Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
File: GPijrw2MDVHeLd0mWtVNq5e95s4.mft (raw, json)
Hash identifier: stDhmi0yyH/bepv3QknorQ9Z+kInzCUYbPZn9/WQBQI=
Subject key identifier: 38:0A:1B:F2:B3:4F:55:F5:22:1C:42:B5:12:6B:4E:2F:86:7B:38:9A
Authority key identifier: 18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE
Certificate issuer: /CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
Certificate serial: 01A08AFA31ADA4FF291F0BA67B643775FC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
Manifest number: 02F5
Signing time: Thu 10 Sep 2026 11:00:47 +0000
Manifest this update: Thu 10 Sep 2026 11:00:47 +0000
Manifest next update: Fri 11 Sep 2026 11:00:47 +0000
Files and hashes: 1: GPijrw2MDVHeLd0mWtVNq5e95s4.crl (hash: JCHoOGmrVeXq9Bcbc+cpjOoqIxn8T0lKgrbyIuuaXYU=)
2: q-3PkcuXvbxG2AJOGo6sUKyZOAU.roa (hash: a1DkrhlznASzhUP99TVl/s5bY4rDfTZ4JGlmLv4QaHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:31:ad:a4:ff:29:1f:0b:a6:7b:64:37:75:fc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
Validity
Not Before: Sep 10 11:00:47 2026 GMT
Not After : Sep 11 11:00:47 2026 GMT
Subject: CN=380a1bf2b34f55f5221c42b5126b4e2f867b389a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:94:9f:64:ef:e7:12:b7:e6:25:c1:33:07:
d7:85:90:f8:be:af:a8:aa:bc:1a:33:86:41:36:e2:
21:8d:5f:c2:c2:b6:6e:3e:f2:56:74:05:b2:83:9f:
3a:97:f7:0a:53:5a:8e:3f:64:97:5d:e6:9a:48:0f:
9f:03:c2:a1:a2:bf:4e:8c:0c:74:af:f6:05:44:41:
4f:17:2c:d0:3e:78:e2:16:c4:d4:55:8e:54:f0:21:
0b:02:5f:bd:68:1c:21:13:78:37:e7:67:78:f5:f5:
69:5d:92:ff:8c:d8:84:13:ee:1a:16:a1:de:2d:2c:
53:aa:8b:d3:28:b6:2a:1d:c6:d0:c0:9b:77:e1:11:
fd:18:ff:ad:38:63:e3:33:d1:bb:26:86:1a:07:ae:
85:70:70:f1:51:9e:aa:41:23:2e:fb:3c:0e:88:59:
47:e6:4a:d0:d4:53:c1:f8:90:d8:a7:60:3b:f4:55:
9f:df:dc:73:cc:2f:51:5f:eb:74:ff:03:f5:21:f4:
0b:24:e2:0e:e3:ea:0e:26:b9:43:77:55:78:bc:11:
77:07:b6:0b:ff:db:40:9a:67:22:d8:46:ee:22:fe:
6e:23:55:d9:a4:96:7f:b7:53:40:6e:0a:e2:ac:60:
52:85:09:f4:5e:65:6a:65:68:b0:7b:a2:df:b7:9d:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0A:1B:F2:B3:4F:55:F5:22:1C:42:B5:12:6B:4E:2F:86:7B:38:9A
X509v3 Authority Key Identifier:
keyid:18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:20:67:14:a3:62:9c:fd:a7:0b:32:cc:bc:8d:86:36:d8:86:
c4:0a:fe:40:ba:1d:92:87:68:cf:cf:27:1f:93:07:0b:89:cb:
74:28:31:5d:54:09:85:3a:17:a0:cb:0e:2d:01:70:b1:19:5e:
92:a6:36:17:00:7d:99:d4:fb:11:5e:24:3c:2c:a9:33:d6:e0:
31:6a:d9:5d:71:9d:f2:8b:ff:f7:84:b3:2a:9e:85:cd:ee:44:
77:db:d3:15:8d:8d:c1:4c:f4:41:ae:1b:bb:7b:c1:1c:40:08:
c9:8d:5d:38:98:8e:fe:4f:2b:b1:c9:70:9f:00:6a:1a:ad:7b:
ec:b9:05:c7:d3:1e:35:10:15:a8:e4:6f:d8:bf:78:6f:8b:7b:
94:f1:19:6d:5a:99:03:de:c9:d6:72:a1:b4:be:e7:65:5e:c6:
80:da:e7:ad:b1:8a:b4:57:86:1f:02:4f:c4:c1:d1:d4:6b:07:
e9:53:7a:5a:1b:da:4f:b8:3d:63:a8:f1:fa:7a:03:31:be:04:
a9:d9:a6:40:0f:e6:c6:85:8c:4d:63:77:55:55:7b:dd:dc:d6:
e7:86:0b:92:5c:5f:80:3a:99:0f:4a:da:26:2b:fc:ca:26:1e:
30:d1:53:b6:43:81:a8:9b:ac:55:44:57:08:f2:c9:76:55:31:
b7:21:8d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:00:05 2026 by rpki-client