Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: hL3lQ2WzSAc1n1H+Ialp0XK0wzsIFIQ+u9c0GwL4xAg=
Subject key identifier: 0F:FF:5F:6F:43:B1:EC:AB:5B:CD:87:15:CD:0A:FA:74:05:95:0E:A7
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 01A13AB721451A411CDFA5EDCF2F91CE77DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 0C37
Signing time: Wed 14 Oct 2026 14:00:42 +0000
Manifest this update: Wed 14 Oct 2026 14:00:42 +0000
Manifest next update: Thu 15 Oct 2026 14:00:42 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: 7FkQxrPG178ZE6u+O9mHDm0uFbj9gWFZvo1Hd1uKiu4=)
2: oeqcCmqzmosVxM-WY8lmXD_44Ic.roa (hash: QSB9wBcelhQw6T6s+EAUaG07z6Fs95UlwbhmHAqSneQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:b7:21:45:1a:41:1c:df:a5:ed:cf:2f:91:ce:77:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Oct 14 14:00:42 2026 GMT
Not After : Oct 15 14:00:42 2026 GMT
Subject: CN=0fff5f6f43b1ecab5bcd8715cd0afa7405950ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:4f:02:96:8f:33:49:96:ed:58:85:49:b4:
16:be:37:a9:f7:17:f7:53:67:26:6e:cc:7f:fe:00:
8a:cb:82:f7:9b:82:c2:93:cd:b5:91:76:df:4c:b2:
c1:9c:48:16:d0:14:ea:2e:fc:49:4c:b4:a3:85:e4:
f4:90:d6:6b:79:c6:5b:5a:08:80:ab:4d:0f:07:5e:
86:08:66:75:2f:e6:2a:bf:ef:23:04:e0:1c:b8:a4:
4d:18:71:61:76:9a:9a:03:52:9c:b9:8a:4d:23:e8:
86:b0:79:e8:62:5a:dc:f1:81:04:44:5f:ba:db:37:
5a:1b:3d:87:42:78:b7:48:e6:f0:59:49:4b:3f:40:
78:88:4b:a2:17:d3:c2:db:7d:e5:63:7c:49:ce:6b:
8a:4a:65:ce:6c:89:c9:72:cc:36:78:f8:39:96:a7:
5d:59:45:e8:45:81:a0:73:99:62:9c:d4:5f:d5:ba:
e4:16:65:4e:ab:fa:2e:9e:10:04:84:8b:ae:e7:0f:
90:56:4e:39:47:31:2b:05:d4:57:cd:3e:46:3d:db:
7b:b0:3c:c2:dd:cf:1a:1f:17:2b:fc:77:6c:35:9b:
a1:47:ed:37:a2:f9:3e:eb:6c:91:c1:84:5e:1a:81:
5d:13:c1:c3:25:f3:f6:f1:f4:bb:24:3e:c7:76:88:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FF:5F:6F:43:B1:EC:AB:5B:CD:87:15:CD:0A:FA:74:05:95:0E:A7
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0a:15:79:2a:d6:38:52:f9:39:bf:ab:11:98:f3:32:56:89:
d6:45:07:ad:c2:4f:72:96:48:7d:db:77:05:7f:6d:e6:c2:dd:
01:c9:cd:07:8a:6f:a8:d6:c7:64:51:47:35:6d:9f:b2:67:5e:
30:a0:a5:57:57:c4:10:de:0b:03:7b:cd:21:23:fa:e2:23:2b:
0b:15:e7:fb:f2:25:d0:9b:db:3d:59:9f:1d:c3:eb:d0:d4:82:
22:9f:ae:76:91:70:13:e0:ac:fe:f8:3d:72:f7:43:cf:ff:53:
29:11:eb:9b:02:c2:04:93:a6:23:b1:9a:1d:f5:c1:4e:8a:38:
aa:f2:dc:ff:ab:09:7c:96:67:e4:8c:48:55:8e:06:26:fb:cd:
48:9d:4f:92:c1:25:ce:06:b0:28:fd:e0:9a:b1:0c:90:04:50:
21:08:43:42:15:b0:56:9d:16:43:3b:3b:ef:ed:c2:db:72:c0:
c9:bb:d6:1b:ed:c2:bc:94:fc:0e:5d:24:a2:03:7b:cb:40:d4:
a9:56:53:62:cc:5d:e1:37:a9:11:88:47:aa:d4:73:e3:52:8c:
06:d4:2d:02:9f:f0:3b:03:77:48:4d:0b:84:e1:9b:64:46:db:
e7:09:92:ff:16:2d:48:f6:49:dc:ad:88:1e:c1:bf:ac:6b:b6:
38:9b:2d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:31:17 2026 by rpki-client