Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
File: gIBkPxusC6RJkhdbr7bFlTxz3iw.mft (raw, json)
Hash identifier: VLENiO4BxVsv2my3xR9vpbRG9OU0e4coQhfcK4OIQZM=
Subject key identifier: 2B:A7:25:FD:D2:DE:E6:3A:66:EF:A9:CB:23:8C:27:F6:67:08:E5:F6
Authority key identifier: 80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
Certificate issuer: /CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Certificate serial: 01A16B35FCBAF1C31AF2B80E2160B0EF5D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
Manifest number: 037B
Signing time: Sat 24 Oct 2026 00:01:02 +0000
Manifest this update: Sat 24 Oct 2026 00:01:02 +0000
Manifest next update: Sun 25 Oct 2026 00:01:02 +0000
Files and hashes: 1: gIBkPxusC6RJkhdbr7bFlTxz3iw.crl (hash: 0H0pxvAr3BNvzli64KauKI9GtIAuqwBW6u0yAzNMcw0=)
2: yeVF8Df3VPcnjSBNmqzoVDfx_BA.asa (hash: q/aLmgYWUuh1D94V+T+v2Y5wHbMtBtOfdm/5xzlYGS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:35:fc:ba:f1:c3:1a:f2:b8:0e:21:60:b0:ef:5d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Validity
Not Before: Oct 24 00:01:02 2026 GMT
Not After : Oct 25 00:01:02 2026 GMT
Subject: CN=2ba725fdd2dee63a66efa9cb238c27f66708e5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:5f:f6:91:58:60:9a:1e:3b:1c:37:cf:24:
7c:20:a1:ee:44:a5:a5:64:51:09:f8:ba:55:03:c8:
9b:63:86:17:5b:32:38:ae:d9:4e:d0:c5:51:eb:3f:
63:39:2a:e9:e9:86:20:45:68:5b:25:04:3e:99:42:
90:51:f2:60:f3:92:46:fd:c9:22:6d:35:de:3c:10:
ce:e5:f8:e3:91:db:52:ce:29:5a:54:02:fc:95:5d:
fc:96:02:42:76:8e:ef:99:22:7c:b9:6c:23:2f:f8:
03:96:79:81:c2:69:ae:25:a2:0b:74:0b:82:d0:61:
5c:e4:d4:35:7c:6e:60:bc:ff:fb:31:2d:42:ce:a5:
aa:8e:a9:ca:2b:f2:11:80:00:0b:ee:1b:d3:e3:1a:
62:99:f8:9a:a1:30:e4:21:19:40:91:72:7a:8b:48:
7f:da:dc:92:d3:83:7a:50:99:50:ee:65:c8:32:95:
ec:4e:af:14:8d:c5:d8:fa:59:bc:ea:73:9a:e8:12:
7d:0d:4c:c5:97:a5:20:7d:3a:9b:6d:bd:73:61:09:
b3:f0:c3:6b:8c:14:2e:bb:8d:86:a6:4a:78:fd:89:
d2:52:c7:0f:4f:60:f5:0f:a1:ee:43:92:56:81:2c:
c5:47:22:c6:56:35:91:91:74:91:9c:e8:9e:39:58:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:25:FD:D2:DE:E6:3A:66:EF:A9:CB:23:8C:27:F6:67:08:E5:F6
X509v3 Authority Key Identifier:
keyid:80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0c:f3:52:fa:f7:de:61:38:e4:28:26:b8:fa:a5:13:82:78:
1e:54:d5:68:c4:f7:3a:b6:ed:90:77:84:88:ed:8f:b8:b8:95:
00:f4:d2:8e:45:3b:0d:c9:fd:4e:f8:fc:ee:27:95:37:dd:42:
0e:74:97:ff:7c:b1:31:c5:cd:0b:0f:0d:4c:9a:57:db:81:f0:
18:77:9b:cc:29:3d:41:d8:8e:cd:7e:48:91:44:e7:82:b1:38:
ee:04:5d:02:66:34:4e:38:7d:71:66:31:c9:c3:9e:86:14:b8:
a6:8f:82:b5:a5:0b:d0:dd:58:58:d7:5c:89:a4:67:fb:9a:97:
66:ea:c8:8a:36:ee:dc:eb:e6:d7:db:f1:76:3e:92:2d:26:95:
cb:fb:68:7f:36:a8:73:5b:b0:e2:48:ac:5b:52:c7:02:ba:6c:
6b:8d:eb:da:15:af:94:fb:e5:56:d1:21:c9:91:7a:44:5b:e0:
58:c0:8a:e7:23:36:0e:03:91:5b:58:b8:85:83:9e:c0:4f:28:
11:01:3b:24:08:cf:0a:d6:97:9e:b9:6c:f5:d6:81:da:61:ca:
78:99:23:58:3f:cf:59:4f:dc:4d:4f:3e:18:6f:e2:b9:ea:bc:
23:e5:f0:e9:53:0e:1c:f4:a8:7c:a1:f1:b1:09:59:c7:89:cf:
35:7c:d4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:22:49 2026 by rpki-client