Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: s3UDODEA2ckrDh5iWudMfcKQh1eA7Zfft19yAr2ELF4=
Subject key identifier: 16:36:DA:AA:8F:F1:91:C9:7A:4A:9E:C0:5C:54:98:ED:F7:50:4C:D6
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 01A1DF835584DF72C5B970D8011418111D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 1B0D
Signing time: Sun 15 Nov 2026 14:01:28 +0000
Manifest this update: Sun 15 Nov 2026 14:01:28 +0000
Manifest next update: Mon 16 Nov 2026 14:01:28 +0000
Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: S/hF1VeHP3QBOJt7/Q+gOWAWF+LTswN3+JrvUpTcoPs=)
2: fGGjLVgPA4LKzeQccN40Sqp57_M.roa (hash: FQZQxdVxTubVpPk55UZw5AIOaDT8fpk0qYAYzWlOgeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:55:84:df:72:c5:b9:70:d8:01:14:18:11:1d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Nov 15 14:01:28 2026 GMT
Not After : Nov 16 14:01:28 2026 GMT
Subject: CN=1636daaa8ff191c97a4a9ec05c5498edf7504cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:94:4a:35:31:82:53:fd:b8:80:43:66:45:
28:f4:6a:2f:71:35:88:9d:9b:96:93:c7:39:f5:15:
c5:25:a0:46:c5:f6:2b:dc:9e:0e:0b:42:43:8f:09:
0c:36:80:d6:f4:05:0c:1e:2f:eb:55:07:7e:b6:8c:
cf:2b:54:98:21:a8:78:07:5e:7b:a1:56:98:83:4f:
b5:f6:40:ad:aa:34:af:85:6c:ab:f1:71:cd:b4:85:
39:22:9f:b0:5f:6d:a0:f0:3b:10:ea:e2:77:fc:75:
bc:9e:a6:b2:d4:c4:69:07:e5:83:bf:3b:f2:e1:8a:
09:54:a0:ea:b0:77:ec:38:64:46:c0:ab:27:76:d4:
da:bf:39:6f:71:08:25:5d:ed:2e:46:a8:6f:8b:b8:
44:74:85:4e:65:e9:c1:ba:2d:e1:a8:bf:a3:6a:38:
7c:dc:a0:b4:f0:6b:52:8d:be:2e:79:9c:7b:14:f9:
44:a9:0e:1a:63:af:1f:b7:da:a5:a5:4e:ee:22:1d:
d7:d1:26:90:ba:c5:5c:a6:a3:01:fa:5b:54:97:e6:
8e:52:38:7b:63:bd:29:34:80:0e:ad:4a:5e:36:8f:
a8:98:79:18:28:bb:54:74:cb:6a:1e:c0:ce:f7:17:
b1:92:86:fd:52:4b:9c:21:69:15:4a:f6:1c:c0:ed:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:36:DA:AA:8F:F1:91:C9:7A:4A:9E:C0:5C:54:98:ED:F7:50:4C:D6
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:02:6d:86:11:39:18:0d:41:8b:1c:66:90:a1:e7:8e:8d:4b:
0d:f7:7e:58:ca:fc:76:2c:ca:a0:fe:53:97:a1:b9:39:cf:76:
32:a1:39:7f:cc:69:ad:ff:b3:67:3b:38:de:95:f8:03:16:95:
56:88:da:ca:c7:a4:cf:cb:53:69:6d:51:d4:4a:89:04:7e:c1:
cd:a1:0a:b8:d5:a1:a8:f9:01:3f:af:fe:ba:c9:92:86:7f:6f:
32:40:f2:2c:10:e6:c9:cc:7d:73:e3:c3:79:b5:0b:41:4b:62:
bc:42:1a:a0:89:dc:cf:b3:e3:41:28:76:88:cf:59:73:d1:6e:
35:2c:03:76:94:63:71:6a:88:a7:d6:73:61:32:8e:63:be:45:
79:15:60:91:77:71:85:c1:95:30:06:85:8f:47:09:fa:dd:40:
11:b8:d4:c4:7a:d1:4b:81:15:0e:39:34:29:44:62:bf:00:2d:
34:84:a3:f0:42:fb:8d:93:83:71:b6:3b:a8:af:9c:1b:ff:af:
7d:39:9b:ef:c5:52:5f:40:63:79:c3:f8:06:40:03:82:82:4e:
d1:a2:00:49:2c:fd:ab:31:a2:d9:b2:3b:4b:31:45:f7:0c:dd:
3e:51:e7:89:f2:f5:50:15:28:e6:6e:70:23:85:7f:fc:b3:33:
8d:4d:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:55:14 2026 by rpki-client