Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
File: gD9h6-VXBZ20TUlXBayGRTOZVJo.mft (raw, json)
Hash identifier: eUiy5aSmWq/d8Inf9qdwGVMgwUeENPx/bJZTlz/aCnU=
Subject key identifier: 12:F2:58:6C:32:E2:57:C7:BF:F1:03:23:B7:88:12:C9:B6:39:8C:65
Authority key identifier: 80:3F:61:EB:E5:57:05:9D:B4:4D:49:57:05:AC:86:45:33:99:54:9A
Certificate issuer: /CN=803f61ebe557059db44d495705ac86453399549a
Certificate serial: 01A1054A1E1133B148A965214837BA1A710F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9h6-VXBZ20TUlXBayGRTOZVJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
Manifest number: 25
Signing time: Sun 04 Oct 2026 05:01:45 +0000
Manifest this update: Sun 04 Oct 2026 05:01:45 +0000
Manifest next update: Mon 05 Oct 2026 05:01:45 +0000
Files and hashes: 1: A5AnH5vcdik9CSB6MSoxsAkB6kQ.asa (hash: vK8uxVR5kTpCIL0Vm81LnmAZR6bLlzx/RpI95yO1UC0=)
2: ZQC4nFbuilGWlajQvrZa4A30c4w.roa (hash: 0llZ1MmgltxEgZO+1Q95nsmuakNJpLm9qN73g2AwDqo=)
3: gD9h6-VXBZ20TUlXBayGRTOZVJo.crl (hash: WaEP19z3yxfas1E7zkjmSCinIie4nvs8qDS/Ap7vy4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9h6-VXBZ20TUlXBayGRTOZVJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:4a:1e:11:33:b1:48:a9:65:21:48:37:ba:1a:71:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f61ebe557059db44d495705ac86453399549a
Validity
Not Before: Oct 4 05:01:45 2026 GMT
Not After : Oct 5 05:01:45 2026 GMT
Subject: CN=12f2586c32e257c7bff10323b78812c9b6398c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:20:f3:fb:aa:c8:48:ca:e2:4f:04:a3:54:9a:
00:3d:cd:e3:e7:b2:81:37:58:c0:30:5d:fb:47:66:
c9:93:4b:2d:14:73:b2:1d:be:4a:44:ec:11:c9:09:
31:4d:7a:d5:7a:9e:c4:aa:f8:01:65:81:4d:bc:7b:
62:3f:65:23:d0:2f:bd:84:e0:d3:73:1d:af:24:fc:
16:84:2f:e8:be:ec:0a:e9:ff:c9:6b:c5:6e:f9:70:
74:fd:57:0b:96:d2:9e:03:5f:1b:17:7c:24:71:5d:
09:54:f8:ad:6d:e2:ce:3b:58:97:57:f0:6f:45:af:
3a:df:78:6d:26:20:ba:ba:67:55:f2:50:d6:3e:e7:
5f:86:90:d8:fa:f8:31:63:1f:dd:6a:ef:77:6d:7f:
b7:27:00:4a:30:74:87:2b:17:85:1c:9f:d3:5d:32:
b1:d0:11:a6:a7:18:4a:7c:60:87:2d:ef:90:d7:2d:
0f:90:e7:1e:74:f5:3b:0b:e5:c2:31:20:be:e0:36:
d8:0a:1f:c4:c1:07:87:13:36:6f:9d:96:00:b6:f3:
d0:67:46:ba:3e:b2:38:d8:f5:31:03:9b:12:bb:79:
6e:b8:74:92:40:a6:f3:ff:3e:f0:2e:68:fe:a1:79:
b9:b0:d0:f8:18:0e:66:d3:46:46:c5:c8:1a:92:fb:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F2:58:6C:32:E2:57:C7:BF:F1:03:23:B7:88:12:C9:B6:39:8C:65
X509v3 Authority Key Identifier:
keyid:80:3F:61:EB:E5:57:05:9D:B4:4D:49:57:05:AC:86:45:33:99:54:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9h6-VXBZ20TUlXBayGRTOZVJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:e8:6d:df:e2:a1:54:02:04:9c:f9:a4:f7:5a:62:5a:36:de:
c9:c1:b9:5d:60:6d:85:53:75:19:88:87:18:84:e7:d6:e1:7f:
a0:5b:88:9e:c5:e1:30:ba:30:cd:4f:5d:32:a9:ab:1f:bb:52:
d4:56:c4:98:05:6e:77:e0:70:b8:c2:aa:c4:96:37:d9:e8:dc:
84:eb:4a:dd:b8:95:47:fc:45:cc:98:04:75:1a:81:57:7e:31:
07:75:cf:f8:48:13:f3:ce:7f:5f:c8:bd:6b:56:45:80:c4:1e:
ca:c1:24:d4:77:b1:fb:dd:84:c3:ab:48:84:52:18:8b:84:de:
8f:26:77:2e:43:a7:14:c5:8f:53:74:6c:bf:2b:fa:79:05:7a:
0f:c0:18:5f:8e:df:f6:fc:b9:25:e5:0c:b0:3a:81:49:4b:05:
6f:82:bf:de:c6:3e:2a:e6:92:0a:da:c8:93:b4:28:76:66:4e:
92:60:46:04:39:fa:ef:7a:fe:10:88:8a:e0:2e:3f:8d:2a:d2:
4f:90:91:a8:83:1d:7e:6b:a9:5c:8b:00:cf:13:a2:00:5a:c6:
cb:92:49:57:87:0f:53:1b:25:1d:99:f9:3e:10:7f:7f:91:ee:
7f:65:a4:17:64:f9:ee:ed:1f:07:c8:a8:2f:ce:ad:57:82:a3:
12:91:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:19:57 2026 by rpki-client