Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: s1968jh/7Bkyk9+RDLOmHDxaeodHD3eBW9UYs+2f8cY=
Subject key identifier: 75:40:FC:94:98:C5:44:21:D9:A6:B0:01:56:B9:49:BC:38:BF:1E:31
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 01A0E7AE5D1990038830E08681B723046CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 11A8
Signing time: Mon 28 Sep 2026 11:02:38 +0000
Manifest this update: Mon 28 Sep 2026 11:02:38 +0000
Manifest next update: Tue 29 Sep 2026 11:02:38 +0000
Files and hashes: 1: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (hash: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: xZOZIbXuK41W2Yo7+W/Nza3Nmx18mArp8DNEjanh7sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:5d:19:90:03:88:30:e0:86:81:b7:23:04:6c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Sep 28 11:02:38 2026 GMT
Not After : Sep 29 11:02:38 2026 GMT
Subject: CN=7540fc9498c54421d9a6b00156b949bc38bf1e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:94:bb:20:5c:1f:35:83:cc:22:d5:35:a6:
63:64:0d:09:d9:f5:ea:52:4b:30:77:f3:f5:81:de:
42:09:5f:47:1b:66:35:b9:1c:62:59:f5:61:33:fd:
51:d8:49:6f:dc:ba:4a:7e:46:2f:2a:e5:3b:8a:8f:
94:be:fe:42:8b:87:37:c5:ad:01:a4:57:18:71:30:
ad:71:1b:3a:c7:2e:b4:f5:7a:ff:fe:91:1c:bc:c7:
35:ed:d4:1b:01:e1:af:33:f1:44:40:03:a1:9e:70:
b3:c7:58:a7:85:01:ed:08:61:5a:ce:92:34:65:0d:
32:81:00:11:32:ff:eb:cc:91:45:ea:7a:6a:57:d9:
fd:2b:2b:1e:b5:53:c0:af:5f:0f:b1:1b:da:ba:ee:
b1:62:0a:07:ee:4a:95:ee:f6:56:6a:32:00:fa:75:
56:55:ad:6a:91:69:dd:32:26:38:e9:bf:08:3d:c1:
5f:4d:69:59:f7:2b:ea:31:15:60:5a:72:33:5c:46:
b5:a8:8b:bf:90:66:76:7f:0d:fb:80:0d:63:56:a2:
b4:59:bd:bb:43:c7:3f:75:b1:94:07:5c:12:45:7c:
f8:0c:61:82:ff:dd:f5:13:f3:ed:40:a5:8b:9c:b2:
3d:f0:13:02:03:b6:38:88:77:05:49:f8:c7:f8:a0:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:40:FC:94:98:C5:44:21:D9:A6:B0:01:56:B9:49:BC:38:BF:1E:31
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b8:a0:9b:25:bd:59:d5:9b:4c:b7:f5:04:a2:67:95:f0:e4:
e2:7d:95:4f:03:54:cb:9d:fa:ff:84:2b:6e:46:5c:de:56:98:
45:b1:3e:c6:05:ee:77:8a:27:99:ed:a4:33:4e:e3:06:95:e6:
78:30:61:cd:ab:2a:c9:5c:3b:96:07:1a:5e:54:d3:e5:1d:e6:
c7:f7:8f:8d:d4:58:f4:19:22:3e:c7:df:b9:9c:7d:0f:db:9c:
b8:51:57:b0:d0:2f:57:dc:6f:05:0f:95:28:e3:e2:eb:07:db:
1c:ed:33:08:a8:7b:ae:be:c7:fe:55:c1:06:47:a4:f6:2e:3a:
fb:06:a5:c5:7d:da:80:83:c5:4c:ac:a8:95:92:73:af:f4:54:
53:68:d0:51:99:00:42:7b:e6:a5:c0:e5:04:cc:b4:66:37:e3:
61:19:bf:e0:09:8e:58:9b:15:43:8d:72:38:d1:a6:b3:c0:b7:
6f:da:82:24:d6:c9:95:dc:58:34:02:05:32:52:ed:e2:dd:b4:
59:8c:18:ef:f4:90:bf:e8:91:a7:bf:81:d9:5d:f0:02:14:43:
55:66:cf:38:a2:9e:a1:81:b2:6c:c7:6e:0f:82:93:91:2d:af:
40:7f:92:c3:d9:fb:4d:2a:17:d0:15:9f:64:12:ab:5b:c4:22:
70:f4:33:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:29:04 2026 by rpki-client