Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: SlqwK9Re2c2QduKnouvvOmmQMvxs3S81tsNDmm1wp3Y=
Subject key identifier: 23:8E:D4:99:56:56:69:CB:85:16:78:2E:1C:1F:1B:31:26:43:A0:79
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 01A0C3691B57514DB653A1B9C25A27FE7BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 0BC0
Signing time: Mon 21 Sep 2026 10:00:40 +0000
Manifest this update: Mon 21 Sep 2026 10:00:40 +0000
Manifest next update: Tue 22 Sep 2026 10:00:40 +0000
Files and hashes: 1: EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa (hash: CaEBziMi2C6rN6WGf7O34W/+WtB1Ogao7r0fRD3u2XA=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: UdZOIadOqeam05SyXa4t0y9grvo+p0qL1+roP10wuW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:1b:57:51:4d:b6:53:a1:b9:c2:5a:27:fe:7b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Sep 21 10:00:40 2026 GMT
Not After : Sep 22 10:00:40 2026 GMT
Subject: CN=238ed499565669cb8516782e1c1f1b312643a079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:db:91:cd:cf:52:61:1b:ba:98:0c:97:4e:
f4:d3:01:7f:6b:10:51:c6:9d:17:1c:95:88:ca:f9:
46:8b:15:72:d4:a2:c2:35:aa:b9:a1:1c:bb:53:a9:
d2:98:09:fc:37:6c:f2:82:98:25:33:5e:b8:6b:02:
8e:d3:02:38:9b:11:4d:a7:58:76:91:3b:06:e7:a7:
6a:b1:28:14:07:1b:5a:48:51:3a:8a:4d:b6:cb:60:
50:03:27:12:33:a6:3e:52:8f:66:e0:81:5c:14:1c:
aa:60:53:f5:d9:7a:0f:8d:c0:93:6a:21:fa:23:97:
89:63:fb:2d:5e:21:95:22:c3:ba:0e:13:5e:11:52:
fe:05:b1:bb:8b:0f:74:22:80:0b:da:f8:44:1a:62:
83:34:09:37:e9:4a:94:af:1a:7a:3c:4f:40:c7:f5:
e9:ad:19:fe:5e:0a:c1:f0:1d:a1:bc:95:7b:83:1a:
7f:0d:d6:68:5c:e3:c4:10:22:d5:54:e1:0a:dd:a7:
ca:39:75:cf:b8:fb:c9:a8:93:fc:f0:0d:68:85:7f:
1f:95:79:04:85:05:2e:c3:9b:9e:55:e3:0b:f8:8b:
eb:18:7f:d2:8e:84:52:9d:ba:60:e2:f2:01:3c:9a:
65:95:3f:cc:f3:67:fb:35:23:98:96:dd:ea:52:fa:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8E:D4:99:56:56:69:CB:85:16:78:2E:1C:1F:1B:31:26:43:A0:79
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7a:5a:ad:1b:2c:16:48:11:45:df:10:1e:ee:81:87:ec:00:
7a:0e:4b:aa:ee:0b:0e:9a:f3:76:35:c5:d7:fb:c1:06:b4:37:
8b:3b:74:35:1c:1a:02:91:15:77:43:0a:45:90:f7:d3:63:2a:
66:de:55:69:ee:f8:76:41:83:95:73:e3:bc:59:25:a9:3e:fa:
bd:9c:20:18:39:2c:1e:c4:53:67:71:ca:48:b1:fd:87:73:1d:
70:f6:34:31:9c:ef:ac:1f:0c:3b:9c:1a:ea:81:53:3e:b4:af:
1c:d1:61:d6:28:39:a1:5d:01:e1:c3:67:ac:d8:cf:91:37:5e:
0f:63:ff:6f:4d:c5:be:3f:43:e2:ab:67:92:1b:cc:9c:33:af:
7e:cc:8c:7a:05:7b:b1:c6:e6:6a:eb:eb:9f:ad:d1:77:15:f3:
86:4f:33:98:8b:c0:64:8d:91:ef:be:cf:e5:53:92:c3:af:8d:
dd:d3:8a:aa:50:5c:c7:a0:7a:e8:67:0e:31:da:0d:0a:20:d7:
2b:83:69:f4:6c:17:8e:ac:ad:81:63:d6:b0:24:f4:e9:85:48:
a2:be:3d:a0:c0:df:a2:b9:18:52:10:96:f1:3c:2d:5e:96:8e:
92:05:74:ce:a2:c6:c6:85:70:c5:41:6e:a2:e0:ff:e8:c8:9b:
83:23:53:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:32:38 2026 by rpki-client