Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: BbA9gZo+iOK4lL4Sfuc8tZ6PtJqV0pn5HpxpoDtN5Lw=
Subject key identifier: 7E:5B:E5:74:0E:5A:30:DE:57:AB:2D:2F:54:16:A3:60:FD:4C:E1:DE
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 01A0C557101626C49B1DDC870AC4CB9F50C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 0487
Signing time: Mon 21 Sep 2026 19:00:11 +0000
Manifest this update: Mon 21 Sep 2026 19:00:11 +0000
Manifest next update: Tue 22 Sep 2026 19:00:11 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: P4Wxm99eJDmBuGnL8h2xprerBAIArpYG6D5eNNE0wHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:10:16:26:c4:9b:1d:dc:87:0a:c4:cb:9f:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Sep 21 19:00:11 2026 GMT
Not After : Sep 22 19:00:11 2026 GMT
Subject: CN=7e5be5740e5a30de57ab2d2f5416a360fd4ce1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:84:75:c8:ca:0e:54:1a:43:54:d2:2a:d7:
c8:9f:ce:d4:c4:e0:d3:e3:23:85:8c:1e:2f:2c:ac:
70:a4:64:f4:66:9f:31:60:d4:15:b9:93:99:95:85:
18:a1:69:87:66:4d:fc:d1:b6:af:6d:6e:20:6c:be:
64:f7:c7:3b:ec:6b:e0:a7:1d:26:94:b3:c6:23:9b:
fc:96:b6:fa:a6:78:8b:6e:b0:9f:dc:b5:ec:79:34:
19:04:c9:a7:64:11:50:c6:1c:61:14:13:ff:56:a3:
f8:db:3d:79:55:b6:5c:ec:72:58:0c:ea:9a:0f:ec:
e7:10:96:ab:9c:9a:73:a4:be:70:82:3a:f7:b9:c6:
98:e3:e2:c6:f8:da:e2:ce:9b:ff:9d:0c:96:8c:9b:
da:4d:f1:10:66:f6:57:d2:9a:34:a7:93:34:69:1a:
f2:31:3a:5b:f6:ad:96:28:df:db:42:b1:7d:06:75:
f1:d5:48:d2:4b:47:58:d0:db:7d:f6:5c:1c:ae:2b:
02:03:59:a4:06:27:18:b9:4b:18:c6:d9:6b:fb:9d:
65:70:77:37:f4:ee:de:0a:14:e7:f3:ed:77:ab:d9:
a9:27:a7:d3:d9:7d:63:99:c4:26:05:5f:c7:2a:91:
47:84:5b:62:ac:0a:13:4a:7c:b2:cd:1c:b3:b1:7e:
8d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5B:E5:74:0E:5A:30:DE:57:AB:2D:2F:54:16:A3:60:FD:4C:E1:DE
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:85:d2:17:0c:c5:f7:63:1e:37:74:c2:00:1e:8e:b1:0e:62:
fd:36:49:75:c6:b3:6f:41:14:07:fc:30:7c:a5:b5:3d:65:2a:
ae:40:bb:c7:9b:97:90:e6:8c:37:fc:44:da:b6:0a:6c:c9:0f:
f0:53:8e:ac:f1:39:4e:f0:26:c8:d4:27:65:3e:fe:52:e2:3e:
0b:d7:11:23:cb:a2:68:ad:06:e4:4e:41:f4:16:11:d5:75:d1:
97:4c:e2:f8:84:2c:d2:a6:21:c0:9f:a7:32:03:43:f5:39:63:
61:85:7a:16:7b:c0:fe:7a:ca:df:2a:02:c5:4a:1c:35:e1:b1:
f3:8d:5f:d2:b2:63:c9:8a:32:4b:f8:ea:d7:a8:09:98:6f:6b:
69:b2:1d:2d:5f:92:4e:90:91:a0:35:71:89:22:f2:31:b9:0b:
32:fe:7b:d8:4f:74:6a:47:d1:9b:d8:84:44:71:dd:7f:a5:5d:
eb:a0:55:11:6e:ce:53:fa:b6:b0:6e:9b:7e:7b:0a:f6:a5:65:
0b:0e:08:62:2d:d7:f0:85:2c:10:ce:a4:16:7c:c9:dc:1b:e2:
8e:23:e6:68:9c:03:86:d4:cf:f1:6e:66:43:d9:d0:32:75:87:
50:ad:24:5a:58:2e:70:6e:87:41:ca:c4:7f:09:3d:50:e5:e2:
a5:ac:5e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:21:37 2026 by rpki-client