Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier: F3/MFa6J1EeslIO4d233pRX9oKh5JgOAeCQ6P+zCArY=
Subject key identifier: C0:89:71:5C:A6:1F:F9:DD:DD:A6:4E:5C:ED:88:99:7F:08:63:2F:D2
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial: 01A195B26D91056C51C9945DC2900881B8A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number: 14CC
Signing time: Sun 01 Nov 2026 06:01:00 +0000
Manifest this update: Sun 01 Nov 2026 06:01:00 +0000
Manifest next update: Mon 02 Nov 2026 06:01:00 +0000
Files and hashes: 1: _znAllcUhDUk5vaonzcpuUajgfo.roa (hash: qYtkv42oHHUxBFtOZdOaS3DV/fsi8LFPD+D7XK8B1uc=)
2: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: sbvQPl9JeJu+g1c8lxk/RxpqQ8rTSktBHyzoOv6pT3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:b2:6d:91:05:6c:51:c9:94:5d:c2:90:08:81:b8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
Validity
Not Before: Nov 1 06:01:00 2026 GMT
Not After : Nov 2 06:01:00 2026 GMT
Subject: CN=c089715ca61ff9dddda64e5ced88997f08632fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:c4:a3:b2:97:95:84:4a:e1:fa:25:fc:29:
e7:33:1e:eb:89:cb:67:e9:9f:af:5c:fe:0c:10:12:
72:3b:a3:3a:35:20:38:1b:89:39:97:ff:6b:66:d5:
9a:0b:30:9c:1a:17:93:8c:7b:36:e2:53:bd:af:e0:
65:ca:b8:23:38:8f:9d:45:79:10:67:f2:cc:44:f7:
9f:5c:e6:ef:5f:03:20:26:bc:1a:fe:13:cb:dd:e9:
21:80:c3:e9:f3:9d:5e:db:b5:45:13:a8:6c:06:31:
f2:2b:9f:d7:dc:10:43:2e:ea:ca:14:d3:e0:e8:ee:
cd:61:33:ce:42:3d:07:c1:c1:86:5a:d4:b8:28:d0:
ab:c8:99:53:da:2b:ab:85:e6:13:43:c9:7f:c4:12:
51:fe:bb:90:3d:96:42:b3:dd:c4:7a:4d:97:5e:3f:
7e:78:ec:da:13:b4:dc:52:cf:a4:6d:8d:a3:91:b2:
42:40:1b:4f:70:96:58:27:59:ae:ef:28:bc:38:64:
4f:af:af:b5:c8:10:6d:de:5b:49:65:de:9e:d2:75:
b6:6a:eb:a2:b1:58:c2:ea:94:d3:32:23:19:7c:4a:
bd:0c:a4:41:92:73:bf:1c:29:65:61:7e:4d:fe:3a:
16:50:24:7d:e2:ae:ce:69:1f:8e:8d:04:7e:e9:9b:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:89:71:5C:A6:1F:F9:DD:DD:A6:4E:5C:ED:88:99:7F:08:63:2F:D2
X509v3 Authority Key Identifier:
keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:97:30:3c:1c:84:d8:99:2f:4b:af:b2:eb:bd:c8:d7:ef:d9:
33:51:bb:d8:b9:15:d1:92:d5:aa:f4:a8:fd:0f:11:0f:dc:51:
ab:70:89:6e:5e:df:31:6c:33:5b:15:20:8d:18:8b:4a:d8:7f:
2d:62:24:03:48:30:b9:85:e2:36:60:a2:ce:81:b0:26:94:65:
7f:49:64:2b:7b:6c:c3:d8:5e:92:67:b8:bf:fd:50:c1:5f:f8:
5f:f4:ed:6b:ba:90:36:a2:cf:2d:72:ac:b1:ec:36:83:e5:d2:
d3:f1:24:c0:23:67:51:01:fb:e9:34:38:aa:c0:05:31:fe:e7:
fb:21:c2:76:b3:b8:c0:d3:d0:d4:0a:99:8b:ad:c6:f1:5e:32:
fa:7c:fd:4a:1f:78:ff:29:21:fd:36:66:de:68:35:df:82:a4:
76:9b:d5:e8:f8:14:eb:41:97:0e:01:62:45:f6:ff:b3:5d:a2:
3f:ff:37:8a:19:ac:e7:48:82:97:f2:a1:48:b3:84:1d:8d:ab:
0f:f1:0c:38:0b:9a:a1:ef:30:af:29:53:b7:f1:2c:23:c2:69:
28:72:ac:98:6e:ce:97:b9:44:21:61:e0:89:ff:ab:08:e1:5e:
b0:7f:36:a9:60:31:76:6a:c7:78:bb:4d:88:83:cc:df:c9:34:
c2:e2:0e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 10:53:51 2026 by rpki-client