Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier: Pij0tKeyJvLHCVePIXc4yiFrW9wdIU9htd4wX8Ts8Pg=
Subject key identifier: 2D:21:B9:DA:D0:6B:07:96:CB:00:EE:46:FA:4A:1F:3B:24:9A:96:02
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial: 01A0C21FDD532D126C9A022224C2428D368C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number: 0609
Signing time: Mon 21 Sep 2026 04:01:03 +0000
Manifest this update: Mon 21 Sep 2026 04:01:03 +0000
Manifest next update: Tue 22 Sep 2026 04:01:03 +0000
Files and hashes: 1: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: D27j/NIm1pG9PJoYSIGYN0OBgwkFQggiy1rrExtO+ic=)
2: pJgLulMLIKvMMO7AdCTNd61W_Qo.roa (hash: d7x2/EMQahiRCVzVwOaCAyZfFY39+nEtyCz6GzOW0VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:dd:53:2d:12:6c:9a:02:22:24:c2:42:8d:36:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Validity
Not Before: Sep 21 04:01:03 2026 GMT
Not After : Sep 22 04:01:03 2026 GMT
Subject: CN=2d21b9dad06b0796cb00ee46fa4a1f3b249a9602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6c:48:4c:14:6b:d5:26:17:af:f2:af:11:43:
50:a4:ef:b3:99:3b:7c:a3:71:67:ea:e0:7e:6f:de:
08:4b:18:5b:9f:f4:e3:28:a5:0e:0a:f9:50:0f:bb:
1e:72:97:35:bd:2a:a8:7e:14:91:17:55:57:b9:59:
22:8c:bf:c5:a5:a5:56:08:6d:ba:99:59:a5:71:8b:
7c:40:1e:e1:cd:9e:71:57:c9:11:fe:ac:67:b2:05:
7d:1a:a3:da:e6:f6:ce:34:d0:fa:35:50:cd:2c:de:
01:f2:59:b3:b4:53:ef:5e:7c:65:b4:59:8f:2f:1c:
26:f8:ed:ec:13:6a:3d:f9:b5:e9:a5:b9:90:39:76:
71:46:77:84:c4:ca:6e:fe:bb:44:4b:7a:31:69:6b:
4f:cb:d4:9f:d4:c3:40:f3:a1:2b:3e:53:dc:b3:06:
c0:03:a7:d3:f2:91:a4:ec:d8:88:26:57:21:b4:5a:
85:3c:c9:5d:6e:1a:61:e9:70:42:d2:27:32:5d:22:
a7:9b:a9:cf:1a:5e:ff:ee:5d:57:72:cf:24:b0:e6:
df:91:7e:ad:d0:4e:7b:9a:d0:38:94:1c:60:7c:31:
ef:80:1c:11:d5:70:2e:37:be:29:70:5a:a7:29:5e:
64:c2:5b:d2:f4:14:61:11:e7:ba:c8:79:da:74:ec:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:21:B9:DA:D0:6B:07:96:CB:00:EE:46:FA:4A:1F:3B:24:9A:96:02
X509v3 Authority Key Identifier:
keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b0:eb:f7:3f:2b:47:6c:90:ab:6c:96:be:52:9f:a1:4d:f1:
f6:38:ac:6c:e0:67:90:c6:c9:9d:3e:f7:1c:22:6a:00:27:4a:
f2:f8:35:f0:6e:d1:a4:a0:e0:b8:2f:e7:4a:75:bc:6e:70:48:
22:36:c1:34:69:68:58:3c:fc:e0:24:77:29:b0:bc:2e:e2:8f:
be:45:46:45:63:f6:a2:11:08:ff:fe:c2:11:d8:b3:12:82:e9:
ae:20:cf:5a:34:09:1d:cf:99:43:bd:c7:20:2c:80:bb:17:88:
95:c6:e6:33:47:bc:ba:d1:3e:6c:b0:c9:ba:39:1d:da:4a:3d:
6e:22:5d:d1:72:c4:17:a8:cf:1c:ea:c8:6a:b4:c6:d3:b6:d1:
57:33:05:4d:ef:bf:99:e6:33:6b:9c:65:37:3c:09:79:4d:39:
a8:49:8a:cb:a5:fa:53:5c:b8:54:e2:98:8a:c9:94:10:cf:fb:
2a:05:39:22:6b:4e:ca:3e:0c:18:e6:b7:bd:d1:91:69:a1:c4:
91:69:e3:fe:6d:7d:ee:92:99:5e:df:3f:db:9a:48:b5:4d:0f:
5c:1b:3f:4e:2d:13:2f:08:98:b2:bf:f2:38:b9:46:c0:a1:7b:
52:58:d9:c2:85:8f:5b:f2:50:23:bd:b4:e2:9c:5a:72:ed:f6:
2d:dd:c7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:34:45 2026 by rpki-client