Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: SjtTmrQfaVJTf0rV3uWVunb7i491n4S9vGqwHJh/v5c=
Subject key identifier: 0B:74:46:24:B5:7D:45:AB:2A:0F:BE:EF:0A:B5:83:CD:25:98:98:52
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 01A17D05B67865833F6D78874F7CB12084C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 1AD3
Signing time: Tue 27 Oct 2026 11:01:28 +0000
Manifest this update: Tue 27 Oct 2026 11:01:28 +0000
Manifest next update: Wed 28 Oct 2026 11:01:28 +0000
Files and hashes: 1: 0bqo0bUAXv_4CI9l73mqbhE8a2g.roa (hash: iEe2NrJePiOEkt4y1MNa7WFWziQ9517Q5QJMPLgLqF0=)
2: RT27iS5dmX-RpCR1NpzNSn8n2Uw.roa (hash: qBi2ogY38ZEBaQkYgKwRqyPlrZuDmr1aSjBSW1/pXdo=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: MmO0frGrWHM5N6JR3m+2RAEPzqILkTV8tkGHr/TEdNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:b6:78:65:83:3f:6d:78:87:4f:7c:b1:20:84:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Oct 27 11:01:28 2026 GMT
Not After : Oct 28 11:01:28 2026 GMT
Subject: CN=0b744624b57d45ab2a0fbeef0ab583cd25989852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:19:d7:7c:0b:22:48:5f:34:31:3f:10:69:42:
94:7a:d8:51:ff:0a:ab:05:1a:37:07:c9:64:e7:33:
33:c2:d9:8b:45:56:b4:18:a4:3e:fc:75:5c:ef:d8:
15:6d:7e:9c:94:71:b2:a4:24:74:02:95:2d:7a:e9:
ce:39:13:e0:e1:cc:68:8d:9a:cb:d4:6e:98:66:3b:
16:9d:6d:85:d7:f8:52:83:93:8d:61:9f:ca:eb:65:
90:e2:71:64:56:00:b3:76:94:93:2a:e8:79:72:af:
61:92:21:24:de:02:d3:29:2b:bf:4c:90:12:95:e2:
e1:ec:43:38:b9:45:7e:41:61:8c:0a:be:23:94:a5:
b0:ab:2c:ce:ef:a7:30:c1:7e:35:da:b5:e2:e3:20:
e6:6c:fd:de:58:fb:7c:61:3b:8f:c0:bd:d9:17:bf:
ff:8f:91:9a:84:5a:08:cb:89:80:c4:66:d5:d3:bd:
eb:91:72:b2:76:93:93:42:4b:da:2b:24:b8:82:2a:
6c:ad:3b:2b:08:5a:92:e0:46:ef:bd:56:19:6c:f8:
5e:2b:9a:2e:54:a1:a3:15:fd:41:be:3e:10:dd:97:
dc:fb:c4:da:29:ee:cb:cb:f2:95:cc:d8:0b:2c:f9:
ab:15:64:b4:53:0a:27:72:5e:70:0c:4b:21:76:a1:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:74:46:24:B5:7D:45:AB:2A:0F:BE:EF:0A:B5:83:CD:25:98:98:52
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:43:33:7a:c2:6d:c9:0d:8b:d8:5a:e8:41:ec:a7:96:11:70:
87:bf:54:aa:c2:a9:89:db:c9:7b:ca:4b:6e:66:c6:36:31:e7:
62:e5:b9:13:63:c3:4c:86:48:ae:c2:f1:e5:80:6f:8c:c9:a7:
b5:92:b3:18:a8:96:e0:0c:2f:a7:85:6d:21:e0:18:d2:f7:71:
1b:53:f2:c0:5d:22:08:7e:71:94:18:a5:ab:df:a5:4b:04:dd:
4d:95:5b:0c:3b:25:64:4e:9d:bb:ee:34:a5:7e:fc:16:98:78:
97:2a:c8:1a:cc:86:bd:06:17:4f:6a:b8:71:87:25:72:4e:1c:
2c:fa:a6:ed:f3:02:22:3b:cc:03:b5:e8:c2:33:3b:8f:34:47:
7d:e7:19:d5:9d:f7:5a:9a:14:93:4b:66:c8:63:db:22:7d:6f:
db:a6:bc:af:a6:ac:86:55:ed:91:6d:55:8d:9d:b7:73:fc:da:
2c:be:a6:87:c4:8c:e4:47:76:6b:15:e7:45:ee:70:dd:97:ca:
17:6c:e7:81:67:02:85:8a:b8:78:b4:c2:9d:9e:2a:4b:c1:27:
56:ed:2e:f4:92:87:db:af:d1:ba:93:14:6c:7c:34:b5:91:09:
9d:fc:fb:f6:f5:ee:7a:b6:50:15:ed:17:3d:79:b1:77:00:b4:
cb:54:42:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:04:23 2026 by rpki-client