsTqLQfCCv7FY6OZ8FW4GDtw57riHCFBltpmR9h+Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:bc:69:28:93:5d:24:f9:79:95:45:f6:a2:07:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Validity
Not Before: Oct 26 02:01:13 2026 GMT
Not After : Oct 27 02:01:13 2026 GMT
Subject: CN=40c6789f8cf0b1acb1324946570066b85efdde13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:30:15:ff:06:73:ab:0d:cd:ae:9a:d9:d3:
fb:a3:bb:7f:05:06:bd:00:7c:6c:48:82:76:d8:76:
7b:39:04:f4:cb:d3:de:fb:a1:ff:02:be:03:5d:c9:
f3:0f:aa:6a:39:a6:2c:55:79:3b:b1:a0:09:9a:7a:
ee:be:7b:87:8f:04:e4:03:96:9e:d3:cc:a2:53:86:
c3:44:0c:0e:60:a7:23:24:a7:13:8d:c2:9d:33:bb:
f6:33:07:ba:85:b6:a8:e3:17:7a:c0:71:bc:ea:85:
53:7f:b6:b4:a5:36:01:93:6b:ce:90:4a:c8:ff:af:
d2:d3:80:d9:47:09:8e:96:89:bc:e3:b4:9d:45:6e:
3e:01:ac:87:02:6d:49:d2:e3:66:99:68:ae:16:03:
6d:1d:cf:98:6a:d3:bb:ab:8d:cc:0c:98:06:dc:b9:
d0:84:33:df:ab:03:a7:b9:9a:d8:0c:cf:3e:5a:f8:
b9:52:97:7e:0e:e2:2f:37:a5:36:3c:53:07:dd:4b:
b8:0f:a3:fd:a3:30:7a:e5:09:6c:5b:d9:88:15:c8:
98:e9:5c:0f:17:0c:bc:15:c4:af:6c:09:0c:df:60:
17:c1:c9:a5:0c:bd:95:9a:92:72:ef:a5:a1:4c:8f:
02:31:bd:f1:53:a3:51:53:5c:1c:dc:bc:61:b1:59:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C6:78:9F:8C:F0:B1:AC:B1:32:49:46:57:00:66:B8:5E:FD:DE:13
X509v3 Authority Key Identifier:
keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9b:b7:3d:59:60:b3:f3:ad:5f:7e:1b:89:4b:8e:db:df:62:
4b:fe:46:0d:39:05:d7:ae:e4:c9:ca:a7:b6:eb:51:32:c0:11:
47:5a:86:d6:bb:c7:56:69:42:71:e0:26:85:36:e6:88:ab:8f:
50:72:97:05:47:0a:87:03:9b:63:d2:f9:f6:67:b4:23:44:60:
f1:a3:ff:03:7d:9e:73:e8:28:cf:5e:b2:68:30:dc:5c:a0:ec:
23:ff:37:d2:01:b2:5b:b1:12:01:a4:b8:4e:e1:36:8f:3c:d3:
cf:a3:d2:28:1b:4c:26:05:33:74:e4:4e:18:3c:b6:cf:55:e7:
74:e7:25:e4:90:8d:bf:c0:c4:19:7c:fc:16:a7:43:89:1b:5f:
92:0f:16:d9:31:eb:4d:fe:4e:cc:0b:44:00:04:60:8f:70:ef:
91:4c:78:04:51:45:8f:d0:e1:16:00:c8:c0:ee:3e:35:e0:fb:
e2:37:a8:7e:4f:e0:09:27:96:3e:2a:70:bd:f8:0c:4f:93:b4:
ae:7b:48:cb:15:bd:46:d4:42:ce:01:e4:8a:23:f0:99:28:cb:
15:b7:b3:12:da:b6:d0:0a:f1:a2:0a:fc:60:9f:a4:5d:74:51:
b2:77:f3:15:c9:e1:59:94:c0:ab:bd:4d:3b:1c:17:da:ab:28:
d1:55:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:33:42 2026 by rpki-client