
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: L3AVsWZsZ1XniM395R8qse8mr3HSwUCGPee4cQloYw8=
Subject key identifier: C8:A0:1A:B2:0C:16:6D:0F:D6:38:C6:AF:29:E4:7A:1C:05:CB:7C:E7
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 01A17C97D479AA06FF7FAD9AC7E966105298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 1A57
Signing time: Tue 27 Oct 2026 09:01:27 +0000
Manifest this update: Tue 27 Oct 2026 09:01:27 +0000
Manifest next update: Wed 28 Oct 2026 09:01:27 +0000
Files and hashes: 1: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (hash: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ=)
2: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: jSmHgizfhHX/OdQwh2GbMm2jWuTZ1VBP+4mywdf1C88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:d4:79:aa:06:ff:7f:ad:9a:c7:e9:66:10:52:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Oct 27 09:01:27 2026 GMT
Not After : Oct 28 09:01:27 2026 GMT
Subject: CN=c8a01ab20c166d0fd638c6af29e47a1c05cb7ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:60:06:d3:73:e2:eb:a6:d1:3d:78:67:cb:
ea:04:60:73:f3:d1:ca:51:18:c6:8e:ca:d0:c6:b4:
52:21:d1:34:15:b7:30:3b:74:6e:56:0a:7a:22:6a:
3c:7b:83:db:29:69:5b:70:6d:6a:d2:64:bc:48:46:
0c:40:5a:81:3b:bc:1d:6b:31:a4:c9:b9:04:4f:50:
20:7c:ae:32:4e:8c:72:9a:2b:d3:19:a5:9d:d9:86:
94:d5:64:cd:96:58:64:8c:1c:e3:cf:b1:df:d5:44:
5f:97:f6:9c:56:d7:62:6e:b3:68:ae:b3:bc:78:f8:
5b:75:ee:9c:77:4d:d4:37:7f:a1:85:04:9e:de:ad:
e4:fc:a0:bf:c1:bb:ee:0e:ff:b0:f3:41:43:fe:0f:
16:02:de:df:9b:c1:b1:7e:a9:eb:ae:49:16:a4:77:
7d:24:c8:2f:9f:dc:1b:b4:a8:af:de:58:cb:7e:39:
39:e0:da:8d:05:fb:81:32:4a:0c:f9:82:f0:7b:fc:
54:0e:34:3a:9e:9f:56:ae:da:69:6d:f3:96:8d:53:
eb:cf:05:79:fa:4d:fa:f3:24:66:95:68:dc:aa:03:
28:a0:d6:67:9a:a7:bd:ed:b4:d6:a2:21:18:c5:15:
10:2c:95:c7:12:b7:8d:eb:4c:5d:4d:d9:d0:99:7e:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A0:1A:B2:0C:16:6D:0F:D6:38:C6:AF:29:E4:7A:1C:05:CB:7C:E7
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:97:5c:f4:1a:ee:9f:13:d8:42:23:cc:a8:05:e0:b0:f4:d3:
2e:31:d7:42:96:a9:98:14:74:28:f4:25:82:da:ce:76:c7:0c:
dd:c4:93:a0:d7:aa:24:7c:60:0c:44:30:2e:06:c4:c2:e4:7a:
41:ad:77:90:fd:f9:66:2e:6c:57:d2:29:d7:99:06:da:e6:da:
f6:a1:d6:3e:bf:6d:64:7d:9a:2b:ce:2e:93:a8:a2:18:54:8f:
62:a0:27:2c:9c:d0:0c:37:b3:b6:d1:8b:d3:36:f3:b2:c1:6b:
c7:e4:95:8f:22:5b:d8:e9:ef:86:0f:29:ff:c2:ba:40:d8:d6:
33:e9:b9:51:63:22:7a:c2:15:b7:6d:d7:6c:56:43:de:d0:04:
06:53:e5:6d:ea:8d:61:43:16:30:fe:53:62:db:97:c1:5c:2a:
39:ed:6f:e3:73:f8:19:98:21:c1:18:a3:bc:97:52:82:72:94:
16:00:46:40:93:c3:d8:05:33:1f:17:67:99:83:69:fd:9b:49:
9c:b6:68:80:1d:24:c5:41:bb:b3:2b:0e:e5:24:66:e1:25:f2:
b2:46:9b:9d:97:42:fa:bf:f0:13:b6:60:14:19:ae:f6:e0:ce:
78:d9:e2:ef:c9:20:6e:50:7a:d7:81:e7:63:e4:a3:1e:44:27:
24:c5:66:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:05:27 2026 by rpki-client