Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: YHAoxw/1uKj6l6tSXO5SG4ZaFhqETwp9LiVP9Qqhnkg=
Subject key identifier: 57:4D:CB:10:A5:52:78:3E:37:81:80:F2:6C:58:F8:EC:8C:FC:9E:1F
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 01A17B169C46D1A23C91C43DE71AF7340DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 0A16
Signing time: Tue 27 Oct 2026 02:00:41 +0000
Manifest this update: Tue 27 Oct 2026 02:00:41 +0000
Manifest next update: Wed 28 Oct 2026 02:00:41 +0000
Files and hashes: 1: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: 01Jonj1YS0xp70UbIIT14pgmv1TGwbkYMoBq1f677d0=)
2: zD728h1UCihkQAXpX92CPXnx1Gs.roa (hash: jxmfADV7fNflCtFxiDKR6culeD+Aw9hg4Dg9BnOAg8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:9c:46:d1:a2:3c:91:c4:3d:e7:1a:f7:34:0d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Oct 27 02:00:41 2026 GMT
Not After : Oct 28 02:00:41 2026 GMT
Subject: CN=574dcb10a552783e378180f26c58f8ec8cfc9e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7b:0f:3e:af:66:53:7b:0b:73:5b:9b:a0:50:
2b:00:90:34:87:5c:37:02:e9:a2:fe:40:11:b3:23:
f3:18:1a:ea:0e:49:ae:c5:05:1c:4d:7c:cf:72:ab:
68:00:04:fa:60:c4:c9:2a:16:5e:4f:4e:b1:0e:fa:
2c:06:14:6e:6a:dc:c2:a3:fa:b5:55:4f:ec:43:aa:
25:ee:ce:59:c9:ce:d5:44:de:6a:06:0c:2f:0f:30:
0c:14:5e:d5:3a:df:cf:2a:db:87:f2:81:92:c0:b7:
14:27:ad:84:08:f8:79:73:6b:96:7e:fd:50:38:34:
5d:26:0a:97:c1:85:40:32:67:ab:01:49:80:0c:42:
2f:e9:94:c1:04:19:5a:d3:57:19:3c:3b:6d:e6:f0:
95:85:d8:31:72:88:d1:b6:93:6b:e2:03:83:b2:df:
49:3a:17:7e:8b:3f:2c:e1:13:25:01:58:f6:a0:06:
9c:f1:f3:b6:eb:1b:27:6f:85:b3:95:d2:74:ed:ef:
0b:51:90:3d:9a:44:61:f0:b1:d1:78:54:0c:26:1e:
61:63:99:70:60:00:cf:8d:eb:46:a4:f5:4a:d1:23:
d6:b2:1b:58:09:34:05:a5:6b:3a:01:7f:ff:c1:02:
90:d5:e1:de:83:d0:c9:79:36:f5:cd:04:f3:61:36:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4D:CB:10:A5:52:78:3E:37:81:80:F2:6C:58:F8:EC:8C:FC:9E:1F
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5c:dc:4b:31:d0:e3:9b:35:75:bb:e5:84:98:4f:03:af:52:
ae:55:3e:8f:a5:7c:16:92:a3:17:c5:21:44:c0:ce:00:e4:82:
e8:f3:61:00:6a:bd:0b:87:80:6e:78:30:67:64:25:6c:10:12:
ea:ec:05:9c:50:94:f6:59:a9:a0:e4:03:6f:6e:cb:23:7f:ac:
d5:92:e7:d8:00:f7:44:b2:5a:73:98:fe:26:85:5c:a6:b8:50:
36:ea:12:c0:5d:71:0b:12:32:75:9b:dc:d9:53:df:08:32:3f:
51:5c:98:a3:b0:36:e2:e0:02:01:56:33:b4:8c:c2:6f:90:ab:
fe:3f:1d:cb:75:67:46:19:8f:d7:20:bc:97:01:81:a7:46:fb:
dd:c0:a9:14:11:c1:18:df:51:4f:fa:2d:ba:0a:9c:17:c1:03:
82:9c:e5:7a:26:c1:50:45:c7:c0:91:d3:b1:61:bf:99:e5:b2:
e4:08:00:5c:5c:85:9d:b3:8f:9b:6e:53:b8:38:b1:fa:85:4b:
63:11:72:90:34:e8:f8:c6:86:ce:19:8e:0e:41:fa:d6:f0:6d:
75:1d:1e:63:8f:c9:d5:4b:4b:75:ba:e4:e9:38:23:5d:07:ec:
2b:3c:1a:f7:19:d5:d4:15:bc:1a:3c:09:6f:4d:d2:f9:ec:11:
10:17:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:03:58 2026 by rpki-client