Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: L5XYdooWbaey76FgaKxczrDZ5jJbTzf/CW980dH8pGk=
Subject key identifier: 3A:B1:52:66:05:BD:90:0D:C8:73:8F:63:04:B8:B8:3B:1D:8F:37:42
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 01A06FBA3630352853FC0A5F2613B6CCAF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 1A3E
Signing time: Sat 05 Sep 2026 04:01:09 +0000
Manifest this update: Sat 05 Sep 2026 04:01:09 +0000
Manifest next update: Sun 06 Sep 2026 04:01:09 +0000
Files and hashes: 1: K4rNlv6gYUKRgIqav4ptqCTSNGg.roa (hash: peGnClYWPqnMOOfi13oSusAgZ5+U+k8ztyI3Zgy/aPo=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: wK3c4Di3LL9x07+HS+ea9wsxZ85GVuUYAt8CxrWcMR4=)
3: zposQW8-Ml33uc3ENu1a83hxjEI.roa (hash: aFqmx16M5gCNIMqJZ5eqfmDRHZVtOgPSXQjK2JfuQ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:ba:36:30:35:28:53:fc:0a:5f:26:13:b6:cc:af:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Sep 5 04:01:09 2026 GMT
Not After : Sep 6 04:01:09 2026 GMT
Subject: CN=3ab1526605bd900dc8738f6304b8b83b1d8f3742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:3e:26:19:37:f3:72:8c:78:c0:f2:28:9c:
32:fc:03:ad:aa:b1:a8:e6:7b:a3:40:c3:cd:a3:25:
bf:de:92:2e:6c:58:de:a1:cd:f1:2e:3f:92:72:e7:
b2:bb:b8:81:d4:8b:1d:5e:15:4f:6f:2e:54:3f:e9:
da:eb:36:ad:51:a4:15:2e:e5:75:df:40:68:38:98:
c1:75:cd:6d:c9:f1:f5:f0:13:b3:84:55:f1:2c:7e:
b5:38:0e:f5:15:9d:a2:95:d7:56:ee:be:9d:28:6d:
b6:57:e7:c8:02:94:bd:06:e1:ed:96:5d:48:89:86:
a9:02:bd:f6:c2:69:e7:eb:0d:e8:10:32:05:78:e1:
fd:9a:38:95:93:7d:e3:96:61:c5:f5:7c:b2:95:04:
13:cc:11:a2:27:28:2d:c2:32:32:20:92:47:f6:c9:
20:3d:29:a9:7c:20:82:10:b1:42:2c:fb:79:73:42:
4b:ed:64:e2:ef:7f:04:65:89:13:9d:54:e3:7b:ef:
84:7c:ac:b5:54:17:26:43:5b:f8:42:96:40:4a:4a:
5f:bf:09:7a:a4:d1:e3:51:e0:21:93:18:40:16:f3:
ff:b0:1f:05:c4:98:fc:e1:42:9e:97:79:4d:23:f9:
0e:67:bb:86:04:56:64:34:6d:56:a6:98:72:c1:af:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B1:52:66:05:BD:90:0D:C8:73:8F:63:04:B8:B8:3B:1D:8F:37:42
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:56:e1:10:3e:10:f7:51:72:3a:4d:5e:1b:e7:aa:0c:18:46:
21:10:ae:4d:c3:8a:60:62:53:5b:62:4a:e4:1e:38:8d:a9:9d:
55:60:53:ec:53:b3:0f:a9:78:d9:fb:af:2d:b8:ea:24:ef:57:
78:bb:7c:2e:93:cd:6c:22:66:23:9f:5c:a1:ee:8b:69:f9:c9:
6c:4b:95:d9:9f:e6:70:90:c6:4f:37:86:ec:08:06:23:d4:19:
77:25:f6:42:23:e9:6a:ff:9e:e7:65:57:19:e1:74:bf:5a:d6:
c1:bc:a0:75:34:59:d0:64:c4:22:5a:44:e9:32:a2:7c:d3:94:
6d:6c:47:82:2f:75:77:12:33:a2:17:a1:9d:82:3c:db:1f:15:
dc:ab:cb:91:2a:35:04:67:ec:29:fa:2b:65:45:59:b3:ae:05:
b4:6c:ae:09:9c:d5:4e:28:5a:13:c8:ac:3e:39:7b:c8:97:d1:
f4:e0:9f:b8:f1:79:ce:e2:94:b7:aa:51:34:e0:3c:3d:a4:7e:
7e:71:d5:fb:54:b1:a2:c2:7e:7a:3a:92:78:b3:18:ed:f1:d1:
0f:c8:e6:2a:7c:77:b2:ef:15:90:e6:8d:25:6f:1c:a2:9f:b2:
ca:d8:a6:6c:8d:d3:dc:69:c7:64:c7:00:99:1d:94:4f:6a:c8:
f1:01:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:31:07 2026 by rpki-client