Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: HDKKo0poozLbskojAcoSD7+Yi0G8P7ib08ijvV9JU6A=
Subject key identifier: 84:54:2E:C6:44:47:3E:35:27:FE:28:6D:92:99:2F:15:9D:6D:D0:39
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 01A0E9649DA16DA3FDDBB80B87D400561907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 1A0C
Signing time: Mon 28 Sep 2026 19:01:20 +0000
Manifest this update: Mon 28 Sep 2026 19:01:20 +0000
Manifest next update: Tue 29 Sep 2026 19:01:20 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: OTZtd4rKo5zU6xfYjwjAk0bLZCqqx+EZK/mnUAwULvQ=)
2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:9d:a1:6d:a3:fd:db:b8:0b:87:d4:00:56:19:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Sep 28 19:01:20 2026 GMT
Not After : Sep 29 19:01:20 2026 GMT
Subject: CN=84542ec644473e3527fe286d92992f159d6dd039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:25:f4:12:5d:b4:05:89:f8:1d:d0:09:2e:
ef:09:b8:1a:ed:f0:2a:b8:55:fb:89:27:49:85:f5:
31:5c:1f:a5:db:b4:08:d0:de:18:74:05:91:a5:9a:
cb:1a:07:47:04:21:b5:b7:01:83:5b:4c:cb:79:b9:
71:96:04:bc:ea:01:33:25:13:c1:60:33:f5:75:76:
be:0a:de:0d:14:78:27:a1:06:f6:0c:e5:76:95:21:
e2:60:63:db:5b:8f:30:5d:49:2d:d8:4a:a1:2e:ed:
a7:9a:4f:ac:80:0d:c8:51:69:ed:e7:98:7a:09:31:
2d:79:2d:df:28:21:44:f4:83:d3:86:52:57:f6:b0:
64:c3:67:b7:5e:81:7c:85:a3:c4:69:0a:b8:e2:35:
a7:ee:fa:19:2a:68:b1:45:37:b9:09:3e:fc:ad:cb:
2f:ab:71:0e:9f:23:2d:04:ed:1c:71:23:ca:6d:d1:
a3:93:ec:fd:fd:42:60:61:cb:bf:55:d0:e7:36:84:
92:71:08:c1:42:66:f2:63:f3:a7:c4:0c:58:d6:66:
f2:3b:e2:5d:87:f5:5b:18:e7:00:2d:e9:f6:01:1a:
8b:7d:49:07:25:41:e2:fd:2f:27:b4:c9:0a:eb:13:
01:3d:3d:d6:9a:e3:74:96:47:7b:50:25:f4:2e:01:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:54:2E:C6:44:47:3E:35:27:FE:28:6D:92:99:2F:15:9D:6D:D0:39
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3b:4b:56:86:5c:78:c4:ee:30:fc:34:7f:ec:31:09:bf:ef:
c9:ec:f0:b5:0f:bd:a5:fc:cc:38:28:37:b0:f8:b9:f5:4b:aa:
b3:3f:01:d8:5f:fb:46:9b:1f:f6:b6:41:f6:c4:35:98:60:cd:
36:3b:23:ca:3a:42:f7:4d:e5:35:e1:1c:b6:3e:db:f0:4f:c8:
e1:71:c9:76:6b:e3:19:70:77:2d:6a:68:db:49:5c:e3:ed:34:
cb:ea:20:54:32:91:66:bc:ea:4b:9f:5a:8a:14:d1:25:d5:95:
1f:38:1c:3e:63:40:17:39:2e:9d:04:09:b0:a8:3d:a2:ff:e1:
98:df:23:90:10:19:d4:96:04:05:7c:32:03:de:03:90:a5:dc:
0e:9f:19:54:18:17:9d:ef:4b:6a:3a:0a:a9:7d:bd:11:d7:b7:
e9:2d:75:33:b9:ae:17:ad:00:8e:d0:84:7e:91:bb:26:01:58:
b0:4f:17:66:21:5f:dc:b7:c8:be:c9:00:c7:6e:bd:db:13:98:
6e:3c:00:0b:ae:c0:c5:c6:dc:93:b9:ab:8b:7a:31:99:63:c5:
97:39:6e:77:8e:fb:15:ac:15:ba:6e:a5:df:e0:95:3c:41:b4:
5e:06:78:10:eb:8c:88:60:a5:c9:64:d4:ab:c5:a1:ca:9c:3c:
ac:39:3b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:55:34 2026 by rpki-client