Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: Pe6CTR+4x43NkqpOAL++Ctvim5UBKfZEeP81w7SgpYk=
Subject key identifier: 97:E9:A6:32:3E:26:6B:2B:29:7E:4B:6C:92:9A:2E:1F:AF:BA:F4:FB
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 01A08A55C4BB469F1EEABA1572733467DF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 0BEE
Signing time: Thu 10 Sep 2026 08:01:11 +0000
Manifest this update: Thu 10 Sep 2026 08:01:11 +0000
Manifest next update: Fri 11 Sep 2026 08:01:11 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: T73aqwJWYCI1dhKroD4LeZvZPdyLAtzmXoexWWqEfDA=)
2: nTSOIsFCXPktLiPKU0rpSqAxP9c.roa (hash: p4pPo4o8ji9IxG+yykgVyf22JPwriVlViBGbSDBIE2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:c4:bb:46:9f:1e:ea:ba:15:72:73:34:67:df:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Sep 10 08:01:11 2026 GMT
Not After : Sep 11 08:01:11 2026 GMT
Subject: CN=97e9a6323e266b2b297e4b6c929a2e1fafbaf4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ef:f6:92:21:33:56:f2:4c:d2:b6:1c:05:54:
d4:b4:f7:6a:89:f4:4e:44:74:ce:aa:f5:fe:44:e0:
01:37:f2:b9:c4:c0:00:5f:01:ae:9c:9c:56:c4:da:
6f:67:dd:9c:5a:49:68:c3:33:65:81:1e:b5:63:1c:
5a:fa:83:f2:17:c7:27:35:e8:bd:98:4a:30:a2:ca:
ab:8e:d4:30:a9:cf:a6:5e:ac:ec:1a:ad:8b:a3:16:
b6:09:91:32:a1:35:e2:09:09:c3:4a:dc:1e:e8:d5:
2c:7b:f4:d1:6e:c6:ab:f6:bf:b6:3b:d6:94:af:2c:
9e:3f:26:52:4d:43:dc:5b:b5:79:9e:6c:26:2a:5e:
e9:aa:f9:00:84:b3:2d:5a:70:5b:8d:79:07:c8:23:
67:54:ea:c9:85:36:35:e2:a8:38:90:a3:85:c7:af:
a6:08:59:ed:ba:32:a4:12:90:0f:bd:d3:b5:ca:dc:
3d:5f:65:6e:b9:6e:82:06:91:28:ab:46:13:58:73:
21:de:c4:d0:62:ab:db:36:14:f4:f5:03:be:c0:84:
5c:33:ae:88:be:cc:dc:14:04:b9:3f:0e:06:90:4c:
80:39:bb:4e:f9:da:c2:1b:8c:fd:49:e0:2d:7f:63:
8b:28:64:02:e1:7a:b2:7b:73:08:df:9b:c2:89:ea:
5c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E9:A6:32:3E:26:6B:2B:29:7E:4B:6C:92:9A:2E:1F:AF:BA:F4:FB
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bc:b5:f2:0e:3c:dc:3a:59:21:5d:4b:9f:50:88:99:46:03:
03:85:62:60:0b:17:41:1b:35:2d:fa:15:21:b7:f9:08:96:3a:
50:9f:fd:75:17:f9:d4:1c:61:24:2b:f7:84:fb:98:a3:30:72:
27:57:b7:99:88:24:14:c3:85:49:94:7b:26:1c:3f:21:c2:26:
1f:e9:ce:3e:65:43:0c:49:ed:0e:76:4d:29:5d:77:49:c4:b8:
8a:72:2e:7d:e9:e9:05:73:2e:4c:f4:d2:e3:10:00:7e:41:72:
75:a4:17:df:50:f5:82:22:3e:2d:8b:b9:20:e0:f2:55:a6:10:
78:5f:12:d2:82:cf:bb:f1:60:b3:23:bf:c4:b3:44:fb:7e:b1:
9f:b1:27:43:d2:f8:62:6c:9b:ab:70:da:e2:e1:05:2d:3b:49:
44:f3:6a:32:b9:a0:d0:45:9a:7d:71:d8:59:db:b0:e2:91:e0:
0f:e2:0f:af:82:1d:c4:67:67:d0:bc:cf:09:6d:17:79:bf:eb:
3b:04:a1:5d:5e:77:a3:a6:ce:08:fa:39:3d:6d:a6:79:7a:eb:
7f:8b:94:0e:f0:1f:4b:d7:de:4c:e5:45:3e:ff:f1:17:84:3a:
84:15:fa:0e:31:39:6d:50:f6:5b:92:23:6a:f9:01:e6:00:91:
fc:08:34:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:09:06 2026 by rpki-client