Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: Y20NI3k/ap0ETbVwMC3cBij5Cafn8XTVpMUlsL91TKs=
Subject key identifier: B1:8D:A4:E9:A4:99:58:FA:F1:DC:1B:4A:BA:8B:4B:EC:34:D9:21:27
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 01A187F6B3E1743D246D9CF0B6E7B3302D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 1121
Signing time: Thu 29 Oct 2026 14:00:54 +0000
Manifest this update: Thu 29 Oct 2026 14:00:54 +0000
Manifest next update: Fri 30 Oct 2026 14:00:54 +0000
Files and hashes: 1: O5-mG7lTLGsSHbPOXl_2N2nSPgs.roa (hash: hoTvW0b4Iag7FokkMuOsi13ZXqhsvaxP4WoOFPmTwHY=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: 0okGPXl2wMSVG16jS5L28CmNMD4O0l41XcdN457c10w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f6:b3:e1:74:3d:24:6d:9c:f0:b6:e7:b3:30:2d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Oct 29 14:00:54 2026 GMT
Not After : Oct 30 14:00:54 2026 GMT
Subject: CN=b18da4e9a49958faf1dc1b4aba8b4bec34d92127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:9c:24:ed:36:42:77:dc:cd:74:68:88:cb:
3b:d5:ce:bd:b3:b0:7d:ba:98:64:16:ae:ee:32:aa:
cb:d0:4f:d3:21:77:e1:d1:b3:70:04:0b:07:2e:7f:
54:cc:db:9d:81:f4:7a:f5:c5:be:4b:85:ee:6d:7e:
06:fd:46:8b:28:c8:d2:7b:1f:2e:0e:c2:4c:bc:c8:
0d:9f:af:20:c3:aa:a2:f2:31:13:a2:62:c1:cc:14:
91:61:04:22:2a:46:5a:42:77:36:c7:65:df:82:8e:
11:78:13:6c:4e:c4:57:8d:ea:60:e5:f0:ee:49:98:
7c:75:dd:74:b7:2a:a8:62:31:51:6d:14:8d:a5:b2:
b0:45:a0:60:ff:52:0f:e1:48:dc:51:23:e4:4a:c8:
60:b8:b1:94:11:2c:11:8f:3f:9e:28:99:7d:85:c7:
05:64:ef:c6:9a:30:3f:03:45:a2:4b:7e:e7:1e:2c:
71:35:43:70:f1:7c:8f:a8:aa:31:74:e3:23:ed:d0:
46:56:93:1a:da:57:b9:29:b2:6f:cf:4b:a7:06:d0:
c7:e7:49:68:ed:44:9a:94:bc:88:7b:49:08:01:39:
48:ab:7e:d7:b1:9f:d8:fd:9a:1d:c0:ef:d9:0f:f6:
3c:43:33:2a:d2:22:43:9d:e5:40:1b:5a:00:5f:a6:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8D:A4:E9:A4:99:58:FA:F1:DC:1B:4A:BA:8B:4B:EC:34:D9:21:27
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e8:51:4d:bb:af:42:4e:3a:6a:ef:e5:6b:fc:09:7d:7f:94:
f1:e9:50:10:d3:56:87:ef:2b:b8:c7:3c:88:db:2e:08:23:6b:
1a:2f:b0:08:64:bd:41:91:f8:05:cc:a7:3c:19:d6:eb:7d:9d:
98:26:a7:30:94:8e:5a:16:4b:80:e6:7e:ac:f0:2f:50:94:ed:
7f:74:50:23:66:17:60:c9:64:d2:31:24:09:27:24:e0:00:13:
5f:5f:02:f4:a3:21:26:82:5c:4f:f5:f4:c6:39:7c:d7:b5:90:
49:02:21:60:f2:62:87:86:3b:08:75:d3:d2:7a:8c:3f:c0:a3:
3f:5a:b9:87:49:56:3e:18:9d:1b:a2:cc:3d:5d:07:28:25:28:
80:99:7a:d3:20:26:c9:6c:54:16:d3:2f:47:5c:eb:73:0d:ea:
07:bc:d7:e2:9d:df:a2:68:90:fc:1b:b2:2b:b0:72:37:ce:21:
a7:20:a9:19:8e:f4:22:39:56:56:ab:d8:b6:c6:58:55:69:85:
1f:f4:c0:1f:01:1a:ce:47:ee:98:08:7b:22:9c:21:bd:8f:17:
fd:0f:e1:7c:30:a7:83:b2:7f:fe:d7:0a:d4:e5:f6:50:24:41:
f6:9b:2c:24:2b:3f:7a:f8:61:79:a4:de:bf:58:e1:91:ee:11:
1b:ad:4a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:05:18 2026 by rpki-client