Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
File: gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft (raw, json)
Hash identifier: 1LwmwnPe72EopYyGbzT7oazVXBEgtjAmLyLF92euUNI=
Subject key identifier: 69:7B:28:88:78:EC:38:B3:7E:1A:CC:6E:92:2C:78:ED:31:7E:06:EE
Authority key identifier: 81:94:36:4C:BF:27:68:7A:9E:59:52:82:CB:61:69:75:A0:63:FB:FC
Certificate issuer: /CN=8194364cbf27687a9e595282cb616975a063fbfc
Certificate serial: 01A0C47BF4B2A1F9B2CA766DC76969455611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 15:00:52 +0000
Manifest this update: Mon 21 Sep 2026 15:00:52 +0000
Manifest next update: Tue 22 Sep 2026 15:00:52 +0000
Files and hashes: 1: 2bj5-0BZd7k7PxCQQt3dR6sMa_c.roa (hash: FbdQo9ph3iDjpX3oiKqtQfo2fgWCcSI1MBdgV3YQnqY=)
2: gZQ2TL8naHqeWVKCy2FpdaBj-_w.crl (hash: nwMuAZoJm9TMgcNuMiK+jrZMURIpSkUOioinaDfjsNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:f4:b2:a1:f9:b2:ca:76:6d:c7:69:69:45:56:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194364cbf27687a9e595282cb616975a063fbfc
Validity
Not Before: Sep 21 15:00:52 2026 GMT
Not After : Sep 22 15:00:52 2026 GMT
Subject: CN=697b288878ec38b37e1acc6e922c78ed317e06ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:d0:2a:f9:da:3b:f3:68:e9:20:5f:cf:98:
23:e8:6a:6c:2b:f2:e5:54:dc:ca:80:6d:a8:fe:29:
fe:0d:90:ac:d6:97:49:04:a3:3d:5e:24:56:74:40:
47:72:ea:2d:2c:69:a9:a1:62:15:6c:cc:2b:9c:b5:
8c:29:97:5c:8c:ef:2b:a5:cd:a8:39:94:f9:8b:a1:
0b:7f:97:e1:0e:fc:c7:90:5a:40:ab:68:15:e9:19:
38:d5:c0:3f:7b:21:11:57:f9:d4:85:3b:19:e6:fc:
84:30:ac:db:43:ba:5e:34:7a:46:a2:af:c7:ab:5f:
fb:c8:be:ce:15:a2:bc:24:d3:d7:db:bc:65:fb:1e:
fa:31:63:51:b5:8f:14:37:ea:7d:f7:37:72:c7:98:
84:bc:e8:e9:20:d8:63:ff:d7:15:af:cb:83:54:53:
dc:d0:ea:24:ef:5a:72:1a:6c:a3:14:92:f4:44:b2:
1d:b0:88:41:eb:4e:c1:5c:60:7c:9a:9f:e9:87:bc:
9f:14:00:4a:00:8d:8f:0b:df:67:97:d9:54:59:94:
f2:c7:23:a3:e0:79:b1:23:82:fd:6d:4f:e0:df:f9:
96:4a:a5:ff:55:f2:b2:5a:7e:27:3f:74:d4:d6:a7:
84:3d:af:1d:f6:3e:df:f4:e7:c8:28:cb:2e:51:a9:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7B:28:88:78:EC:38:B3:7E:1A:CC:6E:92:2C:78:ED:31:7E:06:EE
X509v3 Authority Key Identifier:
keyid:81:94:36:4C:BF:27:68:7A:9E:59:52:82:CB:61:69:75:A0:63:FB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:44:c6:c9:c4:a0:fd:ba:86:b0:3d:a9:5a:34:02:44:ab:fb:
9a:ea:28:e2:87:54:f9:d7:4a:ff:55:fc:28:5f:ab:d9:e9:f2:
0c:07:e0:bf:4f:79:6c:e7:bb:f8:b2:bb:a3:e4:69:1f:94:d9:
50:20:d9:79:90:74:f7:6b:69:29:0a:02:a2:d0:f7:ce:0b:a2:
e8:d6:74:20:ec:e0:2d:ce:2f:d2:78:72:c1:e5:04:e5:92:68:
1b:f1:89:5b:36:f4:ab:68:a4:9e:ab:76:86:c9:4a:18:65:1f:
9a:f6:16:ea:7e:6b:0c:56:dd:f4:24:66:43:8a:32:7b:d5:d9:
17:00:ad:c1:ca:89:86:db:7d:54:56:b0:10:dc:6c:5a:df:85:
05:37:a4:35:83:93:d2:f2:45:e0:33:85:55:b4:58:36:ba:e1:
12:44:11:b2:11:bf:35:1f:d9:71:38:7b:46:d9:03:6e:19:7f:
01:bc:31:3d:34:31:c6:9d:12:53:d7:a5:c0:f1:e4:de:81:a2:
9c:02:d4:b1:e1:fa:79:3b:a6:13:d0:37:33:c4:9c:10:ce:d7:
a5:95:cd:8f:b2:f4:18:9a:8f:4b:5d:ba:ba:2b:17:86:64:ff:
05:42:99:ea:aa:79:b0:42:0a:59:e7:68:0b:fb:da:31:2e:d6:
2b:6c:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:12:37 2026 by rpki-client