Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: 16kUIaNkYYVeXJMK7WTsQ54/q796Aut8Igb0+eaGPnQ=
Subject key identifier: 1A:E4:B6:B7:C8:90:C4:36:3F:F0:78:69:6D:00:3C:F1:3E:ED:9C:81
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 01A0CDEC8EDBAB2E3D6FCF033A818F055367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 11:00:27 +0000
Manifest this update: Wed 23 Sep 2026 11:00:27 +0000
Manifest next update: Thu 24 Sep 2026 11:00:27 +0000
Files and hashes: 1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: yBtBjcEzIzHJFo1S3CesKNV838QLVM9tDD/G6QqY3jc=)
3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:8e:db:ab:2e:3d:6f:cf:03:3a:81:8f:05:53:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Sep 23 11:00:27 2026 GMT
Not After : Sep 24 11:00:27 2026 GMT
Subject: CN=1ae4b6b7c890c4363ff078696d003cf13eed9c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:ee:20:53:9f:42:e9:2b:a2:e7:60:6f:ac:
f2:e9:56:81:b9:e9:e8:58:eb:be:f2:db:f7:39:d3:
a0:a0:ed:fe:41:c6:d5:e9:04:9c:48:25:88:b2:b0:
c8:b7:5a:2e:00:a7:17:f5:26:6f:b2:de:da:48:63:
38:ca:14:d6:e3:11:59:b0:b3:75:e6:3e:89:b9:4d:
64:06:bf:26:5b:29:c8:42:95:b7:24:3f:6e:f1:e0:
67:28:48:af:2e:51:48:14:7f:f3:35:ba:0a:71:17:
55:d9:75:48:ac:e9:26:06:54:48:2f:3a:96:4e:77:
58:d0:74:cf:0b:ce:e2:8e:ad:6b:5e:6c:6a:bb:13:
d1:19:d6:26:9f:07:66:61:ba:70:98:31:0f:59:37:
d0:ba:49:5d:fb:8e:6c:9d:2f:c0:d2:10:2a:81:a0:
76:09:8e:98:68:92:6b:ff:32:52:ce:74:1c:60:9d:
78:ae:3b:56:c1:94:6f:e2:9f:c0:22:8c:98:ec:89:
70:73:0f:14:8c:d1:87:80:67:3b:c2:8c:15:85:1a:
a4:93:0e:75:cb:62:9a:4d:31:4d:9f:49:74:9d:de:
6e:93:84:ce:38:81:2f:e6:47:32:31:70:ab:d2:a7:
3e:d4:27:bd:ae:51:34:50:f4:92:8a:b9:be:11:f3:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E4:B6:B7:C8:90:C4:36:3F:F0:78:69:6D:00:3C:F1:3E:ED:9C:81
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ac:ec:46:78:1a:6c:3c:38:b4:e9:72:81:40:df:48:71:7d:
df:a6:fc:b0:b0:91:3d:18:72:9c:d6:4b:d7:09:6e:35:fe:a8:
37:a1:d1:2e:2d:82:82:fb:dc:35:35:1e:7e:a9:32:54:94:c2:
fa:c2:93:d3:a1:07:f4:5e:b1:2b:77:b1:64:b4:20:9f:6a:e5:
5e:48:97:0a:56:5b:87:80:03:04:9a:df:eb:c5:2b:ac:3a:9c:
80:c1:38:06:92:38:b8:a5:67:42:3d:8f:2c:e4:2a:3e:a8:dd:
80:6d:ef:35:8b:d3:23:6b:b6:cc:cc:f2:51:b9:a8:35:b8:51:
9b:ec:50:c8:13:bc:a2:7b:6c:32:1b:8d:dd:be:fe:a0:4a:c7:
3a:8e:12:d2:93:4b:7a:ff:38:70:39:06:c8:1f:c5:bb:f3:f7:
80:46:30:96:3f:17:7a:61:6b:62:30:5c:ca:40:6d:13:0e:6e:
84:f9:64:c1:06:7b:cf:bb:33:26:4b:5c:ec:31:7c:f5:2f:a9:
49:0d:89:75:a0:e0:5b:88:c0:da:0c:09:56:08:91:12:74:2a:
96:2c:77:cd:d7:9e:ec:fd:ec:26:52:dd:23:a2:70:9b:3a:59:
a7:7f:84:3a:f1:ee:c8:a2:2a:9e:98:6e:3f:03:12:d3:f6:d9:
f2:58:08:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:33:49 2026 by rpki-client