Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: ZpOvyiMfFVTjgqsabcei9NXJTvtK82eIJkusN9dZM2Q=
Subject key identifier: A6:B2:9B:75:DE:4D:A9:B9:CA:92:41:CD:33:0F:5E:8D:DF:96:B9:6C
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 01A03FDFFC86D0F97F100FB6154BECDE9A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 1A23
Signing time: Wed 26 Aug 2026 21:00:38 +0000
Manifest this update: Wed 26 Aug 2026 21:00:38 +0000
Manifest next update: Thu 27 Aug 2026 21:00:38 +0000
Files and hashes: 1: 4ShXPhWP4Qk_JTUR7nsENpLjDoc.asa (hash: HXRCdfUgdsuwOo68NwP3+PURL7JrnmOHum1V4B+oxJQ=)
2: aiWvgSfnwbnLlzyTpx8toxkUKEw.roa (hash: yBRys49Mvvm6+/VlItOHtileiNejv8QSbeDxO1U1PhI=)
3: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: u40qcgieFmWy2jlo1e3PKBLxE4iX0eueR9B5qe9jYd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:df:fc:86:d0:f9:7f:10:0f:b6:15:4b:ec:de:9a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Aug 26 21:00:38 2026 GMT
Not After : Aug 27 21:00:38 2026 GMT
Subject: CN=a6b29b75de4da9b9ca9241cd330f5e8ddf96b96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:b3:91:db:52:71:50:1c:30:e7:3a:e1:d7:
09:10:f7:a4:d5:02:3e:b2:af:e6:16:c8:8e:05:81:
c4:c5:cf:79:97:9c:e1:3f:b3:0d:f9:4f:2b:12:c5:
05:05:02:f7:90:ee:e5:a0:a1:79:61:9d:05:7b:4d:
1c:6d:41:a3:07:95:7d:64:35:85:38:16:11:23:12:
38:21:7d:11:e6:7e:1e:7f:62:bf:54:2d:a5:42:e6:
91:f2:f8:b1:b7:21:76:f2:da:c0:30:3d:6c:e7:73:
92:fe:82:37:ab:8b:bd:4c:b5:7b:62:f4:af:4e:66:
34:03:0d:91:eb:ec:5a:45:8b:39:07:28:47:08:77:
35:7d:27:a9:52:c0:84:cb:9e:ab:1b:d7:10:91:b2:
81:88:aa:ca:6a:7b:4b:d4:7e:29:32:13:81:ec:ee:
55:90:9f:76:57:d8:7b:46:af:8e:2f:db:d5:7e:4a:
50:ae:6d:04:54:30:78:4a:a6:c8:43:b2:3c:2a:d5:
41:66:90:30:de:54:8b:09:2f:db:f5:1f:f2:e8:78:
63:1c:c2:61:8e:05:40:0b:90:20:95:46:9e:23:92:
c1:06:d5:87:0f:84:a1:de:ad:54:19:ff:a1:71:71:
c2:94:ac:4f:59:b5:ad:8f:34:1b:7e:e8:da:f7:ca:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B2:9B:75:DE:4D:A9:B9:CA:92:41:CD:33:0F:5E:8D:DF:96:B9:6C
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e0:fa:c0:98:0c:f3:ad:19:e7:e5:74:8b:9c:98:27:e6:ba:
8d:d4:06:51:db:1a:ec:b3:48:9a:e4:2a:ea:ea:64:5f:50:34:
50:ed:4a:6a:aa:56:93:4d:7b:b4:a8:fe:84:fe:90:fa:aa:36:
67:f8:3b:ba:b6:9c:8f:88:d6:e9:9c:1e:b7:5a:ed:fe:b0:1a:
3f:76:45:6b:e3:9d:f5:85:58:ec:c6:c3:5c:59:cf:9d:01:bf:
99:93:bb:d7:35:14:51:47:65:19:41:37:8f:ba:e5:8d:25:2b:
c3:d8:c0:47:11:49:f1:04:a3:23:5c:79:72:e6:f5:b7:41:e7:
3d:fa:a1:2d:2f:81:d6:4b:c4:b7:74:c5:e3:2a:8e:b3:ca:d8:
e9:f1:eb:07:7f:7f:76:bf:5b:43:5a:99:c1:9d:5d:aa:8e:05:
4e:26:ce:22:cb:c6:1c:47:ae:c4:65:9c:16:7c:08:59:1e:a5:
8c:cc:f9:80:bc:53:6d:18:26:c3:fe:15:4f:2f:2f:b7:cb:77:
a4:9a:de:c5:4b:ac:7d:41:33:6a:e2:0a:af:56:6f:3a:a1:bb:
5a:1f:0a:e5:f2:29:d1:dc:2d:12:9c:c3:c1:36:82:fa:6f:1d:
97:17:97:70:63:63:00:5d:09:53:71:06:64:06:f9:f1:77:54:
35:0b:41:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:18 2026 by rpki-client