Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: svG6tqmDmGJz5/dm0agMJxcs83vGipza+DCLKiYbny8=
Subject key identifier: AF:C1:85:F2:0C:BC:9E:93:D1:D6:8D:58:58:79:AF:E6:F1:34:EF:00
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 01A08AFA238BBF6CDFF15DB23BA4FA5E76E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 109E
Signing time: Thu 10 Sep 2026 11:00:43 +0000
Manifest this update: Thu 10 Sep 2026 11:00:43 +0000
Manifest next update: Fri 11 Sep 2026 11:00:43 +0000
Files and hashes: 1: O5-mG7lTLGsSHbPOXl_2N2nSPgs.roa (hash: hoTvW0b4Iag7FokkMuOsi13ZXqhsvaxP4WoOFPmTwHY=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: 36lLxdKycZtUHIErUe2N7sz9VaCHY8d1aCFLJsgR12Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:23:8b:bf:6c:df:f1:5d:b2:3b:a4:fa:5e:76:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Sep 10 11:00:43 2026 GMT
Not After : Sep 11 11:00:43 2026 GMT
Subject: CN=afc185f20cbc9e93d1d68d585879afe6f134ef00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:4c:21:fb:8b:e7:ce:09:93:cc:9a:95:6f:
41:6c:62:c5:90:a9:38:56:1a:00:8e:00:98:11:9f:
9d:8c:f2:78:de:45:0a:ae:b6:65:c3:8a:9e:83:3e:
69:f1:6b:8c:72:29:1d:2a:1e:31:05:3d:52:b2:09:
70:68:de:b8:b8:72:2e:8c:92:8d:f0:e2:c4:4c:34:
73:ba:6c:35:bc:ec:63:60:f5:b8:b1:37:a8:29:1b:
d4:4e:05:eb:a0:44:c6:87:a1:c7:28:8b:71:4a:ff:
9b:fd:02:4c:22:5d:62:c8:39:5a:91:cd:65:d6:5a:
c1:4f:ce:39:f8:0d:8c:9b:94:42:4d:ea:9a:61:a9:
58:d1:bd:e2:6d:5f:79:a3:19:2b:f5:23:7f:8b:75:
9a:26:83:55:0d:44:00:34:ef:69:0e:2f:c6:84:c5:
2f:1d:c8:ea:b0:a6:f7:fa:83:dc:54:da:47:6f:c4:
a0:56:b0:64:5a:f3:65:a7:3f:8a:3c:12:44:f5:96:
04:c5:26:c6:33:b5:aa:52:29:99:6e:f2:44:1e:e6:
c6:a5:e9:60:71:0a:e9:e3:63:18:27:16:4c:77:93:
f5:e3:79:72:66:ac:0a:34:ce:49:b6:5e:a8:5b:82:
ea:6a:b6:d0:04:86:3f:5a:46:3e:53:02:20:d5:49:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C1:85:F2:0C:BC:9E:93:D1:D6:8D:58:58:79:AF:E6:F1:34:EF:00
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fb:9d:96:3f:b4:d8:f7:bb:35:ce:dc:87:d2:27:8e:20:94:
60:e6:14:c7:ba:7e:f2:48:0f:14:aa:4f:df:ee:1a:4d:94:e5:
72:bd:42:a8:c9:ef:bb:7a:e3:ca:40:ed:13:19:05:4d:2b:dd:
8c:46:fc:a8:37:0a:c6:7e:86:dc:26:b5:a2:12:32:a1:9e:0a:
4e:7c:12:8f:80:10:b5:50:8f:42:4c:f7:87:2c:8f:76:fa:f3:
1f:e1:6c:75:ac:e2:22:db:a7:87:36:b9:5b:79:8a:bb:4e:30:
17:f1:bd:0c:fb:f7:2a:cc:6e:a2:37:ca:35:b8:ec:84:79:2b:
36:2c:2a:01:b4:df:a6:db:1d:69:97:e7:80:e4:a9:4b:b5:d9:
cc:ac:5f:c7:4a:dc:f9:1f:b5:37:5b:5b:72:5f:25:7c:c7:7b:
dd:cc:d1:40:1b:e0:3e:7c:d6:6c:60:ee:51:61:ba:c3:5e:51:
a4:db:90:8b:d3:06:9b:05:de:42:01:a5:1d:7a:85:cb:64:64:
ab:25:7c:a5:9f:9d:71:50:ef:d9:d7:dc:24:45:cf:33:35:78:
3c:47:51:af:41:d6:61:a0:da:78:9c:59:57:ff:62:de:5e:1d:
c9:73:03:d5:1b:db:be:02:4e:41:d4:26:6b:91:97:ea:38:1c:
42:e3:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:38 2026 by rpki-client