Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: BHHYl8tnvyxxcmvxgIVGBlfbDVxV6IaOU/xzRySR810=
Subject key identifier: 11:C3:1F:99:2B:D4:C0:03:4D:80:89:8E:AC:C6:E5:65:D8:DC:E4:70
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 01A17EF3CE24D2F8748D7C269604571654D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 1AD4
Signing time: Tue 27 Oct 2026 20:01:09 +0000
Manifest this update: Tue 27 Oct 2026 20:01:09 +0000
Manifest next update: Wed 28 Oct 2026 20:01:09 +0000
Files and hashes: 1: 0bqo0bUAXv_4CI9l73mqbhE8a2g.roa (hash: iEe2NrJePiOEkt4y1MNa7WFWziQ9517Q5QJMPLgLqF0=)
2: RT27iS5dmX-RpCR1NpzNSn8n2Uw.roa (hash: qBi2ogY38ZEBaQkYgKwRqyPlrZuDmr1aSjBSW1/pXdo=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: ufrCsCGNG082yYPiegOUGmwtscXuiCk8Vu2MA7U4s84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:ce:24:d2:f8:74:8d:7c:26:96:04:57:16:54:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Oct 27 20:01:09 2026 GMT
Not After : Oct 28 20:01:09 2026 GMT
Subject: CN=11c31f992bd4c0034d80898eacc6e565d8dce470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:74:31:6a:02:0e:f1:de:dc:e8:48:b6:4f:12:
1c:6e:0d:d7:c0:00:b2:68:86:9a:ad:50:86:2f:7f:
eb:54:a5:f2:d8:0d:2c:e6:87:95:16:e5:5e:b7:b3:
19:54:52:5e:e6:05:72:2a:f5:97:15:6b:73:55:1d:
54:c4:c1:80:ae:c4:a5:3b:49:52:9d:06:24:1b:3e:
9b:f4:47:3c:f1:5f:bc:31:4b:d2:76:7d:65:87:b5:
1b:00:91:89:80:30:19:9e:79:59:31:dc:48:32:52:
7e:8a:1c:fa:a0:51:d7:a6:d4:04:61:a2:ad:b1:c5:
7d:f5:c8:03:33:32:01:51:d6:a4:ce:45:7b:f6:d3:
38:c4:d7:eb:fe:21:39:02:32:ed:7c:03:f7:54:a3:
2c:7d:18:f5:72:45:72:55:81:c5:30:f0:00:60:29:
ed:76:0f:e4:6b:0f:63:b9:38:ce:82:a2:09:71:3b:
1b:f6:29:bc:98:63:46:57:34:e4:42:13:41:57:dd:
82:15:36:5a:cf:a4:78:0e:a8:36:85:27:f3:f4:53:
41:e8:31:f3:1d:77:37:8f:64:83:d6:12:2e:e9:c1:
6c:0a:b3:75:33:03:a0:d2:2a:d5:3d:f7:e7:01:9f:
d9:c8:1a:d6:0c:4b:be:d4:26:e0:e7:d9:a6:83:8b:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:1F:99:2B:D4:C0:03:4D:80:89:8E:AC:C6:E5:65:D8:DC:E4:70
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:dd:d8:73:f1:a1:8d:4b:1d:9e:89:92:28:4e:2c:9a:32:05:
52:76:e7:25:4a:f3:28:9d:cb:ae:7a:db:10:6f:e8:ef:c3:71:
8e:ba:dd:9f:ed:98:ea:da:48:bf:3e:5b:11:ae:f8:26:1b:b5:
1f:44:5a:7a:f0:c9:29:47:e7:0c:d0:9f:ff:8b:78:f5:08:be:
49:41:96:f8:5b:17:c0:54:96:28:4f:fa:2a:d8:e7:94:a1:4b:
0f:21:13:b3:30:a8:25:00:03:80:57:3e:37:41:ba:88:a7:73:
8f:a4:34:e4:92:d4:67:71:38:6a:2e:52:b4:c2:14:29:4f:d5:
a2:ad:33:d8:c7:5e:ee:5e:d9:dd:8c:9b:3e:ac:58:c4:78:3d:
39:3d:29:8c:fd:b7:8b:89:68:cc:99:1f:e4:0d:37:b3:3d:a7:
7c:93:94:a7:63:84:5b:67:c5:ea:11:62:c7:c4:34:09:f8:09:
4b:f8:07:d2:6e:80:5a:ab:c3:5f:25:14:75:08:12:05:56:00:
45:a6:38:cb:ff:a1:a6:7c:6c:fb:34:ac:be:91:06:42:06:c9:
36:aa:80:3b:e2:c9:1b:e5:85:bc:b3:89:d7:ec:a7:49:ff:b0:
a4:f2:0e:d9:31:0c:27:61:2c:19:c1:69:78:6d:04:a9:fc:41:
c9:22:6a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:02:17 2026 by rpki-client