Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: 7zGZZuaCK1baylrcrTh8FBiupBDpTmb66iPXf9OkvdM=
Subject key identifier: 87:0D:EE:19:63:DE:D8:3C:11:67:5A:32:EC:3B:48:DC:F3:DE:94:2B
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 01A19A341B1A508354D296D47D83A1D849FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 1772
Signing time: Mon 02 Nov 2026 03:01:08 +0000
Manifest this update: Mon 02 Nov 2026 03:01:08 +0000
Manifest next update: Tue 03 Nov 2026 03:01:08 +0000
Files and hashes: 1: 1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa (hash: nATa+n5oWjMZXiwMho7tjE9Rx2x+4yb18TAu52HSqiY=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: xpthXCz8PzyTMPIXlzhURqXzYqUPKAPtt9BTkzZ2P1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:34:1b:1a:50:83:54:d2:96:d4:7d:83:a1:d8:49:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Nov 2 03:01:08 2026 GMT
Not After : Nov 3 03:01:08 2026 GMT
Subject: CN=870dee1963ded83c11675a32ec3b48dcf3de942b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0c:00:b9:f1:b8:22:ed:a9:6e:9f:d5:36:3a:
68:9e:a1:f5:1a:0f:32:39:4c:13:03:df:7b:66:94:
f0:f8:4c:25:9e:44:6c:db:60:e0:f6:78:20:4c:3f:
fa:d1:ba:7d:63:48:ff:34:00:37:83:1d:e2:26:af:
c1:75:02:ed:de:71:16:81:46:6d:69:22:c0:36:71:
37:37:2f:67:32:32:68:cb:d1:f1:ea:b6:7b:33:5b:
9f:f3:32:12:42:56:f2:7f:3e:51:95:9b:e8:4a:42:
52:36:0e:3e:34:92:53:cc:b6:29:41:6c:5b:ab:55:
e4:ba:4d:4e:8d:d6:76:40:af:c3:a0:fc:94:9a:e1:
f2:2f:e3:d5:bb:ce:03:4e:bd:66:91:70:fd:04:83:
f0:f0:44:7b:96:11:7c:ca:74:c3:85:0a:9c:fd:1f:
0a:e2:d5:28:b4:ea:17:3e:75:b9:aa:e1:ef:4b:12:
8d:02:da:58:cd:50:3c:56:33:1c:6b:5e:84:40:ff:
58:c9:a2:cf:9e:02:bd:06:ce:45:ff:96:99:b6:8c:
09:09:b8:62:70:f8:ed:14:9f:f7:73:a8:38:54:d4:
56:75:85:4f:ab:6f:ba:ba:aa:2e:5b:e8:0d:8d:6e:
60:bf:19:df:5e:f1:04:56:04:51:1d:63:e1:dd:b4:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0D:EE:19:63:DE:D8:3C:11:67:5A:32:EC:3B:48:DC:F3:DE:94:2B
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9a:59:50:ad:20:35:bc:e4:eb:c7:09:b7:47:01:88:0c:8a:
1c:8d:8f:c4:b1:bd:59:8c:4e:31:52:bd:9b:d6:78:c9:29:e1:
da:ee:35:38:34:06:70:24:c8:25:25:08:8f:6b:53:7c:50:87:
9d:e6:1e:b2:69:1a:9f:3a:30:07:b3:b5:8e:cf:24:43:37:b9:
4d:b2:4d:51:f3:00:9b:d0:14:67:c7:ab:6b:83:73:d9:50:f3:
39:93:e1:b2:38:26:2b:82:49:d8:f0:88:18:94:59:28:8f:ab:
81:62:87:a8:3f:bd:ad:77:4e:78:47:62:af:f7:aa:90:e9:6e:
a4:cf:cb:cb:92:26:b1:da:ee:83:49:4b:c3:5b:e2:b7:62:b6:
ea:35:d3:bf:77:e8:64:14:e9:ae:3b:75:78:79:d6:13:6c:1f:
3f:a3:3f:f2:17:6b:ec:ff:26:dd:0b:83:0a:8a:6c:85:80:69:
13:2b:12:88:12:40:5a:a0:89:75:97:e4:b3:4b:2c:49:53:c9:
d1:b6:77:ff:2c:04:11:09:59:5d:b9:40:39:f7:f8:ff:de:9c:
a7:03:34:93:68:12:34:2c:14:d2:49:30:89:a3:db:82:a6:82:
63:fe:a3:49:87:2a:64:6b:3c:34:1e:e9:54:60:bf:5e:96:e6:
0d:e2:63:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 09:56:03 2026 by rpki-client