Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/8178e3-99ee-479f-855f-4843d9e961ec/1/GA5OCoKTUKd503NndQrb_FlSj1Y.mft
File: GA5OCoKTUKd503NndQrb_FlSj1Y.mft (raw, json)
Hash identifier: pSmWcCvbmCnqd2id64n5mTXqI2LC5gFalkNaVpQvrjw=
Subject key identifier: 00:07:38:38:20:06:97:53:30:D0:AC:C0:03:98:7B:36:9B:7B:1A:9B
Authority key identifier: 18:0E:4E:0A:82:93:50:A7:79:D3:73:67:75:0A:DB:FC:59:52:8F:56
Certificate issuer: /CN=180e4e0a829350a779d37367750adbfc59528f56
Certificate serial: 01A1A9713263B610CA88E20223756A37E47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GA5OCoKTUKd503NndQrb_FlSj1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8178e3-99ee-479f-855f-4843d9e961ec/1/GA5OCoKTUKd503NndQrb_FlSj1Y.mft
Manifest number: 29
Signing time: Thu 05 Nov 2026 02:02:10 +0000
Manifest this update: Thu 05 Nov 2026 02:02:10 +0000
Manifest next update: Fri 06 Nov 2026 02:02:10 +0000
Files and hashes: 1: GA5OCoKTUKd503NndQrb_FlSj1Y.crl (hash: DXhsgebPGxgmelhI3OC0/qJtfrmT2ge9aVTQncbi0DY=)
2: ZHa1Ivl6Unf7JA8-6j5yy058hjY.roa (hash: +C/wNqkD6vYIyRWQxyzeRU4w8fiaJB32Gl95vWyfuBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8178e3-99ee-479f-855f-4843d9e961ec/1/GA5OCoKTUKd503NndQrb_FlSj1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8178e3-99ee-479f-855f-4843d9e961ec/1/GA5OCoKTUKd503NndQrb_FlSj1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GA5OCoKTUKd503NndQrb_FlSj1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:71:32:63:b6:10:ca:88:e2:02:23:75:6a:37:e4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=180e4e0a829350a779d37367750adbfc59528f56
Validity
Not Before: Nov 5 02:02:10 2026 GMT
Not After : Nov 6 02:02:10 2026 GMT
Subject: CN=000738382006975330d0acc003987b369b7b1a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:8d:e9:1b:a1:56:87:f7:5c:d8:94:8d:3f:
c1:39:73:b2:d4:bf:86:d4:02:79:3b:b2:7c:34:ca:
a1:f6:c1:18:eb:c8:c4:2a:bb:af:97:8d:a6:7f:88:
20:11:bd:46:45:92:f6:f6:27:02:4c:c3:02:c9:63:
78:df:f9:9c:9e:cf:ef:6a:a6:ba:94:00:67:67:96:
4e:80:4c:b2:db:49:94:83:f0:8d:8e:af:d1:9f:1a:
84:ec:a4:a6:a3:7c:bb:b8:95:a9:c2:d3:53:e7:07:
39:02:a7:6f:7a:ad:c0:be:3e:d2:38:05:fe:87:74:
62:38:d4:57:e8:53:c6:e8:fa:47:9e:d3:de:bc:68:
4e:49:ac:8d:8b:c6:7f:40:4c:d9:fa:bb:e1:ec:ef:
55:2d:5e:ec:cc:10:c5:0b:a6:53:ec:a1:4d:80:0c:
a7:20:ed:3a:7b:1b:ac:c8:a1:b8:2b:59:61:19:bc:
3d:89:15:35:fa:ac:4f:6b:40:56:41:71:57:6b:ac:
ca:f7:d8:36:58:26:b4:dd:40:71:a7:c8:fd:8f:df:
2e:41:4c:4a:c4:b5:d5:63:3f:b5:db:11:d6:9a:9f:
af:b1:ee:72:12:49:2e:19:a1:de:5e:86:e3:8d:61:
54:ef:f6:b9:42:a8:5a:19:82:c6:72:b4:49:aa:5d:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:07:38:38:20:06:97:53:30:D0:AC:C0:03:98:7B:36:9B:7B:1A:9B
X509v3 Authority Key Identifier:
keyid:18:0E:4E:0A:82:93:50:A7:79:D3:73:67:75:0A:DB:FC:59:52:8F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GA5OCoKTUKd503NndQrb_FlSj1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8178e3-99ee-479f-855f-4843d9e961ec/1/GA5OCoKTUKd503NndQrb_FlSj1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8178e3-99ee-479f-855f-4843d9e961ec/1/GA5OCoKTUKd503NndQrb_FlSj1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:de:fc:da:89:d1:0f:71:8f:5b:b0:c6:77:bb:50:44:62:ea:
ba:b6:a4:d9:24:71:34:a4:2b:69:8d:7d:1d:ca:8a:08:f3:3c:
7e:56:6c:c4:55:df:67:ba:d0:b1:f0:09:f7:34:fc:b1:2a:31:
ab:4d:6a:18:02:17:74:82:53:2f:44:a6:95:61:89:0a:b9:6c:
ce:11:cc:72:f4:a0:08:4a:c7:4a:9e:9c:96:6b:0f:48:9c:7e:
3d:86:44:e4:8e:fa:45:c2:8e:6b:15:8c:0c:34:4d:26:a6:ba:
9e:54:b1:c8:d6:07:ea:74:c7:4b:08:4a:59:66:a4:7e:13:dc:
67:07:bf:d3:ac:7f:6b:91:02:91:0c:86:9e:aa:4e:d1:eb:59:
4c:75:f8:8b:b5:89:bf:04:2d:ff:17:17:4e:29:e8:ba:ae:9a:
c9:2f:18:52:49:80:46:4d:c6:89:0c:6c:14:e3:21:2e:b0:37:
53:b7:cf:83:10:d1:51:7e:04:4f:58:c7:06:fd:25:71:ef:4f:
5c:ff:2a:8d:2d:eb:e1:65:19:4a:52:2e:63:bd:8b:b4:c6:9a:
49:26:9f:12:53:ab:ce:6a:ad:6e:08:d7:a4:eb:0c:c8:6b:c2:
8a:a9:c2:7a:a3:52:73:bb:2b:4d:a3:ee:bb:7c:5e:25:67:78:
49:52:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:08:16 2026 by rpki-client