Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
File: GfRzuqwkYD6teVw6ot6t-G01H8I.mft (raw, json)
Hash identifier: zno5qUb3ZN1WmKqy1pcLNTaLwaT9HmG5h2ZVSeFnd+U=
Subject key identifier: 3C:C4:8A:7C:55:25:88:6A:43:1D:29:D4:3B:90:9B:88:DB:EC:51:5E
Authority key identifier: 19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
Certificate issuer: /CN=19f473baac24603ead795c3aa2deadf86d351fc2
Certificate serial: 01A187F62E2447DE3A8C6A9EE769CA8BD4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
Manifest number: 0121
Signing time: Thu 29 Oct 2026 14:00:20 +0000
Manifest this update: Thu 29 Oct 2026 14:00:20 +0000
Manifest next update: Fri 30 Oct 2026 14:00:20 +0000
Files and hashes: 1: GfRzuqwkYD6teVw6ot6t-G01H8I.crl (hash: U4veHyndYRHHHb24y+dJkSMMeMVGg6trHRewoq20ZvY=)
2: gNE4IPEZB9u0WmCsF4Pfsq8nHMA.roa (hash: xyIv1xmiMjTFOEwHYgnbJZRjv1TpjuI5f7fPV5Q1SEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f6:2e:24:47:de:3a:8c:6a:9e:e7:69:ca:8b:d4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f473baac24603ead795c3aa2deadf86d351fc2
Validity
Not Before: Oct 29 14:00:20 2026 GMT
Not After : Oct 30 14:00:20 2026 GMT
Subject: CN=3cc48a7c5525886a431d29d43b909b88dbec515e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f7:47:9b:a2:c1:c7:d9:7e:14:a3:33:68:48:
87:a2:7d:b9:ab:b5:80:e9:24:42:68:07:c9:e7:75:
14:02:21:97:60:6b:62:01:9d:12:4a:16:42:ef:44:
6b:fa:c9:86:55:d1:cc:9d:14:de:86:91:5e:c5:5e:
86:28:15:57:05:1b:17:eb:7b:a7:d4:da:fc:6b:e2:
d0:98:1c:df:21:69:29:91:09:08:b8:a1:4d:88:26:
aa:3b:20:35:78:a3:0c:f4:5f:c8:cc:03:36:b3:31:
24:ea:35:c9:76:a1:e0:50:fb:cf:b6:ed:5f:7c:4c:
e8:28:04:73:e5:46:73:75:cf:23:64:86:4e:24:38:
78:c5:89:6e:01:4e:f2:1f:04:2c:42:66:11:50:9e:
33:39:48:7d:c4:f2:53:8e:a0:8e:7e:7d:55:19:44:
93:e6:72:a6:6a:c6:e6:5e:98:0d:35:a3:eb:b0:c0:
49:75:47:86:cd:f8:be:75:92:4e:92:28:bb:f8:e1:
5e:22:5b:d1:60:03:60:18:40:ee:0e:ad:43:28:fd:
20:6b:ec:95:13:c5:6a:01:48:49:93:56:78:4e:19:
e5:75:6f:4c:a1:4d:0d:99:2e:82:81:0b:59:38:14:
49:1e:fb:a9:56:de:89:a1:a0:03:44:a0:e2:d3:a4:
61:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:8A:7C:55:25:88:6A:43:1D:29:D4:3B:90:9B:88:DB:EC:51:5E
X509v3 Authority Key Identifier:
keyid:19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c9:a2:1b:71:9b:38:86:c3:46:8d:80:ba:86:88:7b:31:d2:
8e:5e:bf:be:22:e9:6d:75:59:20:09:b5:00:73:1c:e3:c6:ec:
21:81:45:3f:52:3b:76:59:05:38:7c:a0:ec:b5:c7:e3:27:39:
c4:8d:a8:9c:51:4a:1d:47:73:68:99:cf:0e:09:55:15:89:2f:
28:5f:5f:39:aa:f6:62:0a:76:4b:10:66:32:2c:e6:34:fb:51:
f8:73:88:11:3b:6f:2c:59:ca:83:ca:6e:6e:7f:2b:61:e3:2e:
7a:62:c6:06:aa:ca:96:74:ce:0e:55:38:16:4a:0d:2f:f9:1e:
24:66:cf:0e:3a:91:a9:4d:8c:60:37:d0:94:b9:45:f2:5d:ea:
b6:35:af:00:04:d9:6c:af:00:c0:1d:1d:c5:2a:61:3a:3a:a1:
16:de:32:b7:ac:69:2c:b3:af:b1:37:4a:80:2f:8e:ec:16:85:
df:b0:29:ff:a3:37:2c:4e:03:dc:e1:eb:b9:0f:b7:01:bc:f7:
8a:1e:99:69:3a:4f:01:01:8b:0d:6e:53:b9:93:02:d3:de:69:
10:b5:f0:6c:79:91:43:07:12:56:3d:c9:d8:27:1c:21:02:8d:
c0:5b:6b:9d:e1:c3:4e:98:25:bf:08:4a:53:cd:41:8b:de:d9:
35:3d:30:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:10:31 2026 by rpki-client