Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: Vm2smpHol5eY95OEHdYIlNjdFggYt329IHo8NFLM9NE=
Subject key identifier: DF:94:EA:04:51:A6:9C:7F:4C:8C:95:42:7F:92:08:CE:38:72:35:B8
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 01A140F149D85F9A278F21068C9DC385275C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 1257
Signing time: Thu 15 Oct 2026 19:01:57 +0000
Manifest this update: Thu 15 Oct 2026 19:01:57 +0000
Manifest next update: Fri 16 Oct 2026 19:01:57 +0000
Files and hashes: 1: 9PZjCn76gwRRUpq9MvbclVXkdOU.roa (hash: CaqNlJNQ1Ni2aWKqDPfoQcAYDuSQhepNqZ+uo297E2U=)
2: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: D1Tu71PV9hTObzDekrO7J6FqvQ+GSkITFzeIIFUXenk=)
3: ur76ehndzl2-pGTHmrbh1qcAWBI.roa (hash: Sb+oNrAUwZsJERFHDlGdgS7sblzKLRz12cNiy1csEgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 19:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f1:49:d8:5f:9a:27:8f:21:06:8c:9d:c3:85:27:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Oct 15 19:01:57 2026 GMT
Not After : Oct 16 19:01:57 2026 GMT
Subject: CN=df94ea0451a69c7f4c8c95427f9208ce387235b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:d1:df:18:d4:54:17:15:dd:c5:6c:8a:83:
0d:4a:19:b2:29:7e:a5:c2:de:b8:86:cd:ed:fb:31:
79:ee:5e:e4:c7:dd:86:0a:f1:62:2c:3a:9b:d9:73:
a9:ad:3d:3e:54:57:0a:07:3a:46:10:e0:16:3e:35:
65:b5:ea:d8:6a:c5:e9:6d:23:90:fd:b1:be:61:20:
49:af:66:1e:a2:5b:7c:08:df:4a:1d:d4:59:1e:f8:
82:a6:7a:90:f5:8c:c1:74:5d:72:ce:de:25:c4:c0:
69:b3:cb:0d:c8:c6:f2:85:8e:bd:53:1e:01:ae:29:
5b:be:e7:9c:59:44:ed:b5:28:f7:f1:56:0f:bc:53:
a9:3f:d6:76:9a:63:88:8a:f7:96:1a:e7:43:fb:6f:
d1:9b:39:75:2c:56:2e:01:58:9b:08:95:a8:f1:30:
2b:07:b4:f1:4a:e7:2a:10:56:fe:d5:66:30:48:07:
b2:d5:7b:ed:0f:bf:0b:3d:82:30:9c:61:98:05:ba:
32:14:e6:b9:f7:24:93:9f:53:33:41:3f:60:a7:91:
97:c3:21:6e:9f:e4:73:63:04:69:10:8e:26:0b:8c:
8e:2d:25:fa:9c:d2:6c:e4:bc:7c:84:cd:c5:cf:58:
54:a4:fa:60:5f:a2:cd:b4:55:24:01:5c:7d:0a:e5:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:94:EA:04:51:A6:9C:7F:4C:8C:95:42:7F:92:08:CE:38:72:35:B8
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9f:6c:f4:96:18:43:a1:ca:ed:14:e5:02:9f:dc:af:bd:d1:
d6:75:22:8c:a5:3c:20:40:d5:03:76:99:d8:5f:fc:90:aa:4d:
8a:ab:ce:85:6d:45:b0:3a:7c:bc:90:34:c6:06:8b:d1:87:13:
0a:94:c8:b4:34:75:2a:aa:83:dd:be:88:39:7a:eb:86:f7:d2:
a1:0a:f8:24:85:ad:05:e0:2a:6b:ca:c9:7f:82:da:51:17:c1:
0e:d6:2b:bd:9d:5a:45:6a:bc:ff:76:6e:f3:62:1a:0a:0d:77:
f3:3f:07:b4:83:a8:99:b6:1c:32:64:12:a7:31:c6:a9:27:4c:
e0:d8:b1:77:4f:e2:b7:58:1e:b6:68:95:cf:da:18:fc:78:e0:
46:e2:fc:4e:93:49:ee:a5:99:e6:f9:88:08:e4:0d:6d:14:6e:
98:54:f6:e4:bc:55:da:1f:0a:a3:e4:7a:9b:22:ee:44:6e:c6:
c2:46:7f:4a:be:6f:26:d8:c6:1f:15:ff:d7:5e:43:4d:11:ea:
52:52:a9:ca:4f:2a:87:38:f4:02:4a:8f:e8:84:07:f0:f9:82:
03:86:03:5b:a5:e9:05:73:bf:bb:a0:ab:a5:c5:4e:24:39:02:
19:d9:fd:d0:f5:c1:58:a0:ea:96:c5:f3:de:9f:8e:d9:d6:eb:
7e:ad:11:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 06:41:46 2026 by rpki-client