Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: ajrjQVPUJsZOx3ynrs+3tJPVlRUwKmAwzCxUmaKMHeU=
Subject key identifier: 62:26:7A:EF:5E:CF:EE:CA:D2:B8:0D:14:A1:B9:0B:AA:E4:41:37:73
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 01A1254284777764912E88219DF6D6C8B6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0DDB
Signing time: Sat 10 Oct 2026 10:01:18 +0000
Manifest this update: Sat 10 Oct 2026 10:01:18 +0000
Manifest next update: Sun 11 Oct 2026 10:01:18 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: +npNyBgZl6tsxbGo+CJDmm6s/FRSmbu5NTKtiy8qnVQ=)
2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:84:77:77:64:91:2e:88:21:9d:f6:d6:c8:b6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Oct 10 10:01:18 2026 GMT
Not After : Oct 11 10:01:18 2026 GMT
Subject: CN=62267aef5ecfeecad2b80d14a1b90baae4413773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:73:2f:da:50:ad:78:79:8c:46:22:56:14:97:
ee:7c:06:fc:c6:1f:62:1d:d1:10:34:14:a7:7e:9e:
85:fd:3e:bc:2a:32:b0:51:5c:ad:9f:4c:4e:29:f5:
0b:1e:0c:42:d9:20:c7:43:5a:91:a1:20:1c:99:b5:
f0:d2:7c:2c:ea:e6:a6:5a:9e:b1:7c:ce:c8:7a:91:
69:72:0a:82:73:11:3d:8a:40:68:fb:75:5e:34:91:
56:c6:3e:31:17:12:24:e9:08:9b:5f:1f:48:a0:8f:
fc:54:df:52:87:7b:78:f9:1b:6e:ed:c3:af:45:9f:
28:9e:29:6b:4c:e2:89:dd:6f:ee:47:0f:d0:0c:61:
61:65:b3:f2:35:26:d9:1b:30:77:52:45:e0:e7:6c:
1a:80:20:58:ae:55:ee:0d:13:c3:34:36:05:3f:91:
5b:9b:d5:be:df:bb:48:6a:b5:02:4f:15:d0:56:a4:
31:b1:5b:79:94:d0:70:67:92:d5:dd:a6:38:75:99:
0d:93:82:7a:d0:ed:bb:b5:67:2f:d8:b1:bf:61:2a:
a8:89:c3:93:b3:45:ba:38:d4:3c:b5:53:cd:c4:b4:
c0:eb:2e:b4:1e:a2:0f:a5:35:d0:fc:3c:d8:5d:f8:
fd:f1:b3:93:13:3a:c2:11:5c:a4:01:b4:26:ff:32:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:26:7A:EF:5E:CF:EE:CA:D2:B8:0D:14:A1:B9:0B:AA:E4:41:37:73
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:56:7f:1a:01:88:5a:96:67:d9:67:c3:89:54:2f:99:fb:40:
01:d1:21:5a:68:30:68:2c:3d:00:e2:d2:f6:68:45:53:45:1a:
3e:30:e7:0e:18:39:f2:36:50:81:ff:1f:02:03:97:08:2d:93:
58:62:f6:38:a8:ba:3d:8e:63:0a:59:2e:33:68:5b:88:fa:e1:
a7:3f:f1:b1:dc:d9:65:19:47:11:2e:9d:1c:e6:88:7b:a2:bf:
51:06:28:9a:f1:21:98:a6:79:1d:82:bf:69:c2:0c:fe:d3:48:
f7:5c:5e:32:dc:b7:27:5c:93:45:8c:1c:ac:5c:4a:23:4e:13:
71:a9:4d:8d:f6:a2:a9:d0:91:a0:51:25:54:8f:5f:62:2a:ef:
e9:d6:91:b3:55:6a:17:71:36:5a:ff:9b:ef:09:ea:5a:aa:f0:
8b:ed:54:77:4c:1a:71:82:eb:8f:2f:70:10:f4:8f:76:0d:85:
96:a6:d0:26:0b:be:02:c4:51:99:14:b6:98:3b:e8:b1:8e:59:
6e:12:1d:59:11:d1:b2:b4:ab:23:a8:98:2c:13:b4:d3:22:2e:
4a:aa:76:f7:0f:c4:70:17:84:e7:fe:86:92:66:5a:1e:0f:43:
f3:53:fc:b2:01:de:df:6c:15:5a:04:f0:71:15:69:0b:e8:c8:
f3:60:26:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:31:16 2026 by rpki-client