Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: PoEPKgA0gaxH7fs3sMqkgyUEcVFj2ADCZOQPKFlCU3M=
Subject key identifier: A8:91:C7:3B:06:53:C2:F8:D5:0B:33:75:CF:A3:91:D3:A3:AF:84:D5
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 01A08B681724824DC61E04BEF9DAA1DB19C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 0BA3
Signing time: Thu 10 Sep 2026 13:00:49 +0000
Manifest this update: Thu 10 Sep 2026 13:00:49 +0000
Manifest next update: Fri 11 Sep 2026 13:00:49 +0000
Files and hashes: 1: EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa (hash: CaEBziMi2C6rN6WGf7O34W/+WtB1Ogao7r0fRD3u2XA=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: zuRQkG2Mz12xG7dQxT29jnWL0dY2X9Q5OMjDbaDFkaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:17:24:82:4d:c6:1e:04:be:f9:da:a1:db:19:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Sep 10 13:00:49 2026 GMT
Not After : Sep 11 13:00:49 2026 GMT
Subject: CN=a891c73b0653c2f8d50b3375cfa391d3a3af84d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:14:be:a7:5f:09:bb:0d:58:46:55:22:18:
de:35:fc:f5:67:42:52:4b:3c:a9:e1:b0:cf:6b:a0:
88:50:29:ba:ec:16:99:05:9f:b2:5d:89:97:3d:a4:
69:25:a8:53:bd:54:73:54:70:89:c1:04:80:4f:ff:
7d:4e:89:6d:5e:71:17:e9:61:9f:c9:6d:3c:f3:bd:
07:f6:93:be:95:a6:12:72:88:46:92:58:18:82:a3:
3d:3c:3b:36:00:8b:23:67:7e:e4:27:3a:6b:32:f4:
a3:74:5d:35:9f:69:e4:b9:9f:11:5e:14:0c:96:ef:
60:6a:86:87:74:eb:fe:13:0b:d7:3d:f7:ef:8e:ae:
c2:ec:8e:c6:ec:e3:bf:12:d8:f9:13:74:d5:cf:5e:
78:75:8e:11:b7:07:f3:da:bc:3e:f6:fe:da:1f:1b:
1d:92:11:1f:b2:ae:5d:30:92:43:d4:5f:b1:c4:be:
c0:64:22:39:e5:e9:71:87:47:ec:5b:d3:b4:e3:05:
e7:fc:0b:d9:40:e5:6d:73:17:d4:2b:70:b9:3b:e3:
f5:c7:31:c7:70:0a:0d:44:90:f6:87:fd:cc:1b:c0:
0f:eb:de:c3:38:1a:fe:5c:7b:09:e7:db:df:be:08:
c8:98:eb:7d:60:e6:12:a8:dd:98:4f:67:91:05:59:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:91:C7:3B:06:53:C2:F8:D5:0B:33:75:CF:A3:91:D3:A3:AF:84:D5
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a2:13:53:2d:bc:e9:d5:13:e2:b4:a1:9f:5b:91:3a:d7:b8:
58:ed:62:74:e2:42:8c:0a:d0:5e:d7:b1:07:f4:b4:12:92:68:
e7:ab:2b:c2:5b:77:3e:77:a6:7e:fc:a8:a2:04:6d:ca:8d:1b:
94:11:4a:87:24:00:8e:b2:1e:97:d1:17:e1:39:38:ef:e0:93:
c2:b9:c7:d6:05:4c:76:9f:49:72:66:da:73:58:a3:89:53:b9:
30:5e:c5:4e:04:34:17:2a:3a:ba:39:f4:70:49:36:ba:69:b7:
b6:ad:2a:a2:f0:7e:43:08:30:c2:2c:08:12:d6:51:9e:47:cf:
ca:f2:85:a1:c2:50:07:ff:74:c0:3e:70:25:c5:7c:74:73:93:
cf:b5:3f:c1:76:ff:f9:f7:4c:3d:f3:f9:8e:a1:72:f4:d1:5a:
c6:f3:88:99:27:54:7f:b5:9a:d1:3d:86:ef:ac:1b:ab:5b:f7:
c2:f6:14:f3:4f:1d:6e:6a:9f:2e:4a:0b:f2:d4:ae:86:3b:99:
90:fd:fb:19:28:cf:62:df:65:5e:4e:bc:4e:67:d0:f7:9e:74:
9e:c0:22:7d:22:3b:5c:cb:1a:f5:3d:8a:11:bb:96:3e:22:a6:
dc:3a:7c:d9:08:a1:a4:0c:70:21:5b:18:5d:b8:ba:b6:e8:f8:
17:b3:4f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:24 2026 by rpki-client