Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
File: gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft (raw, json)
Hash identifier: KOwLpP1/icFfbAOL7U7JJ851DJXiqazsgFL4y4AZh74=
Subject key identifier: 08:09:6B:F4:AC:AB:EA:B8:08:F1:6F:7B:C8:0B:FF:AF:D3:2D:24:CA
Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
Certificate issuer: /CN=819b97b20ccb4f696518e47c437259a8913e72ae
Certificate serial: 01A0E73FDD323C9FEBAAA2647AC1DE70606A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
Manifest number: 14C7
Signing time: Mon 28 Sep 2026 09:01:57 +0000
Manifest this update: Mon 28 Sep 2026 09:01:57 +0000
Manifest next update: Tue 29 Sep 2026 09:01:57 +0000
Files and hashes: 1: L2sVy84YNgdXdVRcFvky1jOyapo.roa (hash: 3nfkWDukO5seERRcNCHmDmoRPYQO0LEHGFHMMpgINH8=)
2: ehALNgmvDMXOCz1qDVIzrXU9qPs.roa (hash: dn6QOi6y7D3WWFMRmemHXTmqvY1tGOW3y/+Az1xAbxM=)
3: gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl (hash: qebiOvlONLacbYePi1sLUEdEGFWMXe42st3pkg7RSUg=)
4: hwtVlXCFjo--idd4yO5s0tt7X3I.roa (hash: NUHjZYJkOekWUWwDXQIom+k1M6skxKicFwBdcoVK9n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:dd:32:3c:9f:eb:aa:a2:64:7a:c1:de:70:60:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae
Validity
Not Before: Sep 28 09:01:57 2026 GMT
Not After : Sep 29 09:01:57 2026 GMT
Subject: CN=08096bf4acabeab808f16f7bc80bffafd32d24ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:d4:54:80:0b:fe:83:55:c4:1e:f3:a8:d6:
d5:77:e7:c5:d8:48:32:71:04:ab:45:87:59:83:30:
a3:1f:d8:d8:0b:b0:98:58:21:19:98:6b:fe:a6:45:
d1:11:10:26:d0:bf:07:ab:92:a9:df:de:d0:65:50:
5e:f6:bf:d0:f4:6e:53:34:8b:89:3a:db:bb:d0:72:
8a:a9:48:4c:f5:79:f6:12:a5:b0:24:3b:65:84:c0:
4b:8a:8b:02:52:b5:7a:6e:4f:87:8b:13:23:a8:6c:
52:33:f5:68:97:1d:d2:0a:9e:60:ba:48:69:85:91:
f3:25:dc:92:a5:ac:6f:7b:23:c6:06:5e:ac:a9:10:
ab:60:01:31:2a:08:cb:b0:0b:77:4e:84:49:87:c2:
b2:a4:a7:d7:d9:53:c9:6d:0c:3f:72:1d:ef:3e:ed:
4b:d7:51:93:83:b2:22:56:18:5c:4d:98:3f:a9:ad:
ff:ae:21:12:e3:97:05:80:5b:e5:97:f1:38:36:ba:
2a:71:05:f0:6f:a9:84:f4:97:ee:ca:99:ec:50:e0:
e1:af:4a:13:96:ed:0c:0e:a7:fa:a2:18:55:cd:1a:
00:b8:1e:43:f9:ed:12:a0:50:93:ee:99:49:fe:d6:
42:29:36:b9:33:b1:b4:f9:93:fe:ad:e3:d4:9e:e8:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:09:6B:F4:AC:AB:EA:B8:08:F1:6F:7B:C8:0B:FF:AF:D3:2D:24:CA
X509v3 Authority Key Identifier:
keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b5:8c:b1:c3:3c:17:7e:f6:ef:7d:0f:e5:be:a9:b3:d4:51:
da:4f:3f:24:5d:0a:35:a7:f2:06:cd:3f:8a:1c:10:59:2b:8b:
5a:44:ce:40:6f:70:53:c5:00:39:d7:01:32:78:2b:32:33:ad:
84:59:fd:20:51:72:2f:7d:36:aa:e2:a6:7b:06:4b:05:91:53:
cc:42:92:a3:01:82:b9:4f:01:d5:56:d8:1b:3d:fe:61:47:ae:
f2:79:7d:eb:15:ac:a3:6c:ec:1d:44:c0:10:6d:d1:ff:15:4c:
03:f6:d5:c4:bf:99:c7:ae:39:1e:c6:fe:ab:5c:8f:ea:ad:1f:
0d:ee:9a:67:8a:03:c2:46:6c:f4:e8:d0:0a:19:4a:44:41:9d:
c0:44:41:56:07:37:8c:e0:0d:96:4c:01:cb:ad:0b:2d:4f:c5:
69:fa:b6:b4:46:5c:cf:ed:ea:13:36:a0:a4:e3:da:71:eb:06:
ef:e3:55:d6:32:99:cd:55:01:1d:98:ce:a9:b2:b8:d9:31:3e:
80:ca:d8:3d:3e:4f:85:f9:a4:2a:32:44:57:11:06:80:b5:f1:
07:81:51:97:bf:de:ed:e3:7a:ef:4d:19:f6:64:53:7a:10:b3:
63:3c:83:28:04:57:4c:b3:a1:db:f4:99:9a:65:05:4b:db:7a:
20:7d:5e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:47:34 2026 by rpki-client