Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
File: gtqmUAcIPsylkSj9XwMdNQMrV0k.mft (raw, json)
Hash identifier: plpYHdvp0EBwiwB/Csv2uc3m8wJp10+v165ZpWzyryc=
Subject key identifier: D7:BE:C2:54:2E:63:FE:DC:65:F7:0F:9B:BE:BC:80:9D:38:73:64:5F
Authority key identifier: 82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
Certificate issuer: /CN=82daa65007083ecca59128fd5f031d35032b5749
Certificate serial: 01A16AFF1711D584640D9B7791035ED08986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
Manifest number: 01CA
Signing time: Fri 23 Oct 2026 23:01:04 +0000
Manifest this update: Fri 23 Oct 2026 23:01:04 +0000
Manifest next update: Sat 24 Oct 2026 23:01:04 +0000
Files and hashes: 1: gtqmUAcIPsylkSj9XwMdNQMrV0k.crl (hash: +GPhXkHd7LL/dZOFg0llyLqxDCtqAWPpPF063IkhkHU=)
2: h3zKsQimt6KXvyL8UENxz33Ooc8.roa (hash: 26ET6F8NvcI1lfHsWzSPwJQUaImDYVfOacgxjjreFzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:ff:17:11:d5:84:64:0d:9b:77:91:03:5e:d0:89:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82daa65007083ecca59128fd5f031d35032b5749
Validity
Not Before: Oct 23 23:01:04 2026 GMT
Not After : Oct 24 23:01:04 2026 GMT
Subject: CN=d7bec2542e63fedc65f70f9bbebc809d3873645f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:7a:ee:03:ab:23:20:0b:22:27:53:23:8c:
e5:70:f6:14:54:63:9c:ae:33:52:47:c9:c5:bd:13:
1d:05:5c:75:ef:f4:f2:73:8b:e7:8d:85:3b:3e:9c:
42:8a:73:e9:9f:13:e1:ed:9d:3a:7e:1d:e2:69:fe:
6f:2e:9d:38:f2:99:99:c9:2a:eb:2c:c8:29:90:33:
7f:e8:35:49:b1:d6:30:b4:bf:72:0c:d1:49:77:d2:
fa:8f:f7:ed:98:b2:41:8d:55:10:1d:c6:d6:2b:9e:
84:0b:0b:7b:2c:8a:98:b2:b5:0e:98:b3:1c:06:a6:
ee:ea:96:a8:47:dc:45:20:91:90:11:ed:52:c3:1e:
fe:e2:2f:e6:21:8d:3b:0c:33:af:07:72:a6:87:cd:
55:39:48:ac:a7:f9:2f:b1:bf:4d:82:3e:98:d6:a3:
96:23:0b:25:02:f6:29:ca:17:24:1a:49:3f:c1:84:
57:fe:ac:08:2e:28:60:99:36:f1:78:44:ea:4b:9e:
37:f9:c5:7d:4e:de:84:bf:3d:90:97:51:ef:b5:ba:
43:7d:3d:4f:05:d7:c8:cf:5c:fa:1c:45:57:c2:06:
6d:57:9f:dc:4d:48:b4:95:11:d7:88:c2:c6:71:43:
f2:8b:8b:fa:af:e1:15:8a:0c:12:6c:96:07:6f:04:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BE:C2:54:2E:63:FE:DC:65:F7:0F:9B:BE:BC:80:9D:38:73:64:5F
X509v3 Authority Key Identifier:
keyid:82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c1:ae:fe:0e:98:11:d3:a8:5e:7d:ca:2c:f2:bb:0f:8c:cf:
98:3c:f0:f8:dc:49:73:d5:3e:59:df:42:49:66:8f:a4:fb:3c:
86:38:53:8d:e6:c6:61:66:72:4d:f1:a0:08:aa:2c:df:34:3d:
c5:c3:4d:c9:37:f0:e5:72:d0:f3:44:68:4b:8b:a3:92:6a:0c:
c3:5c:51:1a:d4:9f:57:e4:68:68:42:c7:6f:9d:bb:ae:d0:71:
6e:99:7d:a9:eb:59:57:b1:02:4b:99:ae:ca:c9:22:16:39:a9:
73:97:cc:af:09:5e:09:30:2d:e4:8e:43:b1:10:fa:d5:80:ab:
86:22:0b:47:a1:7e:5c:fc:48:3c:b7:f6:d1:a4:9d:ae:7b:99:
b9:ce:12:10:01:4c:2d:ba:ad:c0:c8:77:b0:d7:20:c4:20:dd:
23:81:b1:61:df:6a:9c:24:90:93:67:f2:67:f6:da:d2:b6:33:
9e:8b:53:fb:ae:e8:22:1e:9d:0a:61:8f:bc:6f:8d:db:b0:74:
0e:71:bc:59:e1:f7:cc:46:6d:90:29:57:17:0d:03:1f:55:05:
a6:73:7f:01:29:73:7e:72:7f:6b:d2:b7:75:02:b5:42:1d:4f:
b7:06:58:c3:ff:b9:e6:3a:a1:8e:76:99:4f:45:5b:92:fa:b6:
e6:65:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 09:52:11 2026 by rpki-client