Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier: emPaPumyrjgJiJFI3A3/6CCbRXatV6kxvpAMz9OP7/0=
Subject key identifier: CF:C8:14:98:A0:BD:87:10:19:E7:94:02:AB:03:7C:DF:A8:E8:70:6A
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 01A12BB1DAB8CE2F3DE89C7739476B2F0CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 16:00:38 +0000
Manifest this update: Sun 11 Oct 2026 16:00:38 +0000
Manifest next update: Mon 12 Oct 2026 16:00:38 +0000
Files and hashes: 1: Qy5yKoxjLWJA1uRpC0vjfkx5IHQ.roa (hash: y7SNkohtjGeeXJKm5Co5EsY36dtQ+/7kfkwvtYcQU4g=)
2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: NI8qL3/O3a3/qc3QqyJiht4m2pnF4MAyXVmul6CuzY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b1:da:b8:ce:2f:3d:e8:9c:77:39:47:6b:2f:0c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Oct 11 16:00:38 2026 GMT
Not After : Oct 12 16:00:38 2026 GMT
Subject: CN=cfc81498a0bd871019e79402ab037cdfa8e8706a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:ec:01:26:ca:0f:ea:87:dc:ee:2e:1d:83:
a1:4c:f4:59:99:ea:a6:a5:16:3e:f9:50:5d:97:14:
1e:9a:72:3a:53:6b:68:ee:19:a0:87:17:67:4c:93:
f1:be:10:7c:30:34:c2:3b:5a:e5:de:2f:3f:a6:66:
db:93:cc:04:0e:8f:02:5b:c4:97:e0:5c:31:1d:ac:
c6:f4:80:5d:b2:bc:35:dc:b5:7d:fd:fa:af:e1:70:
fa:93:6a:6a:85:ab:a7:f2:4b:d9:aa:b8:1f:18:80:
61:e9:56:10:94:93:dc:29:22:4f:51:3c:4e:12:55:
f8:9d:e5:d5:36:61:ee:93:f8:38:45:7d:3b:2e:3e:
ae:4e:29:b5:46:a7:e7:d6:95:eb:51:2c:7b:b9:ec:
df:79:b7:17:b4:9d:3e:4d:4d:ea:22:32:e3:1c:d6:
a9:23:ec:4b:0a:c5:d2:5b:d7:83:c3:68:7a:6c:b9:
8a:1c:17:9c:a0:81:d7:5b:d2:35:30:85:0c:f4:1f:
e6:c0:ab:b5:1f:ba:81:30:50:40:22:85:21:21:7a:
92:a8:8a:bf:0e:df:ce:6f:c6:68:b8:d1:53:c5:1f:
d2:59:6e:77:70:73:49:81:89:7e:24:e4:58:8e:ae:
bc:b1:50:b5:37:87:f8:ce:4b:6b:00:b7:19:97:6d:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C8:14:98:A0:BD:87:10:19:E7:94:02:AB:03:7C:DF:A8:E8:70:6A
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:27:e1:96:64:8e:4a:db:ca:2e:89:76:5c:84:85:f6:90:0b:
d4:5d:49:a8:6b:ae:41:e7:76:8b:50:6a:21:6d:22:c9:d9:8f:
a8:7c:fe:d2:33:48:12:d8:f9:57:cc:79:75:a2:d9:6e:41:16:
16:44:a1:ab:be:cd:5d:f3:88:58:c0:32:5f:9b:1a:3f:04:19:
a2:f3:5d:80:af:9b:0e:e7:d9:fa:69:5a:7d:3b:94:04:ce:ce:
6b:27:08:69:1a:00:11:19:10:ba:07:72:15:93:de:de:d4:c9:
74:f4:47:e2:8a:75:2e:4f:02:4e:d9:04:96:8c:04:de:f0:08:
6c:5d:5c:41:00:a5:df:53:28:23:f5:65:28:41:89:96:59:49:
aa:be:6a:8d:4b:03:fb:9d:80:0a:e8:d8:6c:32:c4:d7:82:a8:
c4:7d:5e:95:77:a3:1b:17:b2:72:bd:1d:d5:11:10:73:00:3c:
b9:ad:e3:9b:e2:83:28:28:3f:d7:35:90:0d:f0:0e:d1:03:54:
49:30:47:92:16:63:9b:4e:1b:ef:72:dd:8b:70:c4:d2:5f:ef:
3b:94:15:21:84:b5:f8:5d:3f:7a:86:92:5e:b9:05:60:9c:91:
92:7e:92:c8:dc:22:63:b5:b8:f5:bd:af:ee:24:f9:57:32:23:
06:27:9c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:56:48 2026 by rpki-client