Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
File: gq09xArNGFL8dKzdN9jwe7sCXRg.mft (raw, json)
Hash identifier: ySzEAUxI4yumyT61+tDCrAhXAh6NeM0Jdx4x4NbiZt0=
Subject key identifier: 01:37:A2:46:C7:01:94:8E:B3:8C:99:50:89:D1:12:1A:B9:26:F6:37
Authority key identifier: 82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
Certificate issuer: /CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Certificate serial: 01A137B5EF09C6F50C49D27C1A39281ADDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
Manifest number: 0689
Signing time: Wed 14 Oct 2026 00:00:32 +0000
Manifest this update: Wed 14 Oct 2026 00:00:32 +0000
Manifest next update: Thu 15 Oct 2026 00:00:32 +0000
Files and hashes: 1: RRfH67NRANb78QCHIsNktj2AM8M.roa (hash: Kvb0sz/yAiVAWW/vkTFZtCm8iDPULJVC9JDaAm74c0I=)
2: gq09xArNGFL8dKzdN9jwe7sCXRg.crl (hash: Bbk2W5CRK2V9Ch6c3yZ/TR9MQg9BGfcfDlAR+SbVgX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:b5:ef:09:c6:f5:0c:49:d2:7c:1a:39:28:1a:dd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Validity
Not Before: Oct 14 00:00:32 2026 GMT
Not After : Oct 15 00:00:32 2026 GMT
Subject: CN=0137a246c701948eb38c995089d1121ab926f637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:88:9e:aa:e2:e9:92:26:34:b8:07:a0:ad:
f5:78:68:85:8e:8b:f9:1f:44:18:45:ef:48:ac:2b:
3e:70:02:de:1a:a4:33:2f:98:72:b2:46:ad:4d:b3:
79:cf:73:ab:61:1b:fc:92:ed:9b:fe:6e:2e:e3:09:
cb:aa:1c:ee:24:4b:e2:43:97:5d:a6:cf:2c:e7:35:
d2:66:fa:22:20:59:53:83:56:ac:21:bf:db:3a:b4:
53:8f:44:8b:e4:c1:0d:83:9f:75:fd:1b:d5:82:b0:
b2:1b:1a:bd:e3:ae:c4:ad:f9:91:1d:06:6e:1e:52:
48:51:fe:db:50:e1:3f:ad:62:43:c5:be:ae:44:91:
ae:b6:ad:14:65:92:43:e7:df:47:8b:52:05:a8:9d:
61:74:20:42:8a:22:7e:47:1f:33:5c:01:35:37:9c:
54:45:a5:ec:06:ee:e6:66:03:a5:4c:28:d9:b0:ae:
c5:37:ce:6b:63:0c:08:51:4a:46:c1:1f:7a:e9:33:
9a:c2:ba:00:b6:54:92:e3:23:41:6e:fa:0b:38:de:
33:c7:38:69:78:a1:5e:d2:be:3c:32:4b:cf:a0:7e:
f1:7c:0a:7a:fd:c0:dd:1d:23:7e:d0:13:39:52:80:
e8:35:28:0b:9e:54:09:6e:87:68:5a:3b:d6:02:d2:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:37:A2:46:C7:01:94:8E:B3:8C:99:50:89:D1:12:1A:B9:26:F6:37
X509v3 Authority Key Identifier:
keyid:82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a0:a6:15:ab:25:a3:c6:26:4c:07:0b:d2:7d:ba:c1:a1:86:
56:aa:5d:72:34:39:25:26:48:b3:27:a4:b6:df:af:f7:64:48:
0f:e5:6f:b3:45:03:de:50:9d:01:2d:46:32:47:9c:ee:98:e0:
cb:16:d5:f2:02:d7:74:dc:0c:e7:32:3c:70:be:6f:f9:81:6e:
00:e8:f0:f2:81:72:9e:fe:31:c3:55:1c:18:3a:7b:c6:04:11:
ac:42:b8:f5:1d:46:44:9f:ee:34:8c:28:1b:85:01:af:de:57:
1f:d6:2a:99:f5:b4:cb:40:15:4b:cc:0d:b9:fe:18:a3:41:a9:
1d:57:0d:1e:07:08:51:79:3b:b1:29:85:9f:32:81:96:1a:3b:
bd:3f:ae:14:2e:5d:3a:0b:fc:45:50:e5:92:a7:74:d3:78:14:
a8:ca:6b:22:4c:3b:f8:87:51:c7:ec:24:20:c9:46:5e:ec:9e:
54:7f:32:ab:d9:7a:a4:fd:21:54:9d:35:f0:33:4a:42:68:c4:
81:23:b6:24:c1:2c:8d:1b:eb:12:89:ce:77:1c:df:6e:9d:b4:
d1:46:b9:39:a5:61:26:d8:b5:a4:d0:8e:b8:32:dc:19:8c:37:
f8:d8:7f:9f:14:12:25:8c:ec:c7:a4:ee:23:79:08:22:22:39:
06:d7:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:07:58 2026 by rpki-client