Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
File: gFOrw9SfVluUh47Y8iDOMn-XSjI.mft (raw, json)
Hash identifier: lg7qWSa8bX02cZXWBFqoLlQ/K0Ew7eAZkOrdJhTdJlg=
Subject key identifier: E2:3F:A1:EB:49:E1:5D:40:D8:FE:8C:C2:8C:BA:F3:53:53:23:09:C2
Authority key identifier: 80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
Certificate issuer: /CN=8053abc3d49f565b94878ed8f220ce327f974a32
Certificate serial: 01A05AB285B9D59DC967CE4D0C9E22E47E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
Manifest number: 012C
Signing time: Tue 01 Sep 2026 02:00:44 +0000
Manifest this update: Tue 01 Sep 2026 02:00:44 +0000
Manifest next update: Wed 02 Sep 2026 02:00:44 +0000
Files and hashes: 1: GPJ5YibQX7Qs5zXj8y25gwD4O7o.roa (hash: dw68P8crMQR+t7pqyZ2DtV9eQd5KOVoGJFGq3g9A+8E=)
2: _5dlpHFSfnZB5fPESdwe0vcQoK0.roa (hash: 648yr+Yw2hgriwVmDfKLpfCh/5rjlF0ILGcl2PNzoO4=)
3: gFOrw9SfVluUh47Y8iDOMn-XSjI.crl (hash: EDE7gfUYmvn32wMqUqVt9kqrtviNWs//8sjc65rnMq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:b2:85:b9:d5:9d:c9:67:ce:4d:0c:9e:22:e4:7e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053abc3d49f565b94878ed8f220ce327f974a32
Validity
Not Before: Sep 1 02:00:44 2026 GMT
Not After : Sep 2 02:00:44 2026 GMT
Subject: CN=e23fa1eb49e15d40d8fe8cc28cbaf353532309c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a5:30:3d:ee:50:f5:d2:d0:d8:4b:c8:53:b0:
4f:76:2f:83:e3:71:52:41:f9:e7:0d:2b:cf:1b:a8:
ff:56:05:85:8b:c7:c6:ed:c6:55:08:64:f9:89:12:
cc:c5:0e:21:fa:40:03:fe:09:07:01:32:40:b3:4e:
72:99:87:43:8a:05:46:c0:c2:4c:a6:ab:c0:57:d4:
e7:63:c5:c0:28:96:d7:b8:e2:84:81:34:01:15:3d:
79:fb:16:be:76:07:9d:88:d4:4e:f1:a3:4f:1b:55:
47:09:aa:fa:26:c5:58:d0:99:17:cb:ce:da:75:a5:
e1:f3:bc:11:b0:d7:6c:50:49:8b:f9:2e:38:a7:83:
bc:7d:46:7c:73:d6:43:a6:b2:c0:48:3f:e7:71:47:
7a:5c:c1:e5:b3:22:d1:d4:b9:cd:58:d3:2a:c1:5a:
65:73:47:ad:f2:fc:10:16:c6:a6:71:45:6a:80:b6:
8c:54:45:bf:0d:e2:b9:ee:c5:a2:c8:67:11:7f:13:
c1:03:ee:3b:d1:95:b4:f4:e0:f2:5a:31:0e:4a:e9:
05:b5:ab:f0:c5:43:44:f1:35:24:69:7f:fb:e0:fe:
7a:82:5b:9a:51:bd:e6:61:7f:5b:d8:56:ec:c0:da:
66:8c:4c:b9:fc:0f:a5:eb:e7:38:5f:4e:2c:dd:ba:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3F:A1:EB:49:E1:5D:40:D8:FE:8C:C2:8C:BA:F3:53:53:23:09:C2
X509v3 Authority Key Identifier:
keyid:80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:58:6d:ce:2a:f5:4e:b2:c4:e5:8b:03:95:97:75:96:5c:0b:
57:79:d7:a7:8e:3b:90:da:80:eb:0c:11:db:ea:7b:1e:46:fd:
2f:0b:50:8e:f5:87:26:9a:4b:39:41:3a:06:b0:38:c2:1d:8b:
03:f9:12:38:12:f9:f2:9f:7b:a2:92:c3:f9:d5:4a:1c:a3:58:
24:42:08:76:cd:73:46:2b:34:0f:25:78:1b:52:60:59:8e:8d:
d3:34:ca:d9:31:e0:c3:67:3e:35:0d:69:0f:0b:07:53:e5:0d:
b5:7a:b1:93:a0:2d:b2:08:1a:29:f8:7e:b6:ac:fa:21:c6:2a:
ad:76:7b:6e:b1:25:5b:a3:b2:b2:18:7b:03:6a:b9:f6:f2:a1:
46:a1:53:37:71:99:a3:a2:07:5c:c4:01:08:78:3f:19:c8:b1:
1c:aa:70:40:6e:5f:ab:af:13:45:b9:8f:53:3a:35:f6:97:eb:
13:7b:f9:29:3c:a0:42:f1:4b:fa:5f:4f:e9:13:ba:9a:bb:4f:
c1:6a:f4:ae:cd:99:cd:eb:ea:47:02:9d:29:cf:74:f7:74:3b:
e9:1d:79:fe:fc:69:95:12:b6:e6:75:bc:e7:e7:01:37:83:eb:
d1:3e:20:a6:93:23:bf:16:5e:33:b1:a3:0e:d3:ab:22:c0:84:
13:f2:de:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:03:57 2026 by rpki-client