Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: +y2ZdTjxpCALt6jm9SKe6v+7bUWs1q0AoFU2pscQNbg=
Subject key identifier: A1:D4:5B:52:1E:44:90:1D:89:E9:BB:06:AF:38:7F:0F:BC:23:0B:60
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 01A178F0DC0B1BBD8AF4319B0061F329EB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 1274
Signing time: Mon 26 Oct 2026 16:00:13 +0000
Manifest this update: Mon 26 Oct 2026 16:00:13 +0000
Manifest next update: Tue 27 Oct 2026 16:00:13 +0000
Files and hashes: 1: 9PZjCn76gwRRUpq9MvbclVXkdOU.roa (hash: CaqNlJNQ1Ni2aWKqDPfoQcAYDuSQhepNqZ+uo297E2U=)
2: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: 9t4mkUHvoBaDA8JHiAfKdt+RvnQc6+ms6tc+xJj/804=)
3: ur76ehndzl2-pGTHmrbh1qcAWBI.roa (hash: Sb+oNrAUwZsJERFHDlGdgS7sblzKLRz12cNiy1csEgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f0:dc:0b:1b:bd:8a:f4:31:9b:00:61:f3:29:eb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Oct 26 16:00:13 2026 GMT
Not After : Oct 27 16:00:13 2026 GMT
Subject: CN=a1d45b521e44901d89e9bb06af387f0fbc230b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:ba:79:bb:b5:91:fb:a7:84:74:38:cd:35:
09:3d:36:7b:99:d4:1a:a2:c6:3a:0e:5b:91:7a:20:
15:80:4d:87:6b:8d:12:fe:14:1b:59:c6:76:52:57:
d7:4b:21:46:01:72:04:80:5f:51:be:cb:01:82:7c:
0f:df:72:a6:4d:0a:ee:2e:df:da:f4:3e:cc:14:8e:
cb:6e:b4:86:6d:6a:bb:43:a4:dc:25:d1:ab:f9:d0:
14:9c:ee:32:0e:f5:c4:ab:27:c5:10:0b:47:81:7e:
19:69:c2:48:83:24:17:4b:af:64:f4:50:26:e6:6f:
6a:d4:cd:35:e4:93:14:4b:e6:4d:ef:bf:8d:e9:0d:
19:a8:86:c4:57:0e:42:a9:0d:b5:94:8c:5e:27:78:
48:aa:d2:36:db:eb:c8:e0:54:8c:1c:b2:0c:fe:fe:
66:b7:69:48:9f:30:ed:f1:61:50:78:26:b8:b0:3e:
e6:d8:bb:8e:c5:74:11:10:c4:de:3c:d3:72:81:5a:
b1:51:f1:60:4c:b4:36:7e:28:10:9b:56:b1:4e:64:
d3:8a:37:9b:b7:d6:0d:54:e5:80:07:c6:46:f0:b6:
c7:1d:41:f5:47:eb:81:78:9e:a2:74:3a:1d:6a:b9:
09:33:34:65:c7:1e:0c:5c:d9:dd:69:70:90:b8:88:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D4:5B:52:1E:44:90:1D:89:E9:BB:06:AF:38:7F:0F:BC:23:0B:60
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:be:db:3d:41:0b:3c:f4:f8:1c:02:57:69:09:70:d9:40:9f:
0e:e3:a2:4b:34:ff:29:aa:2f:a8:02:47:ea:fe:32:7c:e6:4b:
4f:cf:b8:79:56:45:29:1c:fe:20:f2:8a:16:f0:eb:e0:a5:07:
ae:27:a6:55:60:b7:fd:50:3d:38:77:e5:9a:b4:c3:15:f9:20:
2f:01:c6:62:e2:ff:73:f5:c1:fa:66:f9:58:74:e5:41:5d:4a:
95:b0:12:09:55:2c:bb:1b:02:66:a2:99:e4:37:5d:9a:ea:fd:
d7:9e:ee:82:a9:7d:e2:91:b2:8f:5b:fe:34:31:5f:5a:3c:2d:
e4:ea:81:5c:8c:aa:02:76:34:4b:b9:00:e6:ed:ee:0c:64:32:
55:e3:a8:df:96:cc:9b:31:56:ac:53:65:f0:6a:53:97:35:b7:
9b:04:cf:d4:cc:61:d2:6e:35:d8:22:f9:c0:0f:0e:2a:5e:e6:
10:f0:e0:33:b8:d6:7f:e4:a1:54:01:a0:ec:b3:d7:55:12:e5:
40:21:e8:78:8c:66:b1:da:6d:76:11:10:57:5f:40:e2:62:e2:
9d:8b:62:1e:6a:f6:98:d6:41:bb:74:92:fb:af:39:e8:15:18:
97:4f:96:4b:b9:18:eb:a3:20:bc:d9:1d:48:6c:88:e1:37:48:
60:ee:c0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:46:53 2026 by rpki-client