Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: k2DoBR3fb3frOvKoUqH4YFl+el6T8fTwLbDB0T/7ns8=
Subject key identifier: 00:4D:A2:E9:D8:45:54:38:4D:99:BE:EF:54:DA:B5:41:E6:40:D9:B1
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 01A01909694CC45EF90A74B33857D49606EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0F92
Signing time: Wed 19 Aug 2026 08:00:42 +0000
Manifest this update: Wed 19 Aug 2026 08:00:42 +0000
Manifest next update: Thu 20 Aug 2026 08:00:42 +0000
Files and hashes: 1: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: hx02uBNw3ECv+CU1A1JhMc4XqP6u63roqtsRkNFqmQQ=)
2: ioSKJKkF_4HM_F6u6RJnkLY1uWU.roa (hash: WbXNH1FTymiYyoPgw712is108gr5GM8N98thfxq0yjg=)
3: s7B9p4vTJAow4sBYhbnToQXwFKo.roa (hash: nHDCoe/MNgEdbVoOhEHnJFTP5BTnyS6pKwNLw3+w7aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:09:69:4c:c4:5e:f9:0a:74:b3:38:57:d4:96:06:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Aug 19 08:00:42 2026 GMT
Not After : Aug 20 08:00:42 2026 GMT
Subject: CN=004da2e9d84554384d99beef54dab541e640d9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:08:dc:e3:ed:b1:4e:9d:2f:2b:ee:68:fd:
82:b3:dd:74:05:2e:25:e1:24:6e:58:7b:2d:23:a2:
bf:56:2c:46:41:f5:1a:f1:0f:9c:e1:d8:c8:c9:e7:
9d:38:2c:ca:7f:0a:47:bd:4a:a9:93:11:3b:c4:96:
e6:c3:f5:aa:de:a1:48:fa:5c:9e:87:1f:47:f2:39:
d8:85:1f:29:b5:53:e9:25:11:1a:9a:92:1c:79:8c:
3b:8b:ce:ca:ad:47:c1:18:d1:33:3e:ec:f6:cb:72:
87:67:3e:b7:7b:a7:66:4c:e1:16:b7:0c:23:dc:60:
1a:dc:c0:20:1d:c8:e0:d6:a8:9a:24:9b:cb:fa:10:
fa:1c:fc:f7:81:bd:ff:16:07:8f:59:fa:d2:2b:fb:
f8:86:73:95:15:9e:f8:62:f4:05:ef:87:71:29:79:
82:aa:7f:c5:d7:28:23:f4:53:0c:e7:62:aa:84:ec:
40:49:b9:3c:ba:00:d2:c2:ff:de:39:58:c5:aa:25:
aa:cd:4d:c4:c2:ae:ec:81:b6:30:0d:fa:5e:f1:08:
90:2b:9b:9a:e3:f6:ba:8d:a6:27:f0:0e:93:b6:ef:
34:81:f1:12:f1:b4:af:34:7a:1c:81:ba:76:53:cc:
02:3f:cd:a3:94:bf:46:ed:8b:cc:a4:f4:84:26:eb:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4D:A2:E9:D8:45:54:38:4D:99:BE:EF:54:DA:B5:41:E6:40:D9:B1
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b7:ad:e7:b6:c1:65:67:66:af:0f:50:b8:3c:35:4f:16:ff:
eb:ae:64:84:7b:d2:74:28:7e:ea:ca:f1:d5:4d:e9:1c:ac:e7:
6f:21:4a:b5:25:44:4b:1a:83:76:a5:8c:2e:78:94:11:d3:b1:
f8:55:28:d8:e4:23:f5:da:cb:3a:c0:41:4f:ca:ae:11:b9:1c:
35:01:5f:a9:eb:66:eb:5b:f7:f4:7c:08:93:dd:c5:c8:7d:03:
25:3d:6f:84:a0:bc:1d:f6:d2:21:b2:df:73:35:7f:5b:5c:85:
e1:49:d9:5e:d3:ab:97:16:72:26:e4:9f:26:05:cc:7f:49:c5:
3b:f2:35:6e:91:fa:5a:3d:a4:4f:87:22:c7:7a:9e:a8:24:8f:
00:4d:4a:95:07:77:68:50:a5:c3:fc:70:7d:03:03:a0:f6:21:
c8:b1:34:a7:e8:2f:13:75:a3:1f:e0:94:55:b1:3e:18:26:9e:
7d:37:ac:0d:a7:8e:12:3b:20:48:ca:43:17:1c:84:0b:84:78:
20:13:ab:b7:b5:48:24:2f:f0:e0:9a:c5:8d:a1:80:56:14:0d:
93:06:dd:59:54:62:e0:5f:db:02:7b:75:b4:34:83:c4:4c:06:
74:c2:20:69:e2:9d:ec:9f:ab:51:da:0a:b9:e1:f5:69:39:69:
41:45:81:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:37 2026 by rpki-client