Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
File: GmoUZyI70xUQwU8hvTPX12mCnSg.mft (raw, json)
Hash identifier: Os/7lKu23+VxjBORu8mNr3hUrcRGHu8TxYCk8LG8SRk=
Subject key identifier: 2A:21:72:E2:32:E7:6A:39:45:84:D2:BE:D2:B5:6D:8E:52:11:1F:40
Authority key identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
Certificate issuer: /CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Certificate serial: 01A0E69A5A08289A89E15A1C98DBDC08CC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
Manifest number: 0472
Signing time: Mon 28 Sep 2026 06:01:10 +0000
Manifest this update: Mon 28 Sep 2026 06:01:10 +0000
Manifest next update: Tue 29 Sep 2026 06:01:10 +0000
Files and hashes: 1: GmoUZyI70xUQwU8hvTPX12mCnSg.crl (hash: FpW3drdPud+of6R2JC2Uow2rwoVEIYQ2dewVAKmbnXc=)
2: yMHe_AcZ7t0DOCfavN3ISgqxc3c.roa (hash: 9DwkTaaH9QdGqF+hvGsRneF8svXbKCB6hQgeZ0/mVuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:9a:5a:08:28:9a:89:e1:5a:1c:98:db:dc:08:cc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Validity
Not Before: Sep 28 06:01:10 2026 GMT
Not After : Sep 29 06:01:10 2026 GMT
Subject: CN=2a2172e232e76a394584d2bed2b56d8e52111f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:60:ab:de:28:5c:7c:1f:a9:3e:e6:f6:41:
16:3c:88:cf:d0:56:5a:49:ba:ad:66:f0:87:97:ed:
00:2e:b5:04:b7:53:cd:40:70:4b:a9:89:d4:6a:b9:
9b:52:f1:f3:bb:05:89:2d:bd:e5:e1:64:d2:94:ab:
65:61:d8:da:e6:27:70:55:59:17:51:9c:04:11:95:
15:99:a8:72:28:3a:04:ef:a3:8a:7d:09:e8:65:89:
80:5e:da:44:19:44:15:d6:a5:12:6e:68:e8:9c:1f:
d9:3d:e5:2f:2b:cb:0d:84:82:b1:02:47:34:bb:cf:
84:9e:0b:b8:2a:0a:17:50:f3:4b:e6:ae:ee:37:ed:
d9:59:cf:7d:90:40:7e:73:f8:08:51:22:86:92:9c:
7b:8e:8d:b3:8d:f6:7b:8e:c9:e5:30:33:06:ee:61:
aa:2d:b3:11:50:b9:5f:2c:6d:62:0d:fe:9c:51:7a:
29:e0:f7:d6:ea:cb:9f:dd:00:e2:5e:35:12:af:27:
ec:8f:3b:d7:90:8d:60:a7:dd:ea:14:24:2e:94:35:
80:50:63:d0:16:3d:e1:09:b0:53:12:50:cb:3a:54:
80:f2:9f:55:ec:61:50:44:56:32:67:4e:13:23:c3:
38:82:d5:e0:65:0b:e9:6f:68:33:fd:67:eb:50:d3:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:21:72:E2:32:E7:6A:39:45:84:D2:BE:D2:B5:6D:8E:52:11:1F:40
X509v3 Authority Key Identifier:
keyid:1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:79:93:36:0a:49:33:dc:66:e1:e5:13:a1:dd:ac:e5:3d:1c:
f4:37:c7:d1:a6:28:d6:e9:64:a2:2e:8f:53:b2:25:36:be:18:
02:df:0c:da:ec:40:ad:a5:ac:fa:2d:5f:5c:69:d0:37:08:0e:
c7:cc:aa:4f:2b:c4:7a:c0:58:27:88:a4:78:a6:cb:b1:fa:4e:
a1:c5:b5:0c:90:2d:7c:fb:d8:0d:46:0e:34:97:b7:84:37:33:
ef:29:46:63:c1:43:b4:50:ce:81:89:69:1e:68:8b:3f:6e:18:
ab:16:7c:0f:ad:7d:64:18:ba:c5:ba:aa:3f:7a:50:54:68:f8:
eb:8c:f7:54:e6:87:03:40:9e:af:18:23:bd:9e:b5:07:74:e5:
70:7c:88:da:4c:5d:64:51:d8:66:60:07:21:e5:d8:18:56:d7:
2c:ba:8c:d9:e5:69:55:fe:25:d0:9c:2c:0b:32:b7:60:3e:9b:
3d:b2:69:2f:08:6e:28:a1:d9:44:cf:80:49:c1:af:9e:1d:e6:
e1:3c:09:ff:73:fa:3d:8e:24:52:16:8a:5c:45:d5:b1:34:bb:
a0:2b:11:cf:f0:40:c4:87:eb:d9:45:0b:bc:bc:b4:9f:6f:4a:
23:35:b3:16:1f:fb:82:89:b2:ef:c7:75:b7:6f:6b:74:e5:14:
ea:c2:1b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:17:01 2026 by rpki-client