Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: Ymi3OAefNPtAy75Uy1SAqQ8ke864c/oX6QGVPFLkubA=
Subject key identifier: 07:03:8E:14:2D:DF:35:83:70:05:AF:FE:7B:D6:BA:88:73:33:05:8C
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 01A12353B8BE97DFFA3CD4C00991DEEA9512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 01:00:51 +0000
Manifest this update: Sat 10 Oct 2026 01:00:51 +0000
Manifest next update: Sun 11 Oct 2026 01:00:51 +0000
Files and hashes: 1: 5gSf1-VDKOYVBkqkgnQrEMypzTg.roa (hash: z6ZcdBsDa7Hg3rkYAPzvBooMd+rknZS/02yCZUcFlGI=)
2: CmZeg0QZClyASLrlfEFcbEqzniE.roa (hash: hxAFIZw4RCC07UgvikV6JR0Y6MOvZuFKg3XrUhhJ604=)
3: Ih_bDVPWPg40meMVUQH52Q_SiqE.roa (hash: WQr9CRYz6MHyRZSZGa17nV7pgtE8mhzsKExO1LfYlFY=)
4: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: XJQ8Hekqhxth9Pj+c8OYYg+DuoIBfVXyXEDy86dVGHE=)
5: yhvjZUqxn_FUY-Mlri4ogZjyLBM.roa (hash: L0ywjyagm2bruEE3Ewodq3fXEbUNJSk+4fnvkwsHn6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:53:b8:be:97:df:fa:3c:d4:c0:09:91:de:ea:95:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Oct 10 01:00:51 2026 GMT
Not After : Oct 11 01:00:51 2026 GMT
Subject: CN=07038e142ddf35837005affe7bd6ba887333058c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:7d:9a:a0:59:27:c3:7b:44:50:87:b8:d9:
b4:7a:53:13:c1:a7:ea:e0:34:02:cf:b2:b7:08:81:
ba:b1:7d:ad:bd:2d:13:c1:50:93:f8:79:f9:28:f4:
22:c5:fb:8f:e6:85:32:b9:84:71:c3:dc:9f:ee:dc:
6e:ed:6b:45:7e:52:a2:3a:3f:04:99:76:68:e3:43:
27:92:70:c5:85:e9:de:d4:84:34:02:a9:4c:65:07:
eb:9f:11:91:4b:1a:a0:e0:2f:fe:40:27:35:3f:1f:
42:dd:6a:3f:d8:47:21:fa:ac:fb:c8:6e:86:cc:b1:
dd:11:a4:2c:55:1f:1a:4e:2d:2b:7a:3c:26:46:e0:
42:27:95:e9:3c:84:12:b7:a6:32:d2:e3:06:5c:91:
3f:6f:19:99:b6:35:27:2c:a0:0e:12:0b:7b:8c:0a:
c0:3f:bc:5f:cb:78:77:e5:7f:a7:22:6e:91:a1:3c:
a5:f1:ee:65:dd:0e:78:43:b2:3f:3d:f0:63:e6:09:
5d:38:c0:28:78:f5:3d:3f:99:02:b0:b5:97:c5:72:
f8:de:97:a5:6e:61:d6:02:7c:49:9c:5e:da:c1:be:
e4:c5:b5:50:76:f7:ce:01:66:2d:86:dc:c1:98:a6:
1d:57:41:30:35:e3:9e:c8:e8:a5:84:3b:a7:52:aa:
b7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:03:8E:14:2D:DF:35:83:70:05:AF:FE:7B:D6:BA:88:73:33:05:8C
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4e:3f:06:30:5c:46:55:4b:d5:59:26:ce:c6:7a:99:d5:56:
f5:f6:07:4a:5e:d9:b5:ac:01:04:6e:da:d4:26:12:5e:b4:20:
3d:13:cf:ef:37:47:1c:21:0d:a9:f9:10:16:8b:98:b1:e7:8f:
a8:3c:c5:34:16:6b:35:4b:db:ed:c9:02:c7:39:ee:9d:07:aa:
10:44:45:fa:b7:b8:0e:b2:da:08:e1:25:72:1f:a5:67:48:ca:
db:e7:19:dc:6d:f1:ad:96:77:85:63:47:a6:c7:89:b1:d7:f6:
6d:00:9f:46:26:61:89:5b:07:3a:2a:9d:09:23:ee:da:93:16:
cd:96:b2:b6:c9:63:36:77:43:7e:a0:3b:22:b0:8b:6e:e9:3f:
93:3a:4a:e0:c1:d8:99:c0:47:4b:06:50:d7:4b:d4:d0:71:36:
14:7b:8a:34:b3:6d:89:f3:ed:57:f9:c0:45:65:19:56:39:fc:
2c:cf:e1:d5:b7:a9:91:d7:5a:a5:6a:e0:ad:b6:1b:cc:86:69:
8b:7c:0f:87:0a:98:7b:07:ef:c4:ac:79:64:6c:39:15:84:7f:
29:6f:ec:c4:41:60:e1:cf:e6:ed:ed:58:bd:ea:09:2a:70:d3:
fb:d0:32:6b:73:be:06:a5:4b:5f:17:6f:c0:15:56:16:e1:6d:
91:fe:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:52:48 2026 by rpki-client