Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: CAaPIYhXTqRdD7ULrU/R28N8K515pZPm6eA2/teO6O0=
Subject key identifier: 90:B3:87:9F:DC:2A:0A:6F:C4:19:42:70:93:97:7B:36:D0:19:10:A4
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 01A11BD0B8D5C30D500DE614EF1D0D4BA8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 1018
Signing time: Thu 08 Oct 2026 14:00:25 +0000
Manifest this update: Thu 08 Oct 2026 14:00:25 +0000
Manifest next update: Fri 09 Oct 2026 14:00:25 +0000
Files and hashes: 1: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: JC79pGYPjpkQhSm+PavwSbuUSOcxfcE5ZWqIiQ7bzjg=)
2: ioSKJKkF_4HM_F6u6RJnkLY1uWU.roa (hash: WbXNH1FTymiYyoPgw712is108gr5GM8N98thfxq0yjg=)
3: s7B9p4vTJAow4sBYhbnToQXwFKo.roa (hash: nHDCoe/MNgEdbVoOhEHnJFTP5BTnyS6pKwNLw3+w7aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d0:b8:d5:c3:0d:50:0d:e6:14:ef:1d:0d:4b:a8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Oct 8 14:00:25 2026 GMT
Not After : Oct 9 14:00:25 2026 GMT
Subject: CN=90b3879fdc2a0a6fc419427093977b36d01910a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:90:47:a7:20:17:0f:81:5b:8b:1a:00:ed:
99:ad:3c:c0:b4:ff:eb:67:7b:a1:46:07:a6:a1:de:
e8:ab:1c:dc:b5:e0:27:bd:e0:92:54:6a:83:18:a9:
5f:2c:8f:ec:06:be:91:14:e6:94:d3:59:92:60:74:
01:5f:8a:94:08:b1:bd:98:0c:fa:16:b9:1b:ff:7a:
93:dc:e1:3d:52:39:dd:3e:3b:81:a1:26:32:26:cf:
f2:11:a0:ba:bc:ab:c5:4f:e1:6e:99:ec:4c:1d:41:
28:1f:9c:19:51:5b:8a:69:85:b7:a3:57:af:d4:bf:
b9:b9:3d:bd:1a:99:16:dc:a5:9e:14:f8:f3:41:f1:
d7:09:e8:df:21:6f:00:7d:dd:e3:bd:e9:ac:19:6e:
33:3e:82:6f:5c:0b:a9:41:39:8b:8f:b6:18:b6:25:
10:8f:9a:a6:40:61:4d:08:3d:5d:e6:0c:0f:67:a3:
35:04:24:53:16:bf:18:03:d4:bb:45:3f:7a:75:8a:
fd:90:c6:74:6b:70:e1:23:4a:c6:50:64:1a:1a:37:
6e:6b:07:81:1f:76:4f:2f:b4:2f:64:10:b6:e3:d3:
02:68:66:3c:00:22:d4:f2:90:fa:ae:80:63:7a:c6:
a8:3b:90:9b:83:45:33:e4:21:32:b1:d2:42:3c:d8:
e6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B3:87:9F:DC:2A:0A:6F:C4:19:42:70:93:97:7B:36:D0:19:10:A4
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:44:9c:08:b6:0b:82:c1:66:b7:70:a4:66:19:4b:81:03:a1:
59:84:83:a7:2c:37:3f:24:b4:fc:fc:b2:cc:a6:54:2f:6f:f6:
2a:8c:1f:08:3c:15:02:36:c9:14:db:ab:c8:d0:d2:2a:d6:94:
f6:54:0e:7b:4c:97:36:8a:77:90:86:35:ab:60:fa:27:a0:a3:
3b:e2:fb:ec:a7:20:f1:84:88:c9:27:75:26:28:49:b5:79:7b:
0e:09:22:d2:86:f1:9a:ed:ce:69:f0:d5:d7:a4:b0:1b:8f:b7:
01:32:a0:da:34:51:61:67:c6:cf:ee:39:48:7a:56:17:84:45:
48:bb:be:4a:1d:ed:49:ca:37:91:55:96:32:19:de:d7:46:6a:
21:de:13:6d:f3:b2:c4:fb:2a:59:11:ff:cd:19:cd:e7:55:7d:
f7:eb:f7:5e:47:3b:e4:9f:66:14:df:95:c3:dd:5d:68:fa:c3:
6a:f8:7c:20:56:3f:42:9e:c4:6a:0b:54:9b:9e:7e:99:a8:3e:
3c:bf:60:e6:1d:dd:fe:78:23:13:8f:e5:cb:76:83:0d:78:de:
53:5c:74:ff:54:17:15:13:4c:62:b2:5e:e9:7a:be:d1:cf:91:
3a:9d:59:62:3e:09:a5:b2:67:30:3b:ab:a7:bf:12:fb:f4:44:
fd:61:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:30:33 2026 by rpki-client