Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.mft
File: gFTM2r30q23tum5-vGuFVhIWp8I.mft (raw, json)
Hash identifier: MqhBo+rzzQIuWeBvz3E1YThoNDk2anD4FOtoM+0s0aQ=
Subject key identifier: 66:9E:E5:90:EC:1B:11:43:95:D6:A6:F5:96:1E:DC:77:29:81:E7:99
Authority key identifier: 80:54:CC:DA:BD:F4:AB:6D:ED:BA:6E:7E:BC:6B:85:56:12:16:A7:C2
Certificate issuer: /CN=8054ccdabdf4ab6dedba6e7ebc6b85561216a7c2
Certificate serial: 01A18977C20313AC419259A7A6FF7340AC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFTM2r30q23tum5-vGuFVhIWp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.mft
Manifest number: 0145
Signing time: Thu 29 Oct 2026 21:01:29 +0000
Manifest this update: Thu 29 Oct 2026 21:01:29 +0000
Manifest next update: Fri 30 Oct 2026 21:01:29 +0000
Files and hashes: 1: cSrvIBBg9Bs2xIkNy9xHTScyMPc.roa (hash: qTMbAxvVKSY9LQIKpalsM/DeRx12O22u83d40FQyhIo=)
2: gFTM2r30q23tum5-vGuFVhIWp8I.crl (hash: JBTXucnKuutZHfHkd6dzFjMVO21i+uOszqgfxvE9Hv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFTM2r30q23tum5-vGuFVhIWp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:77:c2:03:13:ac:41:92:59:a7:a6:ff:73:40:ac:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8054ccdabdf4ab6dedba6e7ebc6b85561216a7c2
Validity
Not Before: Oct 29 21:01:29 2026 GMT
Not After : Oct 30 21:01:29 2026 GMT
Subject: CN=669ee590ec1b114395d6a6f5961edc772981e799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:42:da:3a:01:5c:75:53:43:7f:2d:b1:f8:ef:
74:b7:d1:10:38:48:e4:c6:1c:f1:0d:9e:41:5b:7d:
c2:a7:55:28:fb:d0:9a:f7:71:d7:b2:81:3e:d5:7c:
5d:41:e7:ae:c6:a6:b2:81:f2:0f:62:49:99:d7:43:
4f:ce:c4:47:89:fd:3e:67:41:70:c7:d3:20:4b:f1:
89:6f:52:5b:17:80:da:d2:66:3b:75:43:bb:43:3a:
57:ed:bb:a5:25:9b:95:eb:b5:a1:3b:a4:43:ce:88:
b5:5b:17:43:97:e7:29:a2:c8:36:95:c6:2c:51:45:
5d:64:ba:e7:e0:42:78:20:29:30:b5:29:7c:35:4b:
a4:ea:94:17:97:5f:da:1f:d1:f2:52:50:39:a2:e3:
d4:61:2d:75:8e:6a:3d:db:d6:9b:6c:d1:84:0b:7d:
87:32:0d:f5:7e:4a:57:d4:cf:c4:4d:21:87:1f:9b:
d7:8c:b8:17:81:cc:44:57:84:6b:43:12:92:70:03:
b5:19:63:1d:7f:67:ab:01:9f:f0:7c:8b:c7:c8:d6:
66:4d:b2:b5:61:ba:3f:8c:46:ae:04:88:d2:6b:83:
0f:d8:84:5a:e3:7a:f3:53:73:a1:2c:2d:29:ad:64:
37:6b:92:f7:6e:4c:f0:55:f6:be:a6:9f:50:c0:39:
f4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9E:E5:90:EC:1B:11:43:95:D6:A6:F5:96:1E:DC:77:29:81:E7:99
X509v3 Authority Key Identifier:
keyid:80:54:CC:DA:BD:F4:AB:6D:ED:BA:6E:7E:BC:6B:85:56:12:16:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFTM2r30q23tum5-vGuFVhIWp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:41:ec:a6:7d:b1:0c:27:7e:8d:31:cf:5d:b3:60:25:f6:31:
d6:17:4e:87:62:83:ad:5b:f3:09:d5:58:99:47:5d:82:84:94:
95:34:20:b4:69:81:5c:b7:4e:92:35:8b:c8:c9:e7:19:65:c1:
36:f4:2f:c4:6c:ce:f3:24:3b:6a:3d:44:43:3e:d1:13:a7:43:
cd:3b:ca:2d:62:5f:8b:6b:44:4c:ae:d8:16:5e:49:7f:38:89:
44:7b:44:a3:51:cc:61:7f:90:e3:0f:31:20:16:e6:03:1c:53:
07:16:31:96:ef:5b:79:6d:9b:bf:38:fb:fb:66:c5:b6:d6:52:
2f:68:84:a5:78:99:0b:f4:ff:fb:05:af:5e:96:d6:e9:21:07:
05:25:f8:ce:d1:e0:cc:26:48:46:7a:1d:04:52:b7:a0:56:0d:
f2:7c:1b:0d:07:87:4c:cf:ea:fd:e8:bf:aa:c8:4c:f7:25:26:
75:da:7d:b2:f2:dd:fb:2c:1a:87:6c:6a:4f:c5:b3:bf:c1:ef:
21:68:99:80:85:07:4e:1b:64:5d:d6:76:06:68:70:b1:85:79:
c6:d0:ca:11:de:46:a5:2f:f4:75:41:05:48:6e:63:2c:24:ab:
36:53:f2:72:1c:7f:5b:2b:34:0e:cb:f1:2a:b9:72:88:49:fb:
55:cb:c6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:38:58 2026 by rpki-client