Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier: 8OeZVkZTcLmawfV/G7mJM4FmMlVM4xkYUbFOB64HQ64=
Subject key identifier: 83:6D:70:0F:F2:77:49:BF:AC:F7:59:AE:DC:D1:BB:37:2A:E8:63:48
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 01A14BABC162C993D64BBE3DB2FCC68ECB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number: 1AAA
Signing time: Sat 17 Oct 2026 21:01:49 +0000
Manifest this update: Sat 17 Oct 2026 21:01:49 +0000
Manifest next update: Sun 18 Oct 2026 21:01:49 +0000
Files and hashes: 1: 75SRw9aNyewbtPYAMH8et8hfSr4.roa (hash: Ef79opNAcjrl49Rm2x5OxhpX27NyaA68e2jdXKrtpHA=)
2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: tALc+TtG3iE7pzo8MS35lQv4DNIMxeh43/p/P5TVmHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:ab:c1:62:c9:93:d6:4b:be:3d:b2:fc:c6:8e:cb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: Oct 17 21:01:49 2026 GMT
Not After : Oct 18 21:01:49 2026 GMT
Subject: CN=836d700ff27749bfacf759aedcd1bb372ae86348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:4c:0c:76:59:44:0d:c7:51:82:92:a9:cc:
88:0a:9f:ef:92:a7:28:ce:e3:39:42:8b:45:f8:61:
56:0d:75:6c:dd:b1:de:92:04:a2:c0:8b:0d:7f:61:
a3:48:2f:dd:19:cb:a6:db:1a:0b:04:42:fc:f5:e4:
fe:b6:e7:6f:10:5a:65:5d:9b:0a:ac:5a:a3:d7:c8:
5c:21:00:7d:de:73:a7:05:8a:bd:49:51:e3:f4:53:
4b:6e:c6:04:85:e5:bc:77:ba:1f:94:9b:54:bf:81:
25:b0:73:05:c9:da:66:d6:57:16:7a:fb:6f:06:ca:
c8:e0:78:fd:fd:09:ad:ff:af:c9:34:e0:52:fa:f0:
27:89:d0:97:50:e7:ad:33:9e:8e:c6:64:74:39:85:
35:a4:61:3c:32:be:60:93:a4:48:81:99:ed:5c:c4:
6a:6a:1b:ea:64:f5:4d:a3:16:75:44:28:80:42:f9:
d2:50:b2:ef:23:d9:8f:f8:28:30:4a:de:dc:6c:5a:
34:21:81:36:ed:df:62:da:eb:7b:17:9e:18:0e:58:
bb:a5:00:27:5d:89:00:e1:ec:44:36:d2:0d:af:62:
c7:ee:8c:a3:9e:54:cc:da:a6:ec:b5:b4:9b:62:a0:
d9:77:4c:97:d9:c6:db:12:0b:6a:3b:fc:55:c3:13:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6D:70:0F:F2:77:49:BF:AC:F7:59:AE:DC:D1:BB:37:2A:E8:63:48
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:61:0b:ce:28:88:64:cf:bc:83:51:37:78:32:8f:d1:f2:5c:
4e:b4:60:3e:0d:62:ed:d9:4e:a2:75:3c:7a:7c:27:28:23:37:
87:79:e2:75:da:4c:ae:e8:d1:02:16:3b:54:4f:ce:d4:2c:53:
ef:f1:31:bf:3c:b7:ed:81:37:32:a1:5c:08:ed:e9:09:2d:1c:
69:ff:24:e4:25:21:f2:a9:9d:d7:4b:5b:e6:f7:c3:f4:bb:f7:
0d:78:15:18:da:60:54:c7:82:3c:0f:fa:d7:64:1e:1b:82:c6:
37:ce:aa:e0:0e:50:a2:2b:0f:e4:af:eb:7e:c9:4d:21:05:f7:
43:52:ac:5a:6b:0f:18:7e:43:3a:73:bb:13:ed:17:53:ee:cb:
47:32:bf:91:07:78:46:4a:17:ed:8b:5b:bf:98:e3:69:53:d5:
5a:f8:1d:03:db:dd:14:e4:67:d2:9f:18:0f:4a:31:ca:3d:86:
ba:12:c3:79:21:9d:24:3d:cb:2d:62:13:91:10:5e:4c:b7:9a:
94:4e:d8:19:9a:a2:b4:6d:8c:f4:02:21:a4:fa:70:a7:42:14:
cb:00:60:fb:6f:0a:8a:c1:cd:a9:6b:8b:f2:55:c5:df:85:38:
20:bd:10:17:cc:ce:3c:5e:05:de:be:99:62:6e:d1:0b:10:a5:
79:b9:00:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:50:58 2026 by rpki-client