Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: DXNr3GbB896lgGNHkIG+h9QYc3vinxbFUYgk0sUBkKw=
Subject key identifier: B8:DB:37:94:3E:31:DB:D2:8A:A8:F6:47:9E:A5:EC:FC:50:41:0B:9F
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 01A1803DF6E12B37A58F3AB3532282CED482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 15E8
Signing time: Wed 28 Oct 2026 02:01:46 +0000
Manifest this update: Wed 28 Oct 2026 02:01:46 +0000
Manifest next update: Thu 29 Oct 2026 02:01:46 +0000
Files and hashes: 1: MKLnBwEoTvJQ6Ll9HAStk_6b-lo.roa (hash: UcMYN8ihICS5eRjwAvcwUGC2jCQeNNKHfqsuNIFnBhE=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: +ZbuLjaC1fvVA6XcdwqoBZ7GP0S16UIqfA5BWQoqCgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:f6:e1:2b:37:a5:8f:3a:b3:53:22:82:ce:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Oct 28 02:01:46 2026 GMT
Not After : Oct 29 02:01:46 2026 GMT
Subject: CN=b8db37943e31dbd28aa8f6479ea5ecfc50410b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:01:e4:ee:32:28:40:09:58:1b:47:f8:58:
c8:90:3d:bd:3c:10:1a:45:88:98:d5:74:01:58:01:
7f:51:ac:07:01:91:1a:5f:b5:7c:ac:20:19:b8:eb:
d4:9b:fc:0e:ce:b5:f2:7a:4c:31:85:66:ee:1f:8c:
c0:5e:4c:64:52:7d:c9:88:6c:c8:ea:63:a9:b3:11:
6d:ca:59:20:44:3f:5e:fa:55:68:eb:3d:d3:33:84:
f4:2c:26:49:cf:b7:9a:d8:c2:3e:20:89:d5:fa:43:
35:7a:63:b4:a5:de:7d:40:3f:7c:bf:d9:72:4d:9a:
da:60:37:61:b7:8e:7a:a4:0e:ed:22:ae:00:88:6b:
2f:8f:58:7a:d5:53:4e:6e:a4:f2:a9:50:aa:a0:c6:
49:42:e2:c9:6e:87:dc:0c:23:3b:04:0d:07:ca:6c:
86:c0:1e:30:7d:4c:20:f5:46:48:0e:39:dd:3a:b7:
9d:ea:7c:83:a8:c5:cf:f6:86:72:e0:cd:31:ae:0f:
23:8a:a7:6a:13:32:ed:7e:ad:42:cc:1a:46:86:8b:
7b:4b:82:d4:67:a1:ef:97:bc:d1:53:07:67:1b:9e:
74:8a:4c:38:ac:62:bc:b2:ed:26:27:ec:6c:72:41:
61:49:68:ab:90:08:ff:d3:9f:0f:d6:3f:eb:e5:30:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DB:37:94:3E:31:DB:D2:8A:A8:F6:47:9E:A5:EC:FC:50:41:0B:9F
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:df:14:fa:b7:53:1f:be:51:08:96:d3:c2:38:f7:b6:36:6b:
28:13:d9:0e:cd:96:6d:4e:69:60:d1:8f:39:88:62:2a:b1:eb:
2e:88:2d:fc:10:90:79:bc:60:7a:1d:29:44:97:22:9d:73:85:
30:82:b1:47:40:a3:1b:93:f0:73:66:d1:f9:b4:d3:4c:bf:44:
16:d5:19:cf:6d:e0:c5:67:ec:11:13:1e:02:4e:58:1c:6c:f9:
e6:51:50:03:48:18:32:a0:85:54:3c:68:18:81:87:0c:b3:ec:
c6:33:c2:f1:8d:c7:13:6a:97:72:1e:b3:e0:2c:0e:02:be:c0:
98:b2:83:ed:ba:78:20:db:2f:35:6a:7c:83:6b:59:6c:cc:c3:
67:7d:ba:16:87:c6:92:5e:6a:a9:2c:1d:94:05:13:f0:82:c1:
f1:33:7b:41:3d:d0:27:ef:2e:b0:15:0d:76:ea:be:8b:99:10:
1d:b4:9b:ce:93:8f:45:a6:71:b2:e8:46:b8:9b:6e:78:13:65:
43:bb:aa:08:b4:0c:58:89:b0:86:2d:b9:6f:25:d4:10:5a:1d:
ca:9f:66:2e:77:be:21:8a:89:30:b6:17:25:ae:91:bd:40:d4:
68:c9:62:84:dc:4d:cf:30:27:b9:fc:48:8b:95:bc:40:34:48:
bd:1f:a6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:25:03 2026 by rpki-client