Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: FGNtHm2f2E3ezBkJAUEtdNjbIHnC8/rsjCsVJSsd1n0=
Subject key identifier: F8:19:09:35:0F:DA:05:5F:CF:BB:F1:2A:E5:E3:33:A4:44:D6:0A:79
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 01A174DD838387E6ECE48EAE1BBCC4A86430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 0B80
Signing time: Sun 25 Oct 2026 21:00:36 +0000
Manifest this update: Sun 25 Oct 2026 21:00:36 +0000
Manifest next update: Mon 26 Oct 2026 21:00:36 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: hon8IFq3l7Q0B3koEZXyOHT1syGlK3AOmNgwPmOGF9g=)
2: TsOc3ubRn91JAdgQ5aLAsWxpMqE.roa (hash: tbfSoTjpCJFJ4FddOzyLpgPxxaJetU74fFW5NiMSulQ=)
3: hN7XUM5Glyrot6zaK4scGwI3uPQ.roa (hash: NvKjw+roiIXWY/ok1kEl36Mdnj7pgwk3grKasFBC3AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:83:83:87:e6:ec:e4:8e:ae:1b:bc:c4:a8:64:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Oct 25 21:00:36 2026 GMT
Not After : Oct 26 21:00:36 2026 GMT
Subject: CN=f81909350fda055fcfbbf12ae5e333a444d60a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:61:da:4a:77:78:b9:74:93:26:c7:bb:1f:
33:36:64:a9:05:23:01:55:9d:48:64:42:fa:7c:06:
9a:5e:65:1e:5b:35:7d:60:b9:e8:4e:c8:d5:f1:74:
38:2b:c4:55:18:31:91:ac:a8:80:fb:b9:77:ef:85:
21:ea:c8:90:9f:67:90:3a:2c:2d:49:cd:72:42:26:
a1:c1:e6:1c:be:4a:8b:5b:7a:3a:e9:e3:89:67:fd:
83:4a:7f:fd:f5:1a:a5:0d:c5:ef:17:59:da:dd:15:
65:72:27:a2:19:b5:52:06:53:40:b3:1f:ed:c0:35:
89:88:d3:11:d9:2b:f4:3c:73:d6:6e:5e:53:b2:77:
46:dd:1d:29:9d:9d:a8:4a:33:50:b4:db:01:f2:2e:
cf:ea:dc:22:3a:25:35:4c:09:a4:5b:e7:95:fa:0b:
9c:e7:4e:4b:cc:51:e2:a6:22:35:81:fd:d6:ee:84:
9c:03:6f:17:7b:c9:b4:c8:86:f0:1a:e4:4a:b4:42:
e9:63:e1:bd:f2:c4:8e:9e:82:54:8a:5e:67:26:6b:
97:17:b7:5a:15:63:7b:bb:a3:78:1b:be:68:7b:e8:
29:ab:ff:8d:9c:b6:34:cd:7f:81:e6:98:85:07:99:
46:82:86:b7:f1:31:2d:ca:83:a4:9a:84:42:86:da:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:19:09:35:0F:DA:05:5F:CF:BB:F1:2A:E5:E3:33:A4:44:D6:0A:79
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:19:37:29:4f:4c:f0:63:a8:ca:40:e0:48:2f:60:46:70:9b:
ff:6f:b4:a2:58:80:6d:c6:76:cc:f2:18:01:8b:78:a1:2d:0e:
09:02:54:10:19:a6:3b:bc:ca:21:26:d2:ea:bd:74:26:62:e0:
3e:67:73:89:0c:d7:0f:e9:8a:f1:4b:f3:89:02:bf:a5:29:2a:
f7:7d:01:c8:54:e2:9d:91:88:d0:9a:0f:8a:d8:a2:4f:94:ae:
d1:0b:e3:b5:bc:89:cb:22:f3:30:ca:c5:f1:a9:10:1a:58:10:
e6:e0:a1:bc:b3:b1:0d:95:ed:3a:1a:f8:10:a1:29:a1:11:97:
7a:eb:cc:8f:0f:57:73:89:7a:77:19:4e:c5:fe:fe:df:27:18:
9e:50:e4:1e:7b:81:73:6c:ed:a4:d0:2f:33:58:8f:ec:86:00:
90:af:20:26:b3:1d:cf:3a:cc:16:56:56:1b:6c:7b:85:5e:96:
d0:9a:ce:84:3b:4b:aa:f0:46:e0:95:7a:a0:c4:6c:39:63:19:
b1:3b:08:5a:ae:40:a4:23:17:90:0b:fb:26:57:fd:96:e1:2a:
50:86:b7:4d:6e:98:0c:2b:47:37:bd:db:eb:52:66:4f:cc:bf:
37:32:21:c9:4c:e4:0a:63:be:bd:50:b5:6d:58:f4:7e:06:fb:
d2:42:b4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:03:46 2026 by rpki-client