Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: xwvLU9ZNMBMIZjfVjTaAJT4NYkJzJl0HsjeLoukKesM=
Subject key identifier: 56:D1:CF:66:74:5C:46:6C:68:E2:68:4C:9B:D3:D8:C2:2B:AB:FC:32
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 01A196FBA6D3EB2CE45B836D372532C7F348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1AD3
Signing time: Sun 01 Nov 2026 12:00:36 +0000
Manifest this update: Sun 01 Nov 2026 12:00:36 +0000
Manifest next update: Mon 02 Nov 2026 12:00:36 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: b58Cc7+CRobSSy44WFCtPhd1Zc/q5qM1OuD7R/9C4qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:fb:a6:d3:eb:2c:e4:5b:83:6d:37:25:32:c7:f3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Nov 1 12:00:36 2026 GMT
Not After : Nov 2 12:00:36 2026 GMT
Subject: CN=56d1cf66745c466c68e2684c9bd3d8c22babfc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:2a:a0:5d:b0:22:a6:ea:fd:97:00:41:a7:
c7:0a:18:b3:95:e6:88:c4:78:26:3d:dd:a0:3a:7c:
bd:50:bf:f1:b2:d4:2f:98:67:30:b0:f9:25:04:bd:
10:fb:bf:26:0e:b6:24:18:21:01:cb:aa:08:c7:6a:
c7:30:c7:81:b4:e6:0b:e1:b8:2e:ea:2f:6d:bb:9a:
34:04:d3:bd:aa:4f:fb:bd:ad:63:05:85:c1:dd:cd:
ca:2b:66:4d:c0:bc:22:2c:e6:29:97:95:17:cc:52:
ca:26:0d:85:16:d1:5d:2d:fd:21:8b:d1:73:a2:a1:
49:c4:36:de:29:e4:d6:3a:47:d9:26:64:51:e4:2f:
55:d5:ec:6a:82:1e:51:a2:2b:ea:bf:e9:6c:43:f3:
1d:df:9c:61:5c:db:3f:51:d6:5a:9d:39:a6:bf:dc:
9b:ee:56:4f:55:9e:e5:a2:73:43:b3:6c:32:8e:88:
11:6f:9f:f8:d1:e2:24:09:ce:2a:45:ed:ca:33:d5:
11:09:8f:51:ca:f0:01:31:84:fc:00:65:f3:45:8f:
c9:97:b9:32:51:c6:9c:a3:80:7b:35:7d:d4:57:33:
bb:75:54:9b:28:de:01:ad:ac:c0:cd:1e:d6:70:65:
ad:c1:e9:48:63:61:0a:25:eb:16:45:0e:65:24:d2:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D1:CF:66:74:5C:46:6C:68:E2:68:4C:9B:D3:D8:C2:2B:AB:FC:32
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4e:13:f2:12:4f:9f:05:95:7e:a8:fb:c0:26:da:38:9b:bb:
9b:4b:82:07:72:83:09:41:44:e9:52:4e:9c:0b:17:c0:b7:88:
90:91:d4:61:74:36:ea:8a:e3:e1:54:86:ac:7f:6e:99:06:68:
13:1c:81:0c:10:d8:c4:3f:bd:30:21:69:a6:74:14:4f:97:74:
ce:b3:c4:f5:d0:55:c0:e4:c1:93:01:db:ec:22:a8:dd:91:a1:
e6:06:b9:d5:56:bc:13:3a:2b:fb:a8:e0:7f:c5:60:d5:3b:38:
8c:c5:e0:38:38:5d:ed:d2:77:cd:9f:50:b8:1a:3d:9d:93:e2:
8c:79:a7:38:76:c6:7c:6c:a0:47:4c:ce:97:8b:93:46:29:b7:
cc:45:60:09:8d:b9:01:bb:5c:0c:23:5c:86:21:79:6a:7d:0d:
70:dd:6c:f4:92:1c:c6:7c:18:30:50:3b:04:a3:bf:e6:58:f2:
bf:6f:f0:6f:97:7e:b8:e3:d9:36:fb:c7:77:ab:ba:b7:ac:5e:
37:a4:ef:c6:ef:f5:b0:14:5e:84:bf:83:9d:24:fe:fc:9d:77:
78:88:04:23:f4:7e:94:97:36:84:fa:06:95:a5:cb:60:f3:28:
be:13:71:75:60:0c:5a:2c:69:95:db:97:e6:f2:c9:b8:4c:f7:
02:42:b1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:52:35 2026 by rpki-client