Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: QoFw5C6El32Iz6UJSfKtLw3SmG9YU9QVgFYoOQ20Y1Y=
Subject key identifier: 11:C0:E3:F5:52:2E:A3:13:A8:9A:03:55:65:25:1F:A7:98:92:B2:D5
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 019FAAF5EFF4A05752C687ED50BA32DAFAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 102A
Signing time: Tue 28 Jul 2026 23:01:12 +0000
Manifest this update: Tue 28 Jul 2026 23:01:12 +0000
Manifest next update: Wed 29 Jul 2026 23:01:12 +0000
Files and hashes: 1: O5-mG7lTLGsSHbPOXl_2N2nSPgs.roa (hash: hoTvW0b4Iag7FokkMuOsi13ZXqhsvaxP4WoOFPmTwHY=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: BthjqhKIOmG6eP365Lmm5P3WLLdahtz3uSD+AS86XSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:ef:f4:a0:57:52:c6:87:ed:50:ba:32:da:fa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Jul 28 23:01:12 2026 GMT
Not After : Jul 29 23:01:12 2026 GMT
Subject: CN=11c0e3f5522ea313a89a035565251fa79892b2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:aa:3a:93:8d:81:20:8b:53:02:08:14:c8:
fb:3c:f4:52:0a:d8:96:b4:df:26:40:30:12:ef:3b:
e6:50:d9:de:bc:82:34:b9:b1:41:32:a7:fd:64:00:
04:c9:3e:24:5d:e7:64:9f:7b:a2:09:73:04:52:93:
a5:19:9f:f5:8a:55:a9:be:c8:73:66:04:fd:2c:29:
31:85:59:80:bb:73:33:20:b4:f1:f4:aa:67:3b:45:
c4:88:fa:73:fa:d8:88:d9:61:f0:2d:8c:4c:d7:f1:
3d:c5:9b:c8:ac:8d:88:18:90:e6:68:80:64:c2:b4:
17:5f:13:38:c9:63:20:e3:c8:60:c2:4e:9f:fa:23:
e2:b6:5d:d0:4f:32:34:c9:42:76:9d:88:51:5d:d2:
7a:f0:ae:4d:9e:74:db:b5:6f:36:cc:17:3d:c5:1c:
33:fb:29:ba:ab:09:9c:8b:54:23:63:4d:e2:13:70:
ee:d2:f6:79:c5:25:ac:b3:80:e4:75:21:4f:ad:f8:
b4:9f:b5:54:ae:0d:59:27:ef:e1:5a:35:e9:c0:7e:
75:d5:47:46:2c:61:4b:ee:4f:db:a0:4f:95:ad:99:
cb:74:94:0a:a3:6f:3d:52:fc:6b:31:cb:a2:1d:c2:
5b:6d:ba:0a:1f:a0:62:c3:59:f4:12:fe:c6:2c:c1:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C0:E3:F5:52:2E:A3:13:A8:9A:03:55:65:25:1F:A7:98:92:B2:D5
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9b:24:12:ec:11:e7:f3:0f:43:dd:66:7d:0b:5c:8d:88:6b:
b8:ae:47:4c:f7:da:a1:19:2d:57:16:96:68:3c:af:dd:b0:db:
ae:ae:89:03:52:bf:23:aa:09:96:14:3d:81:39:1c:78:65:88:
b1:c9:64:3c:7c:f1:8e:a0:65:a3:6d:ca:a4:fa:4b:d3:01:8d:
46:73:45:33:01:75:34:3b:d4:10:2b:ea:46:d3:c2:b2:52:13:
9a:a0:c7:79:82:42:58:01:24:6a:ab:2c:82:7f:df:86:ff:00:
ca:d3:87:f6:8e:65:bf:f6:38:36:e9:aa:bb:f6:b1:35:5b:6c:
cf:d9:f5:d3:95:8e:b8:f9:df:20:0f:e0:84:7a:37:97:1d:8c:
60:8b:ab:28:52:a3:35:63:95:70:e4:99:ac:3d:08:9b:c7:8a:
dc:f1:f8:da:2c:16:a2:1b:ac:05:c5:09:95:0b:27:2d:3c:54:
cd:3a:99:a6:2c:d4:d5:0d:e5:e0:c4:7f:fd:8b:be:d9:02:bc:
e2:88:73:88:2b:fd:a0:67:b9:56:b5:65:b9:d3:78:d8:ff:95:
05:c3:25:f2:99:5d:2b:ff:7a:a8:b8:1f:ed:d9:d6:d8:5f:8b:
a5:3e:de:a8:c0:f7:32:bf:9a:63:c7:5b:31:47:ca:8c:fc:7e:
c3:6c:b7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:05:43 2026 by rpki-client