Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
File: gV1MO26b-NpPoYWDUtVnCXSU64A.mft (raw, json)
Hash identifier: /f+zcA+NRh83bYyxl2LXgjKw2a+baRlwb2WrYs3nHto=
Subject key identifier: 69:0E:41:D9:EB:9E:1B:67:7F:2B:85:BF:49:F7:71:FE:E4:31:D9:5B
Authority key identifier: 81:5D:4C:3B:6E:9B:F8:DA:4F:A1:85:83:52:D5:67:09:74:94:EB:80
Certificate issuer: /CN=815d4c3b6e9bf8da4fa1858352d567097494eb80
Certificate serial: 01A14BABBC48A21785421B8397678940D1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
Manifest number: 0125
Signing time: Sat 17 Oct 2026 21:01:48 +0000
Manifest this update: Sat 17 Oct 2026 21:01:48 +0000
Manifest next update: Sun 18 Oct 2026 21:01:48 +0000
Files and hashes: 1: 9OSNQHYwP7hMCYqH3m4FGoNr2h0.roa (hash: oI3UIYnZEeaaqKn53u1eLaxo0kke+QgwtslSgUJGtVo=)
2: eS4B6UGXaj1jtg698wa76I6I9s0.roa (hash: ee1yHXEYh01F57rf9ic6LVAj3dkGow/zQH8cnd6TnOc=)
3: gV1MO26b-NpPoYWDUtVnCXSU64A.crl (hash: Ptx8qDEjBDtpIOmZv1mo8nCedPpCiG4nFg7gz/oP6/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:ab:bc:48:a2:17:85:42:1b:83:97:67:89:40:d1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815d4c3b6e9bf8da4fa1858352d567097494eb80
Validity
Not Before: Oct 17 21:01:48 2026 GMT
Not After : Oct 18 21:01:48 2026 GMT
Subject: CN=690e41d9eb9e1b677f2b85bf49f771fee431d95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:52:c2:21:14:32:35:55:8c:05:6d:87:38:
5c:14:31:5f:fe:1f:61:ef:01:7e:9e:7d:cc:a5:3f:
62:ba:26:55:e4:8b:6d:ea:4f:66:3f:cc:ea:9d:98:
79:cd:09:a9:11:f9:f6:a6:9f:06:26:5f:e2:69:9c:
af:27:71:f8:81:05:e4:53:a8:fe:43:a7:69:b0:57:
5f:93:4d:e8:c0:f8:21:46:47:bf:c3:8a:28:f0:ef:
a8:d9:db:20:2a:8e:07:ee:c5:ea:2b:cb:6f:0e:f5:
1d:73:85:91:ee:b2:ed:a2:5a:17:ba:1a:46:6b:8d:
11:e5:ab:17:c4:6e:d1:e3:1a:da:29:47:cb:1c:1e:
9f:43:ab:73:8a:de:f3:45:e2:49:de:1f:64:67:31:
08:46:fd:06:eb:a8:e0:1f:f7:c9:0d:4c:1e:17:4a:
56:27:ac:a0:79:3a:2e:7e:29:1b:b0:13:27:39:33:
62:20:07:c3:3f:04:70:f2:83:96:26:69:9a:c6:a6:
72:79:e4:aa:7a:c4:ce:b8:3f:c2:e1:76:77:88:94:
20:89:c9:2f:8f:91:9e:25:51:40:f8:4b:19:f2:17:
80:78:66:2d:77:31:ff:2e:8f:58:89:0d:98:81:cb:
26:d5:12:1d:a9:ae:44:98:bd:eb:ec:f4:cb:e3:f8:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0E:41:D9:EB:9E:1B:67:7F:2B:85:BF:49:F7:71:FE:E4:31:D9:5B
X509v3 Authority Key Identifier:
keyid:81:5D:4C:3B:6E:9B:F8:DA:4F:A1:85:83:52:D5:67:09:74:94:EB:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ae:10:1d:6f:12:7e:fe:f6:4e:72:7e:da:0e:20:0a:13:5c:
56:4a:fe:11:ae:27:2e:09:c5:11:8c:d3:10:14:20:7c:7f:a2:
b9:9d:a9:b5:81:85:a9:bb:a6:79:4b:13:4a:a0:3a:5a:53:e9:
02:44:37:fd:17:f5:80:7f:c2:9c:b2:d9:8f:27:33:3b:b2:5d:
66:19:e0:9e:77:53:93:2c:b4:5f:ca:b9:91:09:69:ba:2a:f2:
a1:4e:2b:6f:c0:6b:af:f6:1f:2b:bd:e1:a4:1d:77:ab:3d:13:
b9:b8:61:4b:88:4c:0e:0f:ab:b2:aa:1a:f5:05:2c:a0:21:92:
d7:f5:cb:5d:89:3d:eb:aa:5a:ec:7d:a0:c5:c2:b3:d0:19:57:
c9:ae:a1:de:ae:c3:42:7e:c0:24:52:06:db:13:94:1a:95:53:
d9:a1:56:b2:0a:5f:95:91:b1:61:91:10:39:d7:df:28:e6:18:
4f:bf:ed:1d:49:75:71:1c:3c:91:f2:aa:b6:39:0c:51:37:be:
55:43:8d:ee:20:3a:57:80:72:35:8c:87:a0:ac:3e:44:7b:79:
c9:01:6f:53:17:cf:d2:0b:9b:88:f9:1c:4e:c1:96:60:c0:51:
19:d5:2c:7f:7f:d8:77:cb:23:09:7c:ee:ed:ef:4f:f3:51:af:
12:46:18:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:09:52 2026 by rpki-client