Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File: _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier: /Gf79EICN+qAnwAYXHsw7n7gBu7bD3ajeM3QMWaz7M4=
Subject key identifier: 0E:DC:BD:82:0A:22:ED:EA:7C:48:C0:02:FA:B7:07:49:37:C7:66:6A
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 01A0FAFCE746A3910BBD93B697E7522957F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number: 17CF
Signing time: Fri 02 Oct 2026 05:01:13 +0000
Manifest this update: Fri 02 Oct 2026 05:01:13 +0000
Manifest next update: Sat 03 Oct 2026 05:01:13 +0000
Files and hashes: 1: _b-rE_2TVoYhUbNxE3eqPIAbO4s.roa (hash: /pEVtx61pqjHCNe27pdlrCZMoRpMRCiAqlKVxrQNLe0=)
2: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: 7b0gAtvIvkGFuZjqgIENqyIN33alxD3X3lrD7HVmRc4=)
3: bbj-gHI_NSxgfeUm9R2oZee2H7A.roa (hash: hYp+ief1ADpooPFUk5v8X2N0IMdf0TC4s8sF6EqLPy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:fc:e7:46:a3:91:0b:bd:93:b6:97:e7:52:29:57:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Oct 2 05:01:13 2026 GMT
Not After : Oct 3 05:01:13 2026 GMT
Subject: CN=0edcbd820a22edea7c48c002fab7074937c7666a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:90:d9:87:91:45:cf:b9:59:2a:05:53:0a:
bf:1a:83:d8:39:42:d2:26:97:b2:03:1a:39:b6:c6:
1b:78:6a:c8:e4:c7:6e:a6:39:35:a5:c3:a7:60:d5:
ce:27:3e:6c:cc:1c:c5:b5:2e:a6:64:b9:18:af:4d:
2e:09:0e:87:40:fe:cf:4e:02:7a:8b:ba:1b:75:94:
f9:d8:b2:ff:3b:98:8a:36:00:7a:69:c0:5e:36:5e:
cb:95:f9:42:96:a8:73:24:32:f6:5e:25:73:24:28:
62:08:74:0c:00:8b:e5:4f:4b:0b:3a:4f:7e:8a:d1:
0e:b5:67:c1:ce:cd:f4:64:c6:c7:d1:da:cd:8b:42:
34:bd:89:1b:e2:4d:3d:93:fb:78:65:7e:11:13:09:
5b:2b:9c:8f:d6:ca:0c:8c:6d:fc:3d:63:43:39:5a:
f6:d5:6f:33:80:66:e2:3d:06:4d:2e:0e:20:a4:b3:
0b:25:04:b3:a3:39:cf:86:6c:4e:c6:db:b0:63:4a:
04:33:13:f9:14:ce:ce:3b:e2:03:bd:0e:61:0e:a7:
14:d7:a7:d7:98:d9:da:02:d6:de:fc:fc:40:ed:8f:
a9:03:da:2d:04:f3:b8:27:7c:bd:72:8c:7d:23:7a:
d8:62:92:6d:1e:10:51:3d:c8:de:2a:c2:88:a6:58:
31:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DC:BD:82:0A:22:ED:EA:7C:48:C0:02:FA:B7:07:49:37:C7:66:6A
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:34:83:85:74:d4:bc:ed:a6:bf:fa:2f:1c:1b:cb:41:0c:09:
99:8b:94:16:e5:46:ec:f4:46:7f:0b:78:41:6f:46:bc:db:f7:
20:b0:1b:b7:86:6d:c3:7f:6e:ac:58:67:c7:9c:57:a6:cd:3c:
32:4e:7b:26:50:85:f2:ee:28:4b:8a:da:27:fd:c5:f7:9b:b3:
6f:86:aa:4f:ec:03:ed:ad:ad:fc:0c:8c:91:55:5a:e9:54:2c:
50:d3:57:cf:3d:49:c2:2a:c7:9e:d5:4a:b7:a4:9e:39:e3:28:
83:ae:17:1d:e6:9f:98:4f:b9:97:9e:47:a6:75:e7:79:1c:af:
13:15:2d:37:65:57:26:bb:7a:39:a0:27:74:cd:45:a1:9a:30:
42:4a:fc:66:99:f0:f2:a8:1f:7a:be:c0:3c:2b:3e:ab:f1:ec:
78:02:ba:23:3a:e6:53:25:82:bd:3b:21:02:bf:8d:60:fc:0f:
16:d6:2b:43:03:95:e0:73:8b:3b:8d:48:20:13:c1:b0:79:63:
fe:e6:fc:1d:cb:a1:72:76:d8:80:3b:63:b8:d8:9a:70:ac:24:
b5:d7:76:c1:52:0d:49:08:ae:b8:e8:6e:30:1d:34:b5:13:7f:
d4:cb:0c:90:84:83:7b:20:e1:77:d4:08:fe:0c:5c:df:ee:4b:
c3:11:dc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 13:16:13 2026 by rpki-client