Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: hww7WRXRo8m0tcXfy5IjlDWTCex3V2egCh4LXSU3M0A=
Subject key identifier: FB:1A:28:83:3C:EF:2D:36:FB:96:1A:7A:8C:F8:0C:C2:29:CD:12:B4
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 01A0024B01CBD5209CFCCBF7476675B2111D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 11B2
Signing time: Fri 14 Aug 2026 22:01:05 +0000
Manifest this update: Fri 14 Aug 2026 22:01:05 +0000
Manifest next update: Sat 15 Aug 2026 22:01:05 +0000
Files and hashes: 1: 9PZjCn76gwRRUpq9MvbclVXkdOU.roa (hash: CaqNlJNQ1Ni2aWKqDPfoQcAYDuSQhepNqZ+uo297E2U=)
2: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: t2ecU7HRSkyjEGuVkLBGaRu2tg7e1HB+uWj0OLqXr3w=)
3: ur76ehndzl2-pGTHmrbh1qcAWBI.roa (hash: Sb+oNrAUwZsJERFHDlGdgS7sblzKLRz12cNiy1csEgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:01:cb:d5:20:9c:fc:cb:f7:47:66:75:b2:11:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Aug 14 22:01:05 2026 GMT
Not After : Aug 15 22:01:05 2026 GMT
Subject: CN=fb1a28833cef2d36fb961a7a8cf80cc229cd12b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:d2:92:61:16:47:61:63:23:98:5f:cb:b4:
7a:0f:a1:7c:41:5c:f4:44:e3:65:99:fa:ef:e1:e1:
d2:05:80:91:1c:95:23:00:87:e4:59:fa:e3:01:36:
a6:41:98:f7:e3:f7:63:16:25:eb:30:a2:5b:79:56:
b4:f4:d9:97:ef:a4:e8:f0:ca:c5:4f:19:50:e6:7f:
99:88:49:02:32:fd:ea:e9:d2:76:e0:30:6d:77:db:
58:73:de:89:42:fa:10:38:59:13:af:d7:9c:08:8a:
e6:b1:ea:3c:44:fc:d2:c1:c7:05:65:37:51:b2:31:
45:64:5b:30:05:f2:52:8b:64:82:08:a5:c0:29:8d:
d9:77:25:c8:73:28:a2:81:a8:40:5d:4d:f2:24:8a:
65:af:a8:e5:81:7f:eb:ae:d1:47:1f:ca:2d:9f:bc:
e5:67:07:b7:04:6e:32:fe:a6:85:e1:0c:b0:dc:39:
f0:a0:8d:11:29:2c:5a:c8:27:67:25:30:9a:0a:59:
af:3a:04:d6:27:c9:f0:61:48:b6:75:0c:e1:24:21:
83:25:f6:ff:7a:96:1a:ae:73:f8:c5:52:fe:34:eb:
2e:1d:ed:1d:8f:d8:39:f0:ea:6c:5f:fa:1a:5c:8d:
a7:6e:7d:7a:05:2a:1b:c5:d0:21:7e:f9:0e:9b:49:
b8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1A:28:83:3C:EF:2D:36:FB:96:1A:7A:8C:F8:0C:C2:29:CD:12:B4
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c2:4a:ae:3e:a1:97:25:9b:44:50:3d:ba:7c:83:cf:5e:c3:
9f:01:d4:d9:dc:a1:02:1c:93:bc:2d:2f:2f:89:e5:bc:71:3a:
f4:b9:5c:96:7c:8a:a8:e9:9d:5e:17:9e:e2:30:ac:67:84:82:
79:c3:99:b1:27:ba:86:f0:1d:9a:d6:53:c2:fb:48:69:e6:ea:
33:6c:c3:fc:ef:da:31:ed:97:60:e1:1b:af:ec:ad:f6:9c:2d:
ed:a9:f0:52:3a:d9:49:41:bb:e7:0e:f5:bf:55:19:f8:f6:86:
6b:f3:81:96:b9:30:43:21:3b:d0:cf:ca:41:f3:ca:d9:d9:7e:
ef:fa:b3:c4:58:76:71:87:39:6a:94:72:14:e0:a0:1a:ec:ef:
b6:eb:c6:de:21:45:f0:e6:0b:3a:7e:7b:86:9e:65:d3:75:90:
94:ab:fd:9d:f5:a3:2a:20:e8:70:11:f6:61:c6:de:12:10:84:
37:e5:49:f7:da:43:e3:3a:60:5e:a8:75:f7:65:ba:3e:70:2d:
ff:eb:d6:c7:11:b8:20:8b:27:3b:a2:4b:75:a9:2f:66:47:64:
dc:03:b1:c9:18:d3:36:66:ba:c1:81:a0:ee:90:83:e5:b2:b2:
70:a9:98:ca:06:ff:fb:bd:15:84:d8:4e:d5:6a:6f:14:a9:b2:
91:28:6a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:30:26 2026 by rpki-client