Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.mft
File: gmQMpNTLIsMeI1_vCESqfnHQxls.mft (raw, json)
Hash identifier: EKatoQ0tfKF2nUpb/4KEyazVm5WKQGb8HKkkKr9o1b0=
Subject key identifier: 2C:0B:67:85:12:F0:2A:4F:6F:27:46:49:8F:E5:0E:E9:B5:92:01:13
Authority key identifier: 82:64:0C:A4:D4:CB:22:C3:1E:23:5F:EF:08:44:AA:7E:71:D0:C6:5B
Certificate issuer: /CN=82640ca4d4cb22c31e235fef0844aa7e71d0c65b
Certificate serial: 01A0C28DB57C99C9AE33A94A949558B119C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmQMpNTLIsMeI1_vCESqfnHQxls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:01:01 +0000
Manifest this update: Mon 21 Sep 2026 06:01:01 +0000
Manifest next update: Tue 22 Sep 2026 06:01:01 +0000
Files and hashes: 1: MEy4hPf1PScygUdvHtNXZU1Xk7c.asa (hash: m0Ub60UIvjMWUZombv8JTaQ47c/Z3i+DBkap5riV34g=)
2: gmQMpNTLIsMeI1_vCESqfnHQxls.crl (hash: 3h07r+J2Q6lTHtGRZGOWxWFEcx09uhewGgCOxMKJXag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmQMpNTLIsMeI1_vCESqfnHQxls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:b5:7c:99:c9:ae:33:a9:4a:94:95:58:b1:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82640ca4d4cb22c31e235fef0844aa7e71d0c65b
Validity
Not Before: Sep 21 06:01:01 2026 GMT
Not After : Sep 22 06:01:01 2026 GMT
Subject: CN=2c0b678512f02a4f6f2746498fe50ee9b5920113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:72:87:68:78:32:98:ae:d6:3a:c3:31:dd:ab:
b0:17:0d:41:fc:df:0d:ac:37:9b:c9:cf:bd:6f:d5:
cd:a0:31:2d:f7:8d:5b:ee:cd:60:c7:fc:60:30:6e:
f5:0d:21:84:f0:ef:23:e8:d4:13:bf:7d:35:7c:d8:
7c:02:60:9b:d9:a5:e9:fe:f0:96:46:89:14:d7:0d:
3f:2d:50:0e:29:dd:f3:7f:96:94:fc:3a:81:0f:06:
3e:f8:c5:79:01:e7:75:ea:79:9b:6c:a7:1c:82:d0:
b3:a1:d1:91:2f:5e:c7:f7:e9:c6:2c:1f:d0:bd:4b:
e4:8b:0f:fd:a2:27:83:1a:0e:89:08:4d:49:95:9f:
d8:a6:02:3d:7b:99:37:37:10:7a:61:56:16:63:4e:
9f:21:20:e6:44:81:42:96:c1:1f:69:ba:6e:8d:4a:
fc:55:fe:c0:b4:4a:ee:59:01:e8:70:f9:82:43:96:
e4:84:df:d1:05:05:0b:90:92:69:4b:72:df:26:3f:
55:2b:2d:72:10:12:cb:b7:43:6c:5a:b3:f3:5c:fd:
e1:7c:7a:cb:37:64:3b:c9:34:3e:94:8f:4a:c3:f9:
47:bf:4e:44:c6:a9:d8:d2:71:36:a7:ac:b2:ba:58:
70:7c:86:e3:a4:c4:1b:a6:6d:23:4f:a9:5c:47:d7:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0B:67:85:12:F0:2A:4F:6F:27:46:49:8F:E5:0E:E9:B5:92:01:13
X509v3 Authority Key Identifier:
keyid:82:64:0C:A4:D4:CB:22:C3:1E:23:5F:EF:08:44:AA:7E:71:D0:C6:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmQMpNTLIsMeI1_vCESqfnHQxls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fe:0c:2e:15:a4:44:5a:d3:8c:d7:ca:9d:a2:2a:8c:78:1c:
f1:78:90:e5:8f:0f:75:20:d9:9e:bb:95:2f:b5:a8:ab:34:cc:
63:68:23:af:9d:b8:80:f8:62:0a:c1:d4:2c:07:df:96:eb:79:
74:c9:4b:c4:ed:51:fa:50:35:d3:72:a8:7b:13:2c:33:c0:e7:
ee:89:29:3c:7c:37:eb:3a:cc:32:67:7d:39:46:18:74:b9:e5:
c6:63:95:38:37:f0:ba:c3:24:48:67:6a:12:2a:60:be:d9:b3:
e3:c9:fe:cf:39:68:b0:4e:5b:3d:b9:42:a6:36:3b:f7:e4:e2:
fc:86:fb:1c:e3:e0:04:9e:fb:c1:ed:9e:c3:da:91:1a:87:ae:
13:cb:21:58:13:0c:e0:93:bf:fc:89:cd:71:95:3f:0f:8f:15:
95:24:8f:69:fb:e7:9d:08:11:f6:68:35:79:85:63:50:c4:26:
47:12:43:36:1f:42:56:84:f9:4e:d1:20:91:68:12:dc:32:a9:
ea:ef:35:95:b3:0e:d2:26:4e:77:55:e9:b6:c5:43:33:ac:22:
1e:02:ae:b8:90:57:d8:57:27:2d:9c:6a:76:ab:4b:c6:6f:70:
e1:fb:36:7d:e1:67:b4:64:90:a5:d0:13:4c:95:c2:f4:a4:e5:
22:20:ab:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:49:11 2026 by rpki-client