
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: kvq/9Fdh+kE99x5wQ8dnr/mL7QZlojNPtJW+4kthIKw=
Subject key identifier: 4A:62:35:81:7E:EB:E5:F8:75:27:9C:F7:D7:42:19:AB:2D:AD:D9:1D
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 01A1566603054940862CBD654B58DDFC94A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 1771
Signing time: Mon 19 Oct 2026 23:01:28 +0000
Manifest this update: Mon 19 Oct 2026 23:01:28 +0000
Manifest next update: Tue 20 Oct 2026 23:01:28 +0000
Files and hashes: 1: CiIrcBM9yA3ZewdtgV4N1CH8GZY.roa (hash: /RFq6SqUsBxBmefl/oJJgPlTdelQAi+UQdtXbYFfKHs=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: kjMn/B+qtHDVNwaV6CDiDbCgUXo8Kuo5H91sKYS7nvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:66:03:05:49:40:86:2c:bd:65:4b:58:dd:fc:94:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: Oct 19 23:01:28 2026 GMT
Not After : Oct 20 23:01:28 2026 GMT
Subject: CN=4a6235817eebe5f875279cf7d74219ab2dadd91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:dd:83:c0:87:88:8c:eb:53:ce:57:3c:53:
1b:0b:2d:25:31:fb:14:96:8a:96:fa:5e:54:7d:d2:
c4:8f:6e:65:21:5c:56:1c:71:cc:5e:07:c6:29:01:
8d:8a:d6:08:9c:57:0e:42:f7:40:c7:e2:5f:26:1f:
3b:21:54:a2:d7:80:b1:5a:ed:78:2e:78:10:98:9f:
23:4d:ab:f9:cf:0b:0c:95:a0:21:74:dc:19:73:31:
4b:dd:16:7a:42:14:7c:4c:72:c3:e9:c1:2d:8a:88:
a3:db:af:68:0f:f5:9d:00:90:54:35:f4:f4:63:38:
56:a2:d3:d5:3c:e3:79:c8:c2:4d:50:75:c4:a2:a8:
14:99:54:c0:fd:c9:37:ed:dd:b7:4e:49:d2:8d:5b:
ef:30:8c:da:3c:5f:32:fd:9c:94:76:5c:a8:90:9e:
52:eb:6c:c7:83:58:27:c8:19:95:b4:d6:45:8c:19:
ce:3e:55:8b:92:a2:b7:de:6f:cf:95:a8:87:4b:33:
a9:7a:6b:5c:9e:c2:1d:6e:15:1a:2c:ed:48:dd:e6:
5d:0f:a9:bc:09:e5:dd:a9:dd:9f:b1:ac:67:89:20:
80:51:88:f7:71:af:df:a8:67:99:e6:cc:a6:ad:f0:
b6:ff:f5:42:06:3f:39:57:05:b2:4f:c0:de:41:df:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:62:35:81:7E:EB:E5:F8:75:27:9C:F7:D7:42:19:AB:2D:AD:D9:1D
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:14:11:e4:7d:f6:36:7d:92:20:9f:0a:be:f7:5e:0d:37:e1:
06:62:23:ce:6f:53:4a:5a:06:5c:78:b9:aa:d0:dc:e1:7b:1e:
34:b6:53:ac:37:98:13:18:d7:b2:4c:cf:c5:32:47:79:ce:e4:
2e:cd:5f:33:b3:1b:1a:33:7d:18:e8:e2:85:7d:22:b5:b8:fc:
a0:9d:ad:0e:92:51:56:3a:09:ae:27:70:83:7a:72:98:1c:9a:
8a:ac:46:bf:10:5b:f1:34:a6:dd:7d:60:70:6d:25:ff:5e:20:
61:c6:c9:62:ca:da:51:83:8e:bc:47:18:bc:e7:93:8c:c1:d1:
40:19:f1:ac:ba:73:52:39:da:17:02:ca:f9:96:6a:e5:61:ae:
b6:72:c9:e5:ca:f2:a7:70:bc:f2:18:4f:c1:24:71:1f:7e:6c:
74:d5:f2:3d:8e:b9:01:f9:b1:f3:af:9e:e5:d8:61:43:e5:bc:
fb:b1:d6:55:1e:8e:4a:c8:ec:bd:59:72:66:53:6a:ce:18:6f:
62:26:68:8a:91:8c:d8:65:6c:5c:e9:b1:89:52:7f:b8:09:e3:
8b:c4:4d:3c:de:a6:ff:d9:e6:24:fe:e4:57:44:09:75:02:df:
79:cf:17:a3:75:c0:84:45:ea:de:ca:ec:28:19:63:01:49:68:
2b:8c:c0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:05:14 2026 by rpki-client