Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
File: Gu0CBP9R8olCGFT6YrPCMcNer2w.mft (raw, json)
Hash identifier: dydoQbsx87UGjRVbvve/BXcuWDNYNbKPA7zN8vElJkQ=
Subject key identifier: A8:DF:49:27:59:7D:40:0F:05:60:CE:6C:ED:D9:7B:CB:C9:2E:3B:F0
Authority key identifier: 1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
Certificate issuer: /CN=1aed0204ff51f289421854fa62b3c231c35eaf6c
Certificate serial: 01A020553C1FEC8A8BF1350702C5A476991A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:00:51 +0000
Manifest this update: Thu 20 Aug 2026 18:00:51 +0000
Manifest next update: Fri 21 Aug 2026 18:00:51 +0000
Files and hashes: 1: Gu0CBP9R8olCGFT6YrPCMcNer2w.crl (hash: xANAZBFSi8e01aixDWQYXNuIjaJx3xKYX+2pPUqy+M8=)
2: MXiJymlWnPv8K0_SYeg14AvCims.roa (hash: VJrJz4Yf0xl1z5pYVZXPPsSfyBh8RWLcRUu/3SlQW5M=)
3: TSXqej0WW_9xcvEDJRvBI7pt5LE.roa (hash: ZTp/vNt08nHTq/Tb6B374ia403187ADNP0tAFEOnaq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:3c:1f:ec:8a:8b:f1:35:07:02:c5:a4:76:99:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aed0204ff51f289421854fa62b3c231c35eaf6c
Validity
Not Before: Aug 20 18:00:51 2026 GMT
Not After : Aug 21 18:00:51 2026 GMT
Subject: CN=a8df4927597d400f0560ce6cedd97bcbc92e3bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:e7:d6:d6:9b:5f:d3:fa:b3:63:bc:3d:d3:
df:8e:a4:8c:d4:91:c2:de:58:b0:9f:59:ac:df:9c:
e0:1b:eb:65:f3:6f:5d:7d:e7:8a:c2:46:96:dc:53:
e6:c2:80:7c:f3:f5:1f:e2:c2:99:84:75:14:66:14:
77:68:e3:29:09:f2:a3:14:1b:49:ab:30:88:f1:c2:
c0:6a:4c:74:f8:64:e7:00:99:b0:5c:65:1c:44:7e:
00:b0:e0:97:33:c3:50:64:74:7e:6b:df:93:fe:0d:
dd:8f:d3:a7:1c:0a:2c:29:8b:dd:52:75:7d:4f:51:
d8:4a:fa:01:a2:c7:a2:3e:d3:1e:2b:6e:55:86:65:
50:79:c0:d7:77:d7:0b:da:74:25:69:b1:07:f4:fc:
0b:cf:70:72:81:24:3f:b6:5d:3b:e7:89:e9:6d:01:
f8:22:3b:af:17:ff:1c:c1:17:53:ba:40:b2:99:56:
a6:74:3c:c4:c6:e7:d9:1d:4a:e2:dd:44:f2:70:61:
0d:08:64:2d:e9:56:b2:78:61:08:d9:d5:a0:cb:07:
8c:75:bf:2e:65:99:34:d2:59:47:a3:43:10:d9:97:
48:ad:bd:e0:24:c1:51:60:50:2e:29:62:83:4e:ef:
67:92:fa:26:7e:44:7d:97:f1:7c:aa:e2:2a:05:5c:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DF:49:27:59:7D:40:0F:05:60:CE:6C:ED:D9:7B:CB:C9:2E:3B:F0
X509v3 Authority Key Identifier:
keyid:1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4c:e6:3b:a3:d1:39:e2:48:c2:99:ed:3e:39:bf:28:59:9f:
db:74:ad:12:03:39:9d:e4:c8:9c:14:c3:b5:fa:1f:48:4a:3b:
c4:00:53:7c:28:b3:39:d2:e0:7c:64:38:3b:44:15:20:01:43:
e3:a3:0c:8d:47:89:79:8d:38:7f:3a:37:3c:32:b9:95:26:d4:
5b:a3:76:81:ab:96:78:6a:45:0c:34:ab:17:92:84:b5:c1:ed:
96:fb:1a:b1:34:d0:36:0d:1d:47:cf:13:68:13:2b:3b:b9:64:
5b:1a:8c:12:8e:5b:55:af:e4:e9:3c:08:cd:96:07:41:a6:f4:
bd:10:7f:86:43:2d:58:33:ed:66:00:3d:81:55:59:80:64:72:
63:dc:78:f8:69:d8:e6:2c:0c:c6:ad:5f:e0:19:55:35:9d:2d:
85:df:80:25:6e:ba:d6:01:c5:c3:7f:71:49:91:fa:5b:ab:ac:
40:52:da:c6:40:e5:6f:61:78:df:ed:a0:9f:94:be:04:ac:4c:
c4:15:39:e9:97:3b:c1:83:39:0c:33:66:67:b2:fd:2a:9f:63:
d6:a3:d5:e4:44:fa:85:47:41:fb:f0:d2:5e:f6:94:0f:b2:2c:
42:fc:58:95:b3:f6:14:e1:2e:97:e1:d8:f6:6b:41:c5:4a:b6:
c5:9d:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:07:03 2026 by rpki-client