Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: eHv8ShqDStut5p9RsXdM5aqrgnGIAwgmyjxcbqOKKwQ=
Subject key identifier: 9B:9A:CD:6E:B0:08:DA:BD:8A:B2:18:0B:2A:0C:E8:D4:A9:CB:03:27
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 019F295B7125CA795B794142E9E1B4021304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0CD4
Signing time: Fri 03 Jul 2026 19:01:26 +0000
Manifest this update: Fri 03 Jul 2026 19:01:26 +0000
Manifest next update: Sat 04 Jul 2026 19:01:26 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: ErM2NpGsVeummbcIKeNDRy7zOEvAW4tYXmc986kxMqs=)
2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:5b:71:25:ca:79:5b:79:41:42:e9:e1:b4:02:13:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Jul 3 19:01:26 2026 GMT
Not After : Jul 4 19:01:26 2026 GMT
Subject: CN=9b9acd6eb008dabd8ab2180b2a0ce8d4a9cb0327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:45:31:b0:39:eb:34:05:d6:74:cc:55:ca:
4e:5b:0c:cd:89:14:c8:7c:e0:ee:e1:c2:7b:b1:32:
af:a4:e4:f7:99:2d:72:fe:27:b9:c3:31:8a:94:d4:
62:fb:7f:5e:02:ed:ba:e7:a7:5b:90:a0:e5:5f:7c:
94:ed:17:e0:23:52:75:e2:c4:5b:2b:47:1f:d4:d4:
32:40:a6:07:86:8d:bc:ca:c3:f8:f3:43:05:0f:00:
c4:02:ba:12:80:f3:c6:d9:a4:59:21:cb:a4:a7:e4:
28:04:12:55:4d:cb:b8:ea:7a:ad:d6:d0:92:09:dd:
46:15:ff:71:46:45:73:66:a7:bc:36:2f:23:75:34:
04:1b:4a:27:a2:33:dd:2d:eb:c3:9c:21:4b:83:29:
70:cf:be:35:13:40:eb:1c:7b:0b:2e:88:d2:bf:0b:
00:2a:45:a5:88:4e:28:b3:31:53:b6:37:0b:7e:f4:
ef:1a:23:fb:13:28:2c:0d:06:8b:76:9c:df:c0:3e:
8e:13:01:92:c6:cd:09:08:95:ee:2e:dc:f5:7d:ed:
88:5d:38:92:06:20:d4:b3:f6:bf:f2:e1:4b:0c:32:
8e:9b:2b:70:8a:99:da:16:f9:0b:43:93:83:c4:17:
35:2d:05:fe:f5:18:13:c3:08:02:b9:6f:74:d4:dd:
95:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9A:CD:6E:B0:08:DA:BD:8A:B2:18:0B:2A:0C:E8:D4:A9:CB:03:27
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ab:c9:12:2f:f6:73:e6:b3:2a:67:f4:43:0d:e9:f7:07:a9:
69:29:c9:2a:43:bb:42:68:eb:d0:0b:88:07:eb:07:89:a6:dd:
5e:07:ea:73:2c:75:b9:63:a3:8a:cf:61:41:ea:b2:f3:c1:52:
e0:77:ce:a1:3b:bb:83:ca:0b:13:2c:b5:de:97:dc:77:59:c9:
78:38:25:49:02:8c:51:75:18:b3:85:90:88:99:dc:1f:97:c6:
05:92:4a:a2:23:35:02:56:e0:c6:9c:9d:e7:9d:fc:01:e2:ef:
87:2d:f9:f1:ec:23:3f:34:9d:8f:f7:11:7a:0d:74:ef:ce:b9:
bd:aa:da:ef:ef:ca:1b:b4:70:15:43:11:83:3a:f5:98:21:8f:
ee:18:74:6d:05:57:48:2e:a1:ff:08:dc:b3:6c:f2:19:a6:f6:
37:e3:5d:9e:3d:a0:5a:1b:aa:a1:2e:22:6b:b7:09:66:2b:65:
30:5e:b4:5a:8d:b9:22:f4:15:23:bf:37:8e:6d:53:e4:d3:79:
a0:a6:13:fa:a6:cf:19:80:9b:e8:58:dd:89:e4:bb:83:91:2e:
c3:ea:da:dd:f2:25:42:23:fc:72:14:4d:e7:4d:f7:7d:e1:31:
15:58:8d:f4:10:cb:6e:d0:37:71:f9:2c:8b:41:32:88:27:ec:
23:1b:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:48:37 2026 by rpki-client