Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: Th5m6MgclfLwUPmyoIAF55jc03U06uatC7vjnNDn944=
Subject key identifier: 7F:B6:88:56:8E:BD:09:C5:F1:05:66:8F:52:20:77:D3:51:43:FC:7C
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 01A17FCFE3CDEDD36D16180FC3876F1D4328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0CEA
Signing time: Wed 28 Oct 2026 00:01:33 +0000
Manifest this update: Wed 28 Oct 2026 00:01:33 +0000
Manifest next update: Thu 29 Oct 2026 00:01:33 +0000
Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=)
2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: 7Er/+a40scPWtbJX7uOdnPIzzzs6LOjHcpnRun6iHc8=)
3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:e3:cd:ed:d3:6d:16:18:0f:c3:87:6f:1d:43:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Oct 28 00:01:33 2026 GMT
Not After : Oct 29 00:01:33 2026 GMT
Subject: CN=7fb688568ebd09c5f105668f522077d35143fc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:60:cf:4e:95:5e:7f:4e:cb:7a:11:5e:30:
d3:04:6d:f9:a0:48:b8:e1:7c:32:3f:08:ee:bc:4c:
66:40:e8:cd:13:07:19:93:04:ce:e4:30:a0:7f:78:
1d:0e:8f:fe:bf:cb:c7:ef:07:12:a7:ec:d7:59:ca:
49:fd:a4:09:bf:c7:e5:4d:30:3f:22:68:3b:9d:fa:
1e:de:5a:50:8a:9d:f3:fe:25:bd:34:9f:a3:05:bf:
9c:be:5d:9c:fe:83:83:08:4f:05:3b:c5:94:36:42:
39:47:f0:d7:6c:f3:33:01:fc:d7:2a:08:55:65:3f:
a0:59:84:98:11:d7:23:69:26:d9:9d:ee:ee:f6:5f:
61:20:14:6b:57:6e:f0:66:c2:ff:0f:2d:ca:ff:00:
5b:7a:9a:e8:45:c6:60:b9:34:f1:76:03:b6:cd:ea:
c7:0f:10:a5:b0:80:89:61:83:b0:29:80:37:df:90:
f5:26:63:18:ee:81:f0:07:34:64:26:8e:82:71:8b:
c9:80:fe:37:74:6f:7e:c6:95:d2:c4:bc:b6:33:da:
11:92:7f:57:c2:ca:31:c1:99:99:23:db:ba:db:3c:
4d:f0:eb:af:59:ea:5c:96:97:ca:71:41:35:ea:64:
c6:6b:40:57:ce:66:4f:d4:09:71:dc:77:52:c2:d6:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B6:88:56:8E:BD:09:C5:F1:05:66:8F:52:20:77:D3:51:43:FC:7C
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b2:e2:8e:00:41:17:16:64:2c:f2:c2:1b:97:62:db:0e:f7:
87:a4:00:3c:1d:91:02:f7:59:fc:50:b2:2a:b1:ac:a6:59:01:
51:d0:4c:28:11:8f:71:9f:14:38:30:96:5c:df:c9:db:c2:ec:
be:fd:23:d0:58:bb:2f:bd:09:b0:1e:c4:ba:e5:b5:99:23:c1:
cf:17:73:d4:69:a2:3b:f3:2f:da:f8:68:fb:8e:89:4d:06:4d:
3f:42:8a:b8:53:43:d8:49:65:db:51:ab:73:ed:c7:5b:9d:86:
14:d7:26:11:56:3d:6e:55:79:3d:90:ab:0a:5c:8f:0b:78:06:
c0:1a:61:65:6f:69:03:bb:35:80:42:97:6a:8c:b2:97:8d:a5:
95:53:da:b5:f1:b1:79:d4:39:48:d3:2b:be:0d:b6:80:a4:14:
e5:78:64:69:5f:68:cb:1d:21:7e:78:18:6f:19:6a:05:66:99:
bd:14:b0:0e:59:0a:b6:da:94:69:28:0c:b5:8f:7d:fa:e3:c6:
67:07:95:87:8b:51:73:06:ca:54:a5:da:d2:62:26:b2:98:b0:
76:38:91:ca:fd:31:c6:d9:ca:ae:91:99:96:f3:d0:b2:8d:c9:
69:21:f3:87:e5:8f:d0:17:11:c7:4d:5e:73:c7:12:49:45:e7:
ef:4f:dd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:17:55 2026 by rpki-client