Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
File: GJiiVgRCVjlcaoRZET1kmoKa-OI.mft (raw, json)
Hash identifier: g5aFwSmSBwyy375gtsSpVw6xzBUGtAzZ7G6v123Ah2U=
Subject key identifier: 9F:74:A5:C9:16:A7:69:A2:0F:9D:2E:97:DE:51:36:9F:7C:C8:07:8D
Authority key identifier: 18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
Certificate issuer: /CN=1898a256044256395c6a8459113d649a829af8e2
Certificate serial: 01A08C7AE80FD6CEE24F81F12176AA04A166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:59 +0000
Manifest this update: Thu 10 Sep 2026 18:00:59 +0000
Manifest next update: Fri 11 Sep 2026 18:00:59 +0000
Files and hashes: 1: GJiiVgRCVjlcaoRZET1kmoKa-OI.crl (hash: 4wCjJxj7au3aYvvcuLV2Uh6Kn+PeU/d4RlbQMI18EzY=)
2: QeFO4WIWKv2ggvxDMB0IIY2ffhU.roa (hash: A3a8EDhaNeBDQqGUsr5v16oyEecMADL0gGFhKmTivEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:e8:0f:d6:ce:e2:4f:81:f1:21:76:aa:04:a1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1898a256044256395c6a8459113d649a829af8e2
Validity
Not Before: Sep 10 18:00:59 2026 GMT
Not After : Sep 11 18:00:59 2026 GMT
Subject: CN=9f74a5c916a769a20f9d2e97de51369f7cc8078d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:e7:87:35:93:ff:d0:b0:59:25:81:ea:c5:
04:cc:d1:df:a4:8e:dd:6e:99:0c:72:87:95:8d:9f:
27:4c:77:10:cc:20:af:4f:1e:2a:26:70:0c:9f:cc:
66:c4:b4:70:21:77:9f:c6:88:5e:37:d9:6f:e0:c3:
b6:18:9e:a9:71:52:f3:06:54:c9:75:a1:ee:8d:cd:
73:db:01:f5:75:a6:8f:ad:9b:73:1b:74:1d:dd:ec:
95:be:73:d9:65:55:27:f0:5d:a6:63:8f:c3:ea:ab:
21:c2:c8:bb:db:a2:cf:d5:24:77:cb:a1:bc:ea:42:
f7:e5:46:10:49:1b:6b:79:5b:27:eb:fb:59:28:fe:
f2:06:4a:fd:3d:cf:da:dc:ae:34:df:03:4c:7d:47:
d6:87:37:d4:55:14:11:86:78:f0:5b:3a:6c:91:b8:
17:60:10:ad:b8:cb:93:61:99:87:dd:ac:d2:63:58:
9d:cd:eb:a0:34:81:6b:5d:d1:2c:b0:2b:dc:d9:de:
ae:81:50:3c:93:33:51:f7:0f:c2:a2:af:82:78:d2:
70:5d:31:ea:2a:0e:22:9e:06:b4:05:69:de:cd:48:
2f:39:93:5b:ec:f6:30:f8:d7:37:1d:01:bb:bb:08:
ad:21:84:04:11:93:9f:27:97:23:1e:ab:10:c9:d3:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:74:A5:C9:16:A7:69:A2:0F:9D:2E:97:DE:51:36:9F:7C:C8:07:8D
X509v3 Authority Key Identifier:
keyid:18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:a5:2d:d9:c9:ec:16:0e:01:e0:11:11:65:25:62:b0:18:
dd:db:dc:24:90:97:d8:dd:cb:f3:76:09:2c:54:3e:f7:ed:0b:
ac:80:6a:f4:a0:1f:98:9b:4d:a4:e1:95:6e:b3:84:77:82:63:
b4:29:c1:38:f8:de:b6:ba:65:65:48:3a:63:c7:d7:35:0c:93:
b4:be:d1:54:de:4a:a8:1b:7f:ad:90:a7:ff:68:8d:c0:ae:10:
09:22:2d:ad:54:94:08:88:a1:79:fb:50:bc:25:0d:96:29:ef:
e4:d4:4a:a9:e1:15:38:7d:f0:3f:71:05:81:9d:0f:80:23:de:
b5:f8:6c:9f:aa:f1:b0:58:f0:3a:0a:14:1f:6d:56:bb:70:2c:
45:1a:23:3c:44:91:c4:3c:f6:3e:32:01:70:45:61:cf:fa:28:
22:64:76:d1:6f:cf:8f:68:bd:85:bc:ba:5d:93:18:61:4b:47:
ac:8f:00:fa:ce:4e:e2:bc:72:be:c5:52:1e:03:1e:b0:ee:5d:
72:27:ca:4c:92:23:9d:f2:b0:81:b4:ae:38:5b:1a:3f:45:48:
88:e9:28:f0:72:95:5b:68:00:10:0e:98:ce:d5:1e:05:06:9e:
1f:2d:5b:ca:c2:01:0e:17:4b:be:7e:e1:78:38:56:7a:58:b3:
9e:86:e3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:31:17 2026 by rpki-client