Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json)
Hash identifier: gAjQ1hK8V0Jov2d8MRlQRxlmDYeMUe5G0Yr37zamKIU=
Subject key identifier: 9A:30:70:DF:39:AB:89:ED:2E:35:E6:16:41:BF:65:A9:0A:2B:53:78
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 01A17D05D1F1A9C1EAFD61043538EDA9DDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
Manifest number: 130C
Signing time: Tue 27 Oct 2026 11:01:35 +0000
Manifest this update: Tue 27 Oct 2026 11:01:35 +0000
Manifest next update: Wed 28 Oct 2026 11:01:35 +0000
Files and hashes: 1: 85Q2BPZ8YrJ4JSMOhyIE7VjIm4A.roa (hash: BN/ts7p0HOLbx5n5to0Fap17/wIm1nJi+AFg7t64Ih0=)
2: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: Wsuh54/Hx2e2GY/WcFo/tivpZExCiJCZTNJWho2CooA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:d1:f1:a9:c1:ea:fd:61:04:35:38:ed:a9:dd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Oct 27 11:01:35 2026 GMT
Not After : Oct 28 11:01:35 2026 GMT
Subject: CN=9a3070df39ab89ed2e35e61641bf65a90a2b5378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:19:ec:00:6a:63:17:65:27:07:0a:25:0c:
eb:2f:c7:90:aa:d5:51:06:72:cb:fe:83:13:3a:52:
63:cc:54:e0:f5:06:b7:3c:f3:ea:77:ef:65:13:da:
45:17:12:ed:e3:2f:0b:49:6a:81:0c:86:d2:ab:29:
59:2b:e7:42:9a:51:39:96:dc:47:96:88:f9:11:37:
9a:7e:c0:ac:7c:02:a1:99:ea:ee:7d:1d:36:1e:d7:
fe:70:d6:0b:3f:0a:26:42:09:55:6d:dd:f4:61:a5:
32:0f:50:cb:fb:ed:23:9a:8b:14:f3:a1:4e:b1:13:
02:c8:5c:ce:74:0e:17:11:23:f6:87:7e:d1:e8:bd:
b0:99:0c:e6:d9:b5:1c:9d:67:38:31:a3:ef:74:de:
1c:dd:8f:38:a4:a7:ad:e2:fa:f3:b0:46:b4:15:b1:
6d:7f:23:07:15:4f:7b:c7:2a:a8:26:16:ce:a0:51:
20:4f:e6:c8:01:e7:bb:4d:78:a6:28:f0:7a:04:d0:
9c:70:8e:c5:27:9a:8f:8b:50:18:e3:71:6b:42:4a:
19:f6:1b:71:90:28:e5:8b:b8:9b:1e:52:6f:03:bb:
f9:12:9b:8e:28:92:63:70:69:9b:6b:8a:11:95:9d:
7b:a2:20:b0:fb:bb:a5:3f:2a:7b:96:95:b7:28:69:
77:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:30:70:DF:39:AB:89:ED:2E:35:E6:16:41:BF:65:A9:0A:2B:53:78
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b1:66:a8:76:25:30:5b:18:d5:92:33:2f:3e:53:88:29:15:
19:11:9f:2a:17:7f:2e:1e:bd:09:cd:94:19:86:b4:6c:c1:09:
fd:60:6f:9a:ce:63:15:e2:2b:6f:f6:7d:ed:11:c2:59:e7:e2:
36:18:9c:66:2b:0a:a8:9e:1a:d3:42:dc:34:ff:34:76:8b:97:
b7:09:ab:3c:65:cd:ba:0f:00:a7:f4:d2:17:bd:2c:68:b9:c1:
06:99:0d:c9:85:95:81:f4:95:c1:26:f8:19:6f:1f:57:6e:59:
e6:39:18:2c:db:c9:07:b6:b4:1f:27:95:83:90:70:dd:2b:ee:
78:de:aa:f8:92:4e:c7:15:15:0b:62:09:ad:a0:8f:a0:70:e2:
e6:9d:93:d9:88:82:19:de:98:0f:1e:b1:2e:90:90:15:7a:18:
e4:d4:20:01:cc:4d:5d:bb:fd:f5:84:6e:71:7c:ad:ee:a6:07:
f4:cf:76:05:df:01:b1:58:07:60:13:53:e7:b0:7e:8f:a9:47:
a9:86:53:b4:06:9c:3a:f5:b8:ae:3a:66:4b:d0:f3:4a:53:70:
05:ca:93:c4:02:64:20:dd:2e:ef:9a:a9:f8:06:26:bd:08:c7:
2f:88:41:6f:bb:3a:c2:4c:db:93:ec:c6:54:71:ec:b0:54:dc:
05:40:d9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:23:33 2026 by rpki-client