Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
File: GnZ2d6M9OnmfNkOEKW30apHTkn8.mft (raw, json)
Hash identifier: TJLslhS60+5xjmRNFcYVKG8fPEPbR8+Uyp3OlYxXj9A=
Subject key identifier: 41:30:8C:FF:E3:8D:C3:87:1A:CB:82:9E:A2:61:64:6F:6B:F8:AF:BF
Authority key identifier: 1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
Certificate issuer: /CN=1a767677a33d3a799f364384296df46a91d3927f
Certificate serial: 01A1769509CB63DEA3B93D3354C4DD05625F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
Manifest number: B2
Signing time: Mon 26 Oct 2026 05:00:41 +0000
Manifest this update: Mon 26 Oct 2026 05:00:41 +0000
Manifest next update: Tue 27 Oct 2026 05:00:41 +0000
Files and hashes: 1: Cxh4PhTNcstArwRpLICkDHSAnkE.roa (hash: OJ/6l8LcGnGNKOGvKKW53QO+Xacf4TO/xDXAZE6mzXA=)
2: GnZ2d6M9OnmfNkOEKW30apHTkn8.crl (hash: IQH3vzsJT2d/Ipl1o08Xsdd3e1i/zA+WDKDr3DmED78=)
3: Mz6b9RE1a7PQVFNLNaep4PvMXLo.roa (hash: nsEHtmuLKoEjphj16JeJMAKFgiSN3+GdZGkD3234iFM=)
4: Yi0TKtM0nQuln6ka8POKCK5eqkA.roa (hash: 1OzTKQ02jIhXuSZBpi43UbeD8IkwLG7/H92g3GIwi9E=)
5: cLwsvL062UHY2NWasAhe0el2t4g.roa (hash: CImORy1DAVhb5txV/FdsWzrP7esG2NdvlSEYTEDPBuY=)
6: mU0gWqVg1HBT44ZXxn8T_KBlAjI.roa (hash: 7pusZvkMpb7VcSYsj2xehhYrZkhM308klNZu6IksJ6k=)
7: narWmTNN-iVSVw7MPTKk2ZAQD1w.roa (hash: J/H6097eg7tRkkWlKYldBfxYKU2ElEuNEqgUee+4WC8=)
8: vRgxmWXzNodvSG8_D9abHZ2m5Es.asa (hash: fWmfZRjLdd3RRZ5Avb54DnOuwjol/RjRIZpj5dircvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:09:cb:63:de:a3:b9:3d:33:54:c4:dd:05:62:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767677a33d3a799f364384296df46a91d3927f
Validity
Not Before: Oct 26 05:00:41 2026 GMT
Not After : Oct 27 05:00:41 2026 GMT
Subject: CN=41308cffe38dc3871acb829ea261646f6bf8afbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:19:d6:7f:37:24:db:fa:58:10:90:ad:6b:
00:4b:30:09:cf:0f:14:a6:9e:2e:66:79:97:21:06:
bd:53:2b:a7:e2:94:0b:e5:e9:b3:16:3b:f8:83:73:
cd:ff:c5:97:17:93:69:c4:d5:c3:9b:76:8c:22:28:
23:3c:fc:f4:00:66:19:b6:f2:ad:46:53:40:61:4b:
d3:a0:20:b7:c8:37:eb:b9:3a:90:0f:97:a7:3e:89:
dd:86:22:68:df:17:78:44:14:96:8e:d7:c0:a2:db:
e4:1c:41:ce:35:7f:21:bd:c9:52:8d:dc:d8:f1:ac:
d8:1e:06:1f:b1:8d:2a:ce:4b:99:41:f2:27:97:61:
8d:f6:10:48:5d:ce:4c:6d:58:cc:91:6d:58:3f:05:
bf:f4:b6:72:6f:d4:03:ae:46:1c:80:5a:a4:65:f0:
a0:b6:b9:0e:45:5a:d0:c4:5a:af:25:f1:db:f4:5e:
12:f9:ac:c4:ac:d0:6e:4e:a6:10:aa:04:2b:1a:96:
1d:92:01:c5:12:27:b4:40:96:99:2b:eb:14:f4:1e:
54:a8:fa:56:1a:77:b5:c8:7e:79:cf:a9:af:7e:4c:
33:9a:15:bc:dd:e5:b6:08:5e:71:13:6f:58:51:b7:
cf:50:b5:a3:d4:5e:be:a2:e0:65:b2:ed:b7:78:77:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:30:8C:FF:E3:8D:C3:87:1A:CB:82:9E:A2:61:64:6F:6B:F8:AF:BF
X509v3 Authority Key Identifier:
keyid:1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4c:94:8c:fd:b8:3f:d5:fe:c0:86:9c:0d:0a:47:8b:63:31:
6b:20:23:0b:59:ca:7e:fb:6c:f0:20:c1:8a:60:fa:a1:04:6a:
29:93:83:5e:e5:5a:25:a4:e7:c1:42:cd:a0:85:ec:d7:90:9a:
43:ff:6d:88:f2:bb:6e:7f:6c:3e:bf:f4:de:0c:d7:47:a8:19:
4e:42:da:92:4c:50:a5:c1:c2:f5:20:c6:26:07:ac:61:95:5f:
04:92:a2:d3:02:99:73:cc:0e:79:3b:52:28:82:b9:b9:02:10:
36:aa:50:ef:62:74:76:c8:6a:85:e4:76:41:01:82:e5:ed:03:
01:ad:00:49:7b:a7:64:ce:ff:bc:df:b7:aa:3d:71:82:b0:89:
49:a5:4e:39:ce:e9:2f:00:75:88:e0:83:07:fc:3b:a7:d5:a1:
cb:c6:7f:96:06:9e:c6:6f:2b:15:02:fd:78:38:06:11:4b:db:
38:3d:7d:9e:ca:cc:48:01:b7:9b:1a:aa:58:2b:fd:8e:64:e7:
bf:e0:75:27:38:b0:0f:8e:9d:18:cb:4a:f3:8c:f3:f5:e2:b2:
b9:4a:a5:92:c7:32:c6:d3:7e:12:5d:7e:b3:1d:8e:04:b6:3f:
fc:9f:2d:86:73:dc:6f:b2:25:d7:e7:64:e9:96:a0:0c:42:35:
48:ab:e0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:04:35 2026 by rpki-client