Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: VhzQooR2Tf3OlS29v3gV2fLR6Ah/ZeNaHkmJPS1kHAE=
Subject key identifier: B9:4E:15:E9:10:D9:17:24:B8:AB:08:6D:BC:1E:99:56:5E:A0:7B:49
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 01A08C7B3A2B3AACB9D87D60DB2112016DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0C6C
Signing time: Thu 10 Sep 2026 18:01:21 +0000
Manifest this update: Thu 10 Sep 2026 18:01:21 +0000
Manifest next update: Fri 11 Sep 2026 18:01:21 +0000
Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=)
2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: mgEwppXn/DDgA/ybDz6UhlD4+8M/hBBDR4I6ooSkKMU=)
3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:3a:2b:3a:ac:b9:d8:7d:60:db:21:12:01:6d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Sep 10 18:01:21 2026 GMT
Not After : Sep 11 18:01:21 2026 GMT
Subject: CN=b94e15e910d91724b8ab086dbc1e99565ea07b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:cc:b6:2c:44:14:4b:ca:0f:14:29:31:b8:
93:59:a8:7b:8b:ea:08:9a:4f:44:3d:e1:83:8e:30:
c1:c5:43:8a:08:91:00:cc:b3:2b:3c:1b:4c:9a:a8:
13:d6:aa:97:d2:5a:e9:6d:d0:15:eb:90:09:c2:cb:
a0:d0:69:63:21:7e:8d:d5:30:17:c4:d0:68:bc:8a:
2b:84:8b:99:14:3c:28:77:70:2f:23:48:58:d8:d5:
94:da:97:d5:fd:10:51:f4:2a:82:e2:2c:b1:55:67:
b1:32:b8:49:8e:ab:4c:a5:91:0e:43:15:d3:92:25:
42:cb:20:fc:69:d9:a8:0d:12:56:c3:54:23:ee:73:
3a:52:1a:d0:32:86:db:85:df:39:59:65:42:5d:6b:
d1:cd:bc:09:01:ae:9e:0a:c3:a6:73:af:a4:6a:ab:
02:6b:eb:77:9e:59:9a:40:f5:a0:71:96:62:3d:3f:
09:e3:c5:2d:72:71:42:0d:2d:7c:39:64:e2:e7:92:
ec:22:db:4e:85:91:2c:21:66:5b:22:41:fe:72:8f:
d2:2a:9b:8e:b5:a2:0f:a0:37:a3:a8:dc:12:af:42:
7c:26:f4:c2:d8:a6:4a:f6:7f:28:37:15:de:0a:e5:
79:78:29:49:af:29:68:7d:a0:f6:5a:41:0e:a4:9b:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4E:15:E9:10:D9:17:24:B8:AB:08:6D:BC:1E:99:56:5E:A0:7B:49
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ae:12:3c:bd:65:77:ef:43:c1:f8:c2:80:8e:a8:23:95:a7:
cf:10:95:be:01:7e:d3:49:41:90:c0:d8:94:e2:46:ab:62:ed:
e6:6a:96:dc:d8:57:ff:dc:07:95:fe:bf:24:ac:ca:4e:8e:1b:
3d:f8:38:c1:2c:4e:b5:0b:c6:c7:69:26:33:dc:f6:34:2c:c3:
bf:24:1a:57:93:55:54:80:41:dc:bd:42:b8:c3:ba:b9:63:a8:
01:ad:ef:85:cc:59:66:d6:0d:83:8a:2e:ac:4c:fd:d9:ca:53:
08:46:79:c1:17:b1:fe:43:c7:fa:c5:2e:03:db:7a:5a:89:b1:
63:d4:65:cb:b0:00:90:72:d3:e7:22:90:9b:56:10:5f:d7:7c:
b3:21:4d:f3:68:56:f3:4e:0e:61:26:c3:24:3f:7e:f7:13:5b:
24:60:65:67:5b:5d:3c:30:cc:43:89:5f:16:40:37:f5:56:bf:
65:11:4a:23:8f:6c:90:ac:63:e4:e7:17:08:d5:a1:e2:c9:50:
9b:5e:88:f7:0c:ca:8a:16:81:39:c2:bf:9f:c1:1d:6e:59:03:
a8:cf:db:31:a7:5d:6a:d1:08:8c:1d:8f:fd:13:4d:88:d7:01:
64:81:08:33:11:ca:33:dc:93:f1:13:f9:0e:72:42:2d:db:dc:
46:c5:33:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:53:43 2026 by rpki-client