Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: Qe4rXRM3Ry/n7SQ1XduiWrZSwyvgaXjQ5w22b6MDzh0=
Subject key identifier: 78:F0:AB:1B:CC:50:BD:A9:C7:31:B6:F2:BF:6C:50:28:90:86:8C:AC
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 01A15A0B1F9FB0EFF850B1EC08245D643650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 0C31
Signing time: Tue 20 Oct 2026 16:00:40 +0000
Manifest this update: Tue 20 Oct 2026 16:00:40 +0000
Manifest next update: Wed 21 Oct 2026 16:00:40 +0000
Files and hashes: 1: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: zh8ncPvckMbyzbtl/IcTkH1bNlgnUwtvEvMQa69xi2g=)
2: ImbkEEuw8ciW4XZvQnskEOeml3A.roa (hash: s2ZZTRU19ZLlzKll7MUSBOLRlZD19z6bClWZADEJ0vA=)
3: xTy14ClaR4Rvu9WN2hIEK42ff6w.roa (hash: MWs9WTWsQLed5Ou31CqMyRYBYZdgWbH79vbLFld2S5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:0b:1f:9f:b0:ef:f8:50:b1:ec:08:24:5d:64:36:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: Oct 20 16:00:40 2026 GMT
Not After : Oct 21 16:00:40 2026 GMT
Subject: CN=78f0ab1bcc50bda9c731b6f2bf6c502890868cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:7f:59:63:a1:29:65:8b:20:de:9f:d6:88:
8f:96:0d:98:37:a6:4b:34:03:85:db:92:5e:2b:81:
2a:ea:54:ab:de:57:a2:cf:b1:36:e8:7f:5f:b6:d8:
9b:45:fe:c6:5f:0e:a3:aa:36:b8:05:3c:be:86:fe:
37:4e:f9:41:31:6b:ec:01:ad:37:69:3c:46:06:43:
8e:96:c4:e8:18:52:a2:ee:f9:82:e6:18:47:86:2f:
36:f4:1c:fa:d6:b3:b6:1e:05:77:6e:f8:4a:43:d4:
f8:db:8d:24:b8:ac:18:60:2e:5f:bc:28:d8:00:20:
a6:ca:71:6c:0e:e6:80:f6:63:a6:9a:5b:46:de:c6:
47:bf:ba:a3:0a:37:40:73:8d:ef:9f:31:26:29:f5:
bc:96:21:f0:60:4f:b2:63:2f:fb:77:a7:0d:0a:6b:
fb:fe:31:8a:d5:4c:d8:05:5b:69:bb:ff:f9:ce:27:
9b:a5:be:f9:db:ee:69:ba:69:3f:69:5d:a9:dc:4d:
4e:30:1a:e8:01:d4:69:ec:37:8c:e3:46:82:9c:7a:
37:84:4a:14:db:aa:a7:7e:8b:cd:75:dd:46:37:9a:
93:f6:76:d9:76:a3:84:88:34:ed:6c:9c:46:5d:d1:
31:40:72:8f:72:4f:6c:69:b1:5a:68:5c:cd:04:20:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F0:AB:1B:CC:50:BD:A9:C7:31:B6:F2:BF:6C:50:28:90:86:8C:AC
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a1:f4:8e:10:7a:d1:cf:5f:ee:1f:db:76:0e:98:c4:4a:83:
38:14:e9:bc:24:f2:99:99:29:d7:7e:ce:d5:27:31:bf:62:07:
d8:1f:e1:c1:6a:3c:a7:c1:22:81:70:a3:9c:4b:45:da:90:f2:
da:bc:24:b7:81:24:11:d6:65:02:09:8f:c7:36:82:5e:3c:5d:
60:5a:66:fe:59:50:e3:34:26:75:91:3e:f5:62:39:76:9c:cc:
f2:55:c2:a9:6a:18:30:6a:63:4b:87:85:7f:c2:8c:e7:9b:76:
27:d8:f6:71:8c:e6:d5:88:07:eb:c4:00:de:77:23:27:cd:c3:
94:31:ef:b4:e9:2b:0a:20:07:3c:9c:18:67:59:c2:90:cb:b2:
12:c7:c4:80:54:a5:30:fa:fa:9a:ec:a9:29:1b:64:d6:11:0e:
06:a2:0b:2f:35:41:2c:74:e8:a9:a0:4d:cb:12:ed:d0:fa:c2:
43:9c:b3:b5:ee:0e:b1:80:37:c2:6b:c8:bf:dd:5b:7c:23:e2:
78:eb:1e:66:6e:e8:33:83:ea:ff:a8:da:97:0a:f2:b5:e5:b9:
e4:56:da:85:2d:ca:8e:0b:63:17:94:76:bf:54:af:6a:da:ef:
a1:21:2e:3a:f2:82:1e:cf:6d:c3:ce:52:5b:88:0c:3d:c4:64:
d0:f5:2e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 23:51:53 2026 by rpki-client