Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: 1q+GUGxtZKAY2lJDVe62eQlvOh9Y6vXnrFrqijjcRaA=
Subject key identifier: 2F:C0:CB:E9:1A:1A:D6:CD:D4:9B:04:DE:1C:43:B1:4E:E2:1B:41:67
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 01A0C8594C249D8C950CD3D6810E12161D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0C8B
Signing time: Tue 22 Sep 2026 09:01:30 +0000
Manifest this update: Tue 22 Sep 2026 09:01:30 +0000
Manifest next update: Wed 23 Sep 2026 09:01:30 +0000
Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=)
2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: h1HUFyJjTSkg8iv/9O+WTv/tLQ7kkxBMHqQ3r9fJJEk=)
3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:4c:24:9d:8c:95:0c:d3:d6:81:0e:12:16:1d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Sep 22 09:01:30 2026 GMT
Not After : Sep 23 09:01:30 2026 GMT
Subject: CN=2fc0cbe91a1ad6cdd49b04de1c43b14ee21b4167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:87:1e:52:55:99:32:ee:75:f8:88:1c:24:
fd:bf:f4:6f:9c:bf:b4:f3:7d:45:99:95:b0:40:a2:
c0:25:36:70:ea:dc:20:d6:d1:27:46:47:93:f6:90:
5f:35:dc:5c:34:d9:27:a8:24:bd:fa:29:e9:52:85:
75:35:07:4d:12:b1:b6:7e:90:90:c7:88:3f:6c:ed:
06:32:69:32:2c:37:71:55:07:7f:64:e8:da:ea:66:
d5:59:3f:a6:40:d0:eb:b1:20:fb:14:c9:df:8e:0e:
1e:e3:00:cb:f5:58:74:01:3e:21:ce:a3:54:70:a5:
8f:2d:5d:b9:6d:49:76:62:09:9b:00:e4:58:ef:59:
fd:1d:89:fb:98:f9:4c:e7:10:38:e5:cf:d6:3b:07:
79:db:2c:a9:b9:8e:c6:8c:cc:f2:25:10:17:b5:38:
1b:98:63:b9:f5:06:2c:85:9c:91:50:50:29:59:b8:
86:fd:60:d8:8f:37:a4:6f:c4:4b:30:45:78:a0:b1:
46:81:5f:06:73:c9:a1:15:5f:a9:9b:e3:cf:47:1f:
75:33:f0:65:aa:b2:1e:fe:eb:76:16:48:04:b8:e0:
72:da:2c:0f:2d:9b:7b:30:dd:85:84:d0:6b:cb:e2:
bf:87:48:d2:98:14:fc:05:98:04:0e:05:44:a6:18:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C0:CB:E9:1A:1A:D6:CD:D4:9B:04:DE:1C:43:B1:4E:E2:1B:41:67
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f3:83:17:70:01:af:7a:04:f4:be:ba:c0:b0:ab:9c:22:1a:
2e:11:3c:76:e4:ab:d3:b1:a0:83:85:b6:4c:c2:64:8e:3e:ae:
5e:0e:6b:be:4a:aa:94:74:10:fa:25:15:7b:07:32:e3:f7:2d:
8e:56:bc:9c:31:49:18:3d:43:a2:8b:b4:1b:55:7f:30:1c:7c:
ad:f2:2e:b5:dc:02:03:a5:37:5b:e3:10:75:e6:ae:fb:f0:32:
95:dc:4d:65:53:12:bb:e8:e2:f6:ad:3d:92:46:32:58:5b:2a:
a2:46:56:9f:85:a9:df:ad:34:d1:05:19:e3:5f:10:8c:f3:98:
7d:a3:c3:f9:7f:7d:c1:a8:ae:b8:c0:1e:97:46:e9:68:13:ae:
dd:a9:42:9d:4b:01:c3:33:90:6b:87:5c:ad:c6:af:b1:f5:bd:
c3:d2:7a:d6:d2:f8:bd:1b:1b:76:3b:76:1f:5c:41:34:00:03:
19:62:56:4b:ad:b7:b7:c0:3d:24:0d:c6:e1:46:8c:ac:73:66:
98:c2:b1:2f:13:7f:fe:8f:34:da:f5:57:16:d1:f3:cb:ee:e1:
8a:0f:39:dc:14:aa:e8:b0:b5:d3:22:c8:f7:bb:91:bf:a6:1e:
91:82:45:a4:2b:6c:1a:66:8b:b4:c6:42:ae:eb:e7:09:10:2b:
ef:28:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:40:28 2026 by rpki-client