Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: 7vUH6DXzczE+h2ZPYZ9J6j8W+y+P6bhOOWv5Qxn72pU=
Subject key identifier: 45:66:81:2A:62:17:2E:3C:0C:E4:01:08:A1:E7:80:43:79:11:4F:6F
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 01A05A7B986D7DF2EEA652D5F9090D4E2A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 12C5
Signing time: Tue 01 Sep 2026 01:00:44 +0000
Manifest this update: Tue 01 Sep 2026 01:00:44 +0000
Manifest next update: Wed 02 Sep 2026 01:00:44 +0000
Files and hashes: 1: ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa (hash: DP27/a5o1Ym+vesDLFqV0Tua4ny+ds0/pH34jhmErS8=)
2: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: Qs57KpUQRBk24a/quXdbyxTLp0kc0rL6BliP1oOeKZ4=)
3: Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa (hash: KqQ8TKxBYl3JumzrSj+0qt5zeDJPsxKpAnGsc38qwpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:7b:98:6d:7d:f2:ee:a6:52:d5:f9:09:0d:4e:2a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Sep 1 01:00:44 2026 GMT
Not After : Sep 2 01:00:44 2026 GMT
Subject: CN=4566812a62172e3c0ce40108a1e7804379114f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:47:cc:25:d9:be:a0:a2:df:a1:21:bc:11:
07:30:0d:20:34:f5:b1:1d:fd:ee:3a:bb:eb:c1:80:
52:ff:1d:f9:75:1b:1e:22:16:a3:a7:52:ad:d4:27:
37:5e:4b:9f:d3:8f:32:b6:5f:a7:76:06:04:1a:2b:
39:34:22:ca:78:9a:5d:4f:5f:67:27:b7:6b:5d:42:
3d:ee:e5:4c:88:30:50:73:a0:1d:a5:12:f6:a3:f9:
99:45:9e:2a:e6:bf:79:90:ee:0a:40:11:a5:0d:7f:
3c:2b:c7:a8:e2:1e:49:d2:0b:7d:80:b9:12:f3:42:
9f:f7:f4:91:53:35:33:3e:ee:16:74:8c:53:a8:64:
fc:7b:af:de:49:62:ed:43:3a:bc:24:e4:63:58:83:
48:14:67:bd:f9:9c:e0:b9:22:eb:ca:ff:cf:fc:ab:
b2:d5:51:21:7f:bb:0e:8c:df:08:91:64:d3:2a:35:
a0:7f:7a:bb:ca:8c:7a:ca:1e:a2:d6:7f:ae:d8:2c:
45:61:6c:f8:f6:cf:9f:60:58:47:65:05:ec:78:34:
ab:a3:2e:68:2a:83:69:a8:b1:4b:cf:43:be:2d:a5:
9c:fa:6a:97:70:41:b0:89:52:a0:3f:27:98:9f:63:
ec:6b:b8:e5:75:df:23:b3:d5:11:29:70:d1:cc:8d:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:66:81:2A:62:17:2E:3C:0C:E4:01:08:A1:E7:80:43:79:11:4F:6F
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:33:98:f2:d2:72:f1:9e:8e:41:b0:df:be:3f:54:4d:17:79:
fb:52:c4:b9:d3:71:ba:a7:09:72:07:25:4a:97:5c:f8:a7:7c:
42:50:49:35:fe:40:f7:fb:8c:2d:35:af:1c:5f:ce:b2:94:70:
5d:9b:72:c5:e4:26:cf:ae:5e:5e:a1:f3:b3:fe:63:55:80:b2:
c0:df:5d:2a:8c:ba:85:72:a4:4b:29:71:64:75:0a:cf:39:b4:
6b:cd:28:77:c3:c1:0c:65:1c:d1:4b:9f:cc:34:6e:3f:6e:d1:
23:1e:bc:41:3a:cf:ea:65:bd:35:0a:32:fb:f1:b5:70:2d:86:
f1:a3:6f:ac:78:6c:cb:ff:26:82:7c:ae:a3:53:85:d4:10:fb:
90:0f:74:de:b6:45:df:59:7f:4c:50:f6:6b:b1:a8:a5:10:fc:
01:b4:9e:4c:d7:3c:c3:62:aa:88:b1:7b:ea:25:a6:95:e6:9c:
59:26:b8:5f:66:40:0d:25:dc:46:e2:85:7e:2a:02:c0:88:6a:
e9:e2:42:77:58:d8:0f:04:d6:a0:c8:69:80:73:40:f1:b4:b4:
ee:0e:4b:b5:8b:d7:9d:cc:c6:da:77:ea:87:9d:ee:69:8f:ab:
26:d4:cf:4d:3f:e0:4a:01:ef:cc:50:26:42:ae:23:fe:48:6e:
72:2d:00:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:06:37 2026 by rpki-client