Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: dKRU9BLWegKRLfSWFt8FySjNi10Bs5nJhaW35YGz2FU=
Subject key identifier: BA:D2:BC:9E:3B:64:08:A7:81:9A:36:6E:E7:7F:65:2E:9F:12:BB:D3
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 01A0C6A0A33689EF369BC246FC043DBC5785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 12FD
Signing time: Tue 22 Sep 2026 01:00:11 +0000
Manifest this update: Tue 22 Sep 2026 01:00:11 +0000
Manifest next update: Wed 23 Sep 2026 01:00:11 +0000
Files and hashes: 1: ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa (hash: DP27/a5o1Ym+vesDLFqV0Tua4ny+ds0/pH34jhmErS8=)
2: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: fMdlDe0mmDqfKgspO+T7s5i1zQEiVH8E88RAWeZO5uA=)
3: Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa (hash: KqQ8TKxBYl3JumzrSj+0qt5zeDJPsxKpAnGsc38qwpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:a3:36:89:ef:36:9b:c2:46:fc:04:3d:bc:57:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Sep 22 01:00:11 2026 GMT
Not After : Sep 23 01:00:11 2026 GMT
Subject: CN=bad2bc9e3b6408a7819a366ee77f652e9f12bbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:82:23:b4:c5:6d:3e:6f:d1:1d:e4:25:3b:
7f:62:64:b6:ab:1b:07:56:f3:60:0d:c0:28:21:34:
7e:33:c0:88:1b:30:4f:b2:44:18:63:cb:10:ff:c8:
ac:5c:42:71:4b:28:50:89:a2:bc:2b:23:e4:a2:3a:
cc:2a:1d:4b:ae:90:83:3f:67:67:df:0e:14:4e:1f:
47:ea:b4:d4:3f:f3:87:09:1b:9a:ab:61:d3:d2:ca:
41:13:1e:87:c0:b3:5d:38:82:47:93:96:06:88:5f:
5c:17:0a:7d:f5:85:18:01:e4:28:a0:0c:3c:8d:9e:
e9:f5:2b:d9:56:1b:06:80:60:73:ba:cc:c3:b4:f8:
39:55:03:67:bb:85:3a:c0:a2:bd:be:d3:71:93:ab:
94:0b:c5:42:2c:af:18:15:05:71:f5:49:a8:41:38:
59:76:ee:48:7d:a6:32:53:4b:52:bb:93:48:d3:40:
08:89:eb:b0:6d:c2:e1:32:f2:9a:18:ca:a2:bc:6a:
bc:43:ea:51:03:e8:58:0e:b5:47:f8:0a:46:20:1e:
b5:b8:41:74:c1:a2:c9:3e:db:a6:e1:80:fb:cf:72:
8e:66:99:31:e6:b3:7e:9a:2a:f5:fe:81:a0:c0:81:
0c:ea:56:c3:90:bb:45:9b:21:33:50:33:cf:9a:25:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D2:BC:9E:3B:64:08:A7:81:9A:36:6E:E7:7F:65:2E:9F:12:BB:D3
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:19:5f:a7:c3:61:29:de:58:2a:54:b0:38:2b:fc:23:bb:27:
f6:0c:b5:b8:2b:70:45:8b:6f:ad:9d:bc:70:cf:5f:34:39:64:
bb:ae:85:6a:43:96:d6:6b:9a:aa:b1:b5:30:4b:f0:ec:05:0d:
c8:15:2a:29:9c:a4:08:83:9b:ee:b8:fe:e9:32:93:81:1a:ed:
eb:fc:70:dc:b8:e2:f3:8a:e0:32:c3:c1:d2:c1:e4:3d:8a:ef:
ca:4a:01:af:bc:6d:51:3e:c1:a0:a7:73:0b:27:8f:d2:f7:ba:
9d:d6:d2:8a:dd:a9:d7:0a:78:69:d1:8c:0e:bd:e8:d4:08:1e:
32:f4:3e:31:69:d8:79:17:f5:b8:1d:d1:07:b1:dd:13:eb:33:
66:33:1d:d9:d0:38:e1:65:84:62:10:1b:fd:3b:da:13:35:66:
37:99:99:b2:03:c6:23:5e:46:1a:f8:07:e3:7b:e8:ca:a3:a1:
d5:fc:b8:8d:ff:cd:ae:c4:93:cb:7a:cf:35:41:60:72:f7:54:
68:0e:46:72:14:81:63:8a:a5:6a:60:7d:c4:1e:fc:79:eb:aa:
0a:0b:0e:30:18:e7:0c:2c:29:f3:f4:0f:bd:6f:6b:01:c0:76:
a8:d3:68:97:7f:25:29:42:c8:98:c4:57:6d:80:78:1c:6c:2f:
de:3f:a4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:56:43 2026 by rpki-client