Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: K0pqBM8fQSsQz+Rgtqe4vtcJk07/VAY/ZHdEaGMCLvg=
Subject key identifier: 84:2A:9C:81:31:80:22:BD:8B:16:85:74:50:EF:04:8E:75:8C:51:3D
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 01A1558A4FA11392DBAFE65B9458CB7E84BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 1347
Signing time: Mon 19 Oct 2026 19:01:30 +0000
Manifest this update: Mon 19 Oct 2026 19:01:30 +0000
Manifest next update: Tue 20 Oct 2026 19:01:30 +0000
Files and hashes: 1: ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa (hash: DP27/a5o1Ym+vesDLFqV0Tua4ny+ds0/pH34jhmErS8=)
2: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: 97KENE0tNsZd6m9Tm1uMNiocdl5YPcTD9yQC5P4PXQc=)
3: Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa (hash: KqQ8TKxBYl3JumzrSj+0qt5zeDJPsxKpAnGsc38qwpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:8a:4f:a1:13:92:db:af:e6:5b:94:58:cb:7e:84:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Oct 19 19:01:30 2026 GMT
Not After : Oct 20 19:01:30 2026 GMT
Subject: CN=842a9c81318022bd8b16857450ef048e758c513d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6b:05:73:54:d7:1a:8b:7a:be:74:1f:da:8e:
e0:7b:0c:7d:ca:3a:3b:0d:74:1f:97:37:b7:d5:fd:
a6:19:2e:3c:8c:5b:bd:88:89:82:0a:08:1e:08:a1:
d7:66:0d:a5:4a:3d:1f:01:65:fd:19:a0:5a:e7:24:
3d:f9:f3:58:a5:e8:8c:3d:74:30:f1:dc:c8:72:bd:
78:94:a6:5c:37:62:f5:56:44:c9:84:80:96:c3:b4:
47:a0:fc:f4:df:36:6b:39:55:dd:87:44:7b:b4:7b:
4d:19:43:44:a2:ff:27:22:80:ae:bc:f0:80:a1:0f:
53:48:97:33:82:95:af:6d:2a:51:49:1a:96:48:2a:
fc:8a:2b:60:7a:51:4a:24:b1:a9:3f:86:4d:cf:ba:
12:4e:18:34:6e:81:3d:42:e2:ef:52:99:37:d9:ae:
26:2b:4b:f2:2d:b3:b7:3d:de:4b:31:50:44:17:90:
c3:6c:b5:b1:75:28:84:1b:3d:05:15:4d:6a:a0:bf:
b9:3d:b8:08:fa:f7:a1:0e:bd:f6:b2:56:a6:48:f7:
5f:e6:3b:a2:98:23:39:8b:2c:25:98:54:a4:63:69:
9b:8b:2c:d9:7d:4f:28:d1:08:c9:7f:72:51:d7:0e:
78:25:61:e3:d2:b6:33:99:02:ed:f5:67:2b:a8:49:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2A:9C:81:31:80:22:BD:8B:16:85:74:50:EF:04:8E:75:8C:51:3D
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bb:da:1d:a1:dc:ea:b2:e3:0b:e4:46:e7:60:5b:73:96:0d:
11:fc:69:7d:68:c4:1a:47:ed:f9:16:cc:2d:ec:af:7c:f2:d3:
e6:6e:05:37:8f:94:0a:44:de:93:9e:fe:e0:80:76:34:87:68:
41:ea:ef:75:93:35:43:e8:1c:62:76:4a:3f:fd:d7:6f:bf:08:
da:7f:07:7a:61:b3:10:f4:0b:43:9d:a8:8a:4d:ed:09:48:71:
4b:25:cb:9d:dd:0d:24:47:73:3e:f6:b3:16:c1:7f:69:88:1d:
20:78:b1:02:49:61:e2:73:ba:0f:b4:1c:59:d8:a8:a3:b2:8e:
02:c1:7c:03:13:de:ba:d7:65:1d:5d:37:84:d3:f5:9e:af:b7:
e0:34:bd:96:f3:9b:ac:da:dd:c8:e9:92:dc:4e:9e:63:f2:c9:
c1:72:c1:10:31:48:0e:06:aa:0a:e9:38:2d:a3:b0:b6:90:13:
19:1e:af:b4:13:b2:c6:e0:d5:61:a4:ce:09:79:d2:e8:ac:85:
80:ba:1a:82:eb:93:31:dc:aa:ea:97:8d:38:d1:6a:5c:9c:4a:
0b:87:9a:ec:0f:39:32:27:90:49:6e:71:37:1c:17:8e:18:b0:
eb:d3:75:e3:3e:69:76:fd:f9:5a:a0:c2:75:c1:86:6f:8a:6f:
42:aa:e2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:53:40 2026 by rpki-client