Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: OIoqAocLtb3+QVPs/eBor78H9sp0dhi8RtXmXgfz0zg=
Subject key identifier: 98:E6:0C:89:DD:12:2D:76:53:99:05:67:14:CA:5B:A6:61:2E:FB:8A
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 01A080E4914FC5C16634A98A028EDF8D653D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1A43
Signing time: Tue 08 Sep 2026 12:00:58 +0000
Manifest this update: Tue 08 Sep 2026 12:00:58 +0000
Manifest next update: Wed 09 Sep 2026 12:00:58 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: Zp7fQiki7ED1h4i4c2V9zQEMLAUnOw9+jb5ACcFcnL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:e4:91:4f:c5:c1:66:34:a9:8a:02:8e:df:8d:65:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Sep 8 12:00:58 2026 GMT
Not After : Sep 9 12:00:58 2026 GMT
Subject: CN=98e60c89dd122d765399056714ca5ba6612efb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:be:7a:37:a4:9d:0a:4f:53:91:7b:26:e3:
43:59:df:64:cd:9f:19:db:1b:3f:80:80:4c:30:27:
f9:44:4e:f3:0a:25:80:f2:f1:28:04:ae:c4:e4:60:
be:48:db:b5:ef:de:5c:c3:f5:48:cd:0b:6a:67:b4:
8a:35:3e:3a:de:6c:16:14:a0:a4:a1:8c:a7:f0:0b:
be:bf:76:40:8e:4d:4c:fb:c5:39:a7:e2:bb:dd:e5:
2a:3c:0f:5e:1b:79:f0:3c:bb:a5:d4:55:a6:93:24:
12:60:93:d9:6d:24:b0:87:7b:02:24:77:96:75:22:
d8:24:8c:c5:ff:88:c5:ea:0b:14:4c:c6:c7:09:5a:
28:cb:21:35:c5:23:f1:04:61:17:91:5e:b0:16:a4:
a0:bd:a9:45:2d:c2:56:9c:59:ce:85:c4:fb:fd:63:
38:ff:f1:16:9f:86:bd:47:c3:1c:00:7d:8b:32:94:
8f:63:14:c4:fc:ea:56:9b:68:3e:20:30:95:1a:55:
ec:ca:e2:db:94:c5:06:74:52:43:e1:8a:13:94:fe:
7a:0c:bc:72:4e:5b:4a:59:d4:6c:80:c7:18:5a:7a:
04:46:8f:a8:38:eb:e9:75:db:c8:5d:b8:ff:88:72:
b7:68:8a:3d:5f:90:a8:35:07:b5:87:87:d0:d7:3c:
a9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E6:0C:89:DD:12:2D:76:53:99:05:67:14:CA:5B:A6:61:2E:FB:8A
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7c:2c:07:e2:b7:b6:59:9a:b8:f8:ec:86:f2:d8:f3:db:ca:
74:e8:fb:e6:4d:e1:8c:56:c7:18:ea:a1:c9:16:5b:ce:98:c2:
2c:4f:3a:21:12:bc:bb:d9:94:22:4d:76:00:ef:5a:1c:93:44:
35:8c:cc:e6:6b:ae:83:e5:59:5a:34:33:03:65:13:52:bc:d2:
05:40:65:0c:48:9b:14:4c:93:5f:07:a8:8e:d3:0e:d3:5a:f7:
34:d0:46:1a:2d:c5:ec:03:85:23:52:d3:42:6c:f2:31:7b:9c:
d2:b6:8c:d9:fa:6b:67:2a:18:9a:b7:b0:14:35:85:3c:94:a2:
30:d4:66:eb:2f:39:af:f1:ff:13:f0:cb:0c:a4:e8:8c:66:80:
f1:13:67:84:90:11:c5:ac:d5:11:c5:9c:ac:0e:64:c5:60:56:
00:ad:10:58:9b:22:18:1c:ea:7e:ac:ef:42:36:af:a1:25:91:
74:24:37:97:9a:a5:6f:2f:e9:3f:df:4d:4a:ab:66:23:70:93:
b0:9f:c7:fe:2a:70:f1:9e:f8:f6:e6:1b:7b:2c:49:4b:cf:38:
29:ff:ae:5a:3a:65:ea:00:17:29:55:c6:bb:b2:ff:66:33:81:
83:4f:3e:c1:6f:4e:32:64:28:36:e8:de:4c:e0:f8:02:9f:91:
9d:fb:4a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 20:38:12 2026 by rpki-client