Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
File: gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft (raw, json)
Hash identifier: AWs5I7K95abFygwdu7qc8GNkBnyF0lc568fv2WmY4js=
Subject key identifier: 28:B2:1D:5F:00:6E:18:58:0E:4E:47:97:3E:64:30:89:09:3B:CA:27
Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
Certificate issuer: /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Certificate serial: 01A160E9CE2AFDEF25DC12A5B3DE9421D055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
Manifest number: 04D5
Signing time: Thu 22 Oct 2026 00:01:37 +0000
Manifest this update: Thu 22 Oct 2026 00:01:37 +0000
Manifest next update: Fri 23 Oct 2026 00:01:37 +0000
Files and hashes: 1: G2YFM4i4daVeiu-YZOfdZi2K_5s.roa (hash: fZ6PKIPyu2LKbUXBpMg9IVsm03a/5oYSb04pbpjHKZ8=)
2: gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl (hash: y48Fjm0JlTaBjHN/g3vLe1jygyrl1gNKHa75/1jF/zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e9:ce:2a:fd:ef:25:dc:12:a5:b3:de:94:21:d0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Validity
Not Before: Oct 22 00:01:37 2026 GMT
Not After : Oct 23 00:01:37 2026 GMT
Subject: CN=28b21d5f006e18580e4e47973e643089093bca27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:a4:aa:da:d8:fd:1d:d4:36:56:6c:f8:34:
47:2d:cd:e5:c8:a7:e2:5d:bb:20:51:24:38:f4:f1:
5f:1e:c6:f8:7c:9c:a4:01:5c:b3:90:d5:e2:8d:84:
19:37:27:22:28:3b:8b:39:cd:8a:9e:b5:f4:ee:29:
3b:0d:1f:66:f5:a2:df:0d:ac:78:c6:b0:d3:e1:77:
74:e7:bb:84:c2:3e:6c:aa:2b:5d:89:15:19:74:1c:
3a:60:6e:75:a1:ad:03:95:fd:25:6c:88:74:86:fb:
dc:cf:89:a3:61:a6:6d:48:a5:4e:27:a4:e7:42:23:
91:28:bc:b6:4f:80:21:92:5c:c2:e4:b4:c2:d6:1e:
38:b0:ba:49:61:a1:e6:ed:2b:d2:fe:98:5c:1e:21:
86:d8:b3:d8:63:63:61:e2:2f:75:2c:e6:7b:1d:39:
47:fd:bb:94:de:36:d5:36:53:33:94:7a:68:62:b7:
e6:e4:6f:29:6a:7c:cf:db:81:f2:df:e1:54:3d:af:
a3:16:fd:5b:e5:6d:bc:3d:f1:70:e0:c4:da:c4:ec:
3f:85:06:87:39:ba:cf:19:72:bf:dc:1a:03:19:46:
f6:a2:7c:be:db:b0:0a:79:15:45:53:95:ab:ad:ab:
58:72:a1:61:1b:64:39:f1:8a:cb:2a:5c:9c:4b:68:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B2:1D:5F:00:6E:18:58:0E:4E:47:97:3E:64:30:89:09:3B:CA:27
X509v3 Authority Key Identifier:
keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:eb:f3:76:97:29:df:ab:ac:76:ca:17:73:b2:46:33:48:33:
0d:ff:a3:0a:22:ca:ef:90:c2:6f:a8:27:77:5c:75:87:5e:e2:
62:33:41:0d:43:42:c7:9f:41:2d:bd:fb:4f:4f:40:ea:be:ca:
3a:ce:f0:e5:54:94:26:7f:51:35:2d:bb:4e:8a:06:86:2e:0a:
06:68:9c:1d:f7:6d:9c:ef:fc:83:bb:29:88:44:68:b5:32:3c:
99:50:5d:50:da:f3:34:65:b3:17:dd:48:95:73:5b:88:49:68:
d2:d5:2c:12:8b:77:7b:db:f1:ee:7d:ca:ea:39:a6:56:95:67:
0c:48:c4:f1:c4:bd:6b:0d:14:6b:90:17:dc:d0:21:6b:97:6b:
5f:03:09:4f:57:cd:5e:4a:42:b2:8f:46:68:10:84:ec:05:49:
92:eb:4b:ea:46:42:e7:66:16:2c:13:6d:f8:f1:e9:12:12:93:
e4:0d:90:0f:d8:1e:82:3c:bd:ad:c2:8e:49:51:75:cc:7c:0b:
17:ee:62:d2:d2:0b:ba:5e:2e:8a:6d:f2:9a:85:d2:74:09:b8:
82:80:cc:fd:6a:74:11:cb:34:cb:6c:e1:71:a2:06:13:a0:8e:
91:08:43:e7:9d:14:74:4c:3a:84:61:63:41:9a:85:c1:95:40:
bd:bb:13:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 08:15:44 2026 by rpki-client