Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: yPHTpoZQlcu62E2U5OanON9RHSLV497t8ImMbeleQpw=
Subject key identifier: 50:C9:F0:5E:A3:B9:1E:DE:91:F0:25:60:15:54:68:49:3B:09:0B:79
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 01A089E76CB89FCFCB82B11681CB3CB30F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 04A9
Signing time: Thu 10 Sep 2026 06:00:40 +0000
Manifest this update: Thu 10 Sep 2026 06:00:40 +0000
Manifest next update: Fri 11 Sep 2026 06:00:40 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: /n1z0sQw6+G6AW5N5U/BzJXSP9J7JQmBNAW8vSFufbI=)
2: t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa (hash: Gojw7FbJO6oLOCFdJ+IonU5RAeRQTmH3d/fqvSSbRko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:6c:b8:9f:cf:cb:82:b1:16:81:cb:3c:b3:0f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Sep 10 06:00:40 2026 GMT
Not After : Sep 11 06:00:40 2026 GMT
Subject: CN=50c9f05ea3b91ede91f02560155468493b090b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:4d:e6:7e:e3:6c:b2:4e:6f:09:a9:ec:e4:
ea:9d:8d:51:a5:ec:34:bb:b1:08:32:89:a8:88:2c:
29:54:ae:5c:2b:5d:ad:c9:d9:54:a9:6d:9b:df:d3:
af:72:d0:f7:6d:2e:e9:39:1a:11:ec:0f:b1:1f:f5:
b0:0e:11:be:a8:8d:87:3b:09:7b:27:be:8d:60:79:
ea:59:90:e6:9b:2e:ad:e7:77:c8:c9:41:10:d9:de:
fe:1a:fc:0d:be:95:e9:93:5d:3f:dd:6d:29:fb:4c:
12:d5:35:5d:13:68:58:b4:55:14:59:45:4e:6c:38:
49:8c:e9:c2:da:1e:15:e8:aa:11:0d:8a:f6:33:98:
71:2f:b8:7f:11:76:d0:ae:c6:6e:d6:29:ae:a9:01:
68:f1:43:f5:be:22:ab:ae:52:9c:8a:42:21:45:2b:
56:4d:a2:00:15:41:f4:9d:11:41:73:01:77:11:0e:
3e:ca:5e:36:e4:d8:39:3c:85:dc:7d:54:99:47:dc:
a1:30:74:65:fd:a3:59:5d:ce:0b:e3:45:d1:2a:3c:
a1:a4:2d:08:2a:3c:7d:ab:65:a5:06:64:b0:3d:31:
69:7e:7a:c9:e4:fa:8b:a4:e1:8a:82:0c:68:e2:1d:
4d:0d:40:9e:8d:fe:1c:52:21:09:60:c9:dd:7c:1b:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C9:F0:5E:A3:B9:1E:DE:91:F0:25:60:15:54:68:49:3B:09:0B:79
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a3:e6:4e:30:1f:37:fa:05:ff:52:37:1d:cb:cf:05:85:29:
fd:d6:0d:87:12:5c:97:39:69:6f:fa:a9:8b:99:42:90:45:20:
47:da:21:4d:42:b5:0c:3c:d7:41:c8:91:80:a9:be:c3:0f:26:
6b:1d:c1:14:02:c9:2a:e6:c4:f9:98:13:75:30:a1:0f:81:22:
03:cd:66:05:62:bd:72:5b:e7:2b:d9:f3:33:62:4e:ec:7b:93:
2e:97:10:45:49:f3:aa:8e:ba:c1:4a:9f:60:6b:75:e3:6c:d5:
19:58:4f:ee:8c:a8:c4:db:a0:f6:41:4f:56:06:96:cd:59:c7:
00:9e:c2:0e:63:19:da:3a:32:fe:b5:2a:2b:04:dc:45:c5:40:
83:84:8a:61:1e:df:ed:f6:69:04:a6:7d:6a:a1:76:74:8c:7a:
39:ad:9e:e1:7d:27:b3:45:13:6b:67:66:8d:0a:66:d9:64:06:
33:2f:e7:bb:90:37:7b:00:89:01:ee:f5:ab:a5:53:ca:da:1a:
7a:14:61:73:c8:71:a8:5e:2e:74:e5:25:54:d2:fd:76:7a:ed:
a3:49:80:8a:57:89:9c:b6:18:1e:eb:87:26:79:a2:0c:16:db:
f7:57:0e:71:90:1b:fa:3d:f4:47:d8:ff:5a:79:c6:86:88:8b:
fd:53:95:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:00:11 2026 by rpki-client