
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
File: GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft (raw, json)
Hash identifier: CSsM8aqJScSSEKfavVqwcD5XUFMEPDyiwC2wUUzA9no=
Subject key identifier: 87:65:A5:24:FC:CE:91:F3:B9:D7:F3:C9:3B:B0:1F:83:1D:BA:91:A5
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Certificate issuer: /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial: 01A18F0B259F17DB9A452A11F0B1B332B2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
Manifest number: 1AD1
Signing time: Fri 30 Oct 2026 23:00:34 +0000
Manifest this update: Fri 30 Oct 2026 23:00:34 +0000
Manifest next update: Sat 31 Oct 2026 23:00:34 +0000
Files and hashes: 1: BW_NoLK8bvq98NW3uQCVBILUjdc.roa (hash: Yv7HzXY6brkJdNWi4vkWfsAkacdbGVR0g6RZPDb2Wbo=)
2: GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl (hash: 8a9huX79qolwsF3KdL7j3j3fb95TLvTjtLlEioqBK1A=)
3: UvhzMGyTfEF1hpgc3K2nc1IVHoI.roa (hash: cbsC5/gFhJ1QzmTO5tqc9Od4dJZpIwpWSVpRJbM9KoY=)
4: vQDrdsVKUyg3AdinxsQg6qe1Fs8.roa (hash: FsUD/qILrBqWkPuIKdZisJEsoMgHswVeHLUrDTTRgbo=)
5: wIewyVcuV4glOwAciJdc6xtEcA0.roa (hash: P+orYhZY32r0vN37BZW90hJsNwEYMuvTdq9aVkdcNxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:0b:25:9f:17:db:9a:45:2a:11:f0:b1:b3:32:b2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Validity
Not Before: Oct 30 23:00:34 2026 GMT
Not After : Oct 31 23:00:34 2026 GMT
Subject: CN=8765a524fcce91f3b9d7f3c93bb01f831dba91a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:94:8a:77:de:92:89:6d:f5:d3:8e:37:a7:66:
4f:73:23:94:9c:18:49:2f:d1:f4:37:28:c2:12:3b:
38:0f:df:95:5a:a0:54:3d:ad:db:70:2f:9e:9b:4c:
e2:9c:06:8e:4f:23:a5:d3:3e:3d:fb:ac:09:33:04:
33:9d:31:bf:bb:f0:af:0b:75:a7:74:b6:38:e7:0e:
77:4d:09:4e:dd:ca:e3:21:24:84:4a:31:46:36:71:
32:e9:01:22:99:de:9a:8f:31:04:f2:e5:a3:01:76:
25:29:e8:64:84:bb:fc:09:a1:5a:7f:07:48:39:74:
31:73:00:0d:6f:12:cf:2c:4b:91:17:ea:da:2c:e3:
9a:f6:eb:f1:49:17:ba:76:b1:ce:30:7e:11:6e:3a:
62:8e:0f:7a:05:ae:d7:fb:ef:aa:05:0d:e5:34:25:
19:c6:12:ed:00:7d:09:39:fe:1a:89:1c:0c:bb:3c:
f0:86:14:09:3d:33:99:45:24:08:33:4f:6d:fd:86:
15:33:dc:f9:cb:19:41:c9:f2:c9:83:58:39:d7:e7:
a3:5f:da:2a:3d:44:24:fa:d1:11:0b:a2:77:57:1a:
17:dc:9b:97:0c:2b:32:48:fd:4d:b9:6c:b0:17:09:
61:28:80:df:02:15:48:5f:2e:19:66:a0:c9:26:12:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:65:A5:24:FC:CE:91:F3:B9:D7:F3:C9:3B:B0:1F:83:1D:BA:91:A5
X509v3 Authority Key Identifier:
keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:63:da:b2:db:07:d7:7c:14:50:1d:d7:4b:57:29:9b:2d:7b:
0f:e1:24:da:15:9b:95:bc:80:b2:c4:d3:2f:db:ae:a9:b3:1d:
99:ee:b2:50:7d:d7:88:f8:4d:b7:f2:07:98:ee:51:8e:75:6f:
e5:11:e1:20:82:70:30:a4:88:a4:41:17:7d:0b:e5:1b:d0:89:
1b:8e:ac:8a:a5:2c:b9:d8:b8:93:ff:f1:1b:7d:a3:69:3f:54:
4f:c2:c2:9f:86:05:0f:20:93:31:8c:c2:4e:b1:78:0c:b6:74:
34:87:43:e3:b4:91:bd:14:eb:43:ec:d7:94:e6:40:8c:28:f6:
f6:ec:c3:dc:6d:f4:3a:a2:77:5d:f5:37:8e:2c:16:23:b9:4c:
56:76:84:33:9c:46:6a:f6:f8:2a:89:ec:c2:df:98:11:4c:af:
92:0c:17:1b:83:e9:6d:e4:75:67:81:73:9a:25:34:aa:45:f4:
53:03:7f:e4:7c:8e:71:0d:ac:12:d0:d4:bf:81:ca:96:28:4b:
5e:cd:ca:ab:a8:8f:a3:d8:48:eb:96:06:a3:08:c5:25:5c:89:
66:de:d0:93:97:ba:22:a6:68:25:39:9c:3b:01:c7:73:f8:7b:
19:71:57:e2:67:ee:95:bb:58:00:b0:b3:e9:41:43:1f:83:5d:
76:b9:ef:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:41:37 2026 by rpki-client