Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: uMxzQiKQg/rNRt9y2Z5u/r3p7UqMpIZyZ6mng5zsrso=
Subject key identifier: 30:D3:A6:50:AB:2D:C1:04:71:76:D3:5F:CA:A1:5D:96:97:3E:00:AB
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 01A01AC106E05AC6CD24341611853AF0D905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0D51
Signing time: Wed 19 Aug 2026 16:00:52 +0000
Manifest this update: Wed 19 Aug 2026 16:00:52 +0000
Manifest next update: Thu 20 Aug 2026 16:00:52 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: RC4xKbwnAEouFK3SmhoktQ95lUiT2NEfVFoNGTFMevI=)
2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 13:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:c1:06:e0:5a:c6:cd:24:34:16:11:85:3a:f0:d9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Aug 19 16:00:52 2026 GMT
Not After : Aug 20 16:00:52 2026 GMT
Subject: CN=30d3a650ab2dc1047176d35fcaa15d96973e00ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:28:0f:59:39:54:f5:cf:af:ed:4c:b6:60:
55:de:fe:00:ba:18:26:ec:b3:7f:30:eb:31:91:0b:
b0:27:c1:0d:36:77:1f:67:e6:50:66:87:6e:d4:38:
31:b3:72:b9:1f:66:ed:9a:eb:be:e5:53:6e:8c:e4:
5d:b6:31:77:65:a0:14:3f:19:e1:e2:1c:87:e5:94:
6e:16:4d:11:0b:3e:f1:e4:e3:69:2f:e5:8c:f2:44:
c7:ca:a7:19:db:8e:c8:4f:b0:78:95:64:31:23:c7:
af:69:c0:28:11:0e:6b:cb:25:82:1d:35:3c:28:36:
7b:c4:bd:24:f5:7a:0f:06:a9:65:42:af:d3:66:fa:
69:62:4e:fe:d3:33:7c:25:e8:b0:65:47:45:60:c9:
b8:e2:26:a4:52:03:24:28:ab:8a:f4:a7:f4:bd:c9:
06:ea:d4:55:26:54:c5:45:58:0e:20:fa:61:a4:11:
ab:81:48:8e:0f:69:b7:63:56:54:29:37:a3:f2:ce:
9a:63:f5:16:7b:25:2c:67:34:3d:d2:da:5c:ce:4c:
73:59:28:b1:b0:cf:a0:30:c1:32:2c:68:f7:72:af:
0e:a5:48:24:79:c0:62:8d:e7:cf:a7:0e:af:97:b3:
af:ec:85:1a:f4:99:d9:a2:57:15:86:14:e1:9c:43:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D3:A6:50:AB:2D:C1:04:71:76:D3:5F:CA:A1:5D:96:97:3E:00:AB
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:97:4d:ce:08:99:9b:f5:9f:8b:30:13:ad:79:84:fe:90:ac:
82:69:19:fe:b7:21:45:04:9e:b3:45:e7:d1:0a:05:fb:d7:dc:
bd:4f:0f:98:c5:57:2c:b2:36:4b:75:b8:4c:4b:35:55:e9:97:
5b:3b:3a:16:98:6a:39:6d:db:ba:76:2b:74:ea:72:0e:e4:5e:
a5:8b:dd:f6:c2:4c:3d:43:e3:9c:a8:22:53:82:a7:95:7f:c6:
ac:3d:0e:85:d5:58:bc:f3:4f:4d:c7:f6:9a:cd:3a:51:75:0f:
71:89:a6:63:da:cb:b8:7a:02:17:5b:79:96:04:28:cd:81:2f:
3b:fc:e9:8a:cd:3a:9f:84:33:0b:32:43:bc:90:db:61:db:4f:
b8:8e:ec:8b:6b:cf:7f:a0:9f:46:f1:14:69:71:4c:4f:39:2c:
a3:23:00:55:9e:0b:78:7b:b0:52:2b:5d:82:a6:0c:7b:6c:2e:
6d:3d:1d:97:f5:a0:4e:8e:08:89:3c:4c:ef:5e:18:da:69:9f:
ca:21:5c:f4:9d:54:a3:14:d8:43:4b:79:b6:7f:7e:94:a0:d1:
02:45:58:30:86:3d:65:c1:f2:8a:18:1e:8a:86:04:5a:ec:30:
c9:2b:04:2f:d4:1c:48:b3:56:6a:3e:da:d0:be:4c:1f:ff:78:
11:6c:70:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:55:03 2026 by rpki-client