Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: bh2/ghLcIfYTm9vKw3bhFhZ8JaHKQSV/HXvCHbj3Qgw=
Subject key identifier: 72:51:31:42:DC:F2:42:55:C8:C2:DF:54:13:D1:A0:8F:39:A0:8B:12
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 01A0D31586E421C53DB0C760666436986BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 11:03:18 +0000
Manifest this update: Thu 24 Sep 2026 11:03:18 +0000
Manifest next update: Fri 25 Sep 2026 11:03:18 +0000
Files and hashes: 1: 9U9GJ2gIPT5fQlwrS_PORXQ8IEw.roa (hash: Ew3sgvXIFSVbIaXejNH5mh4KuqPNbuNRT+236zCj8P8=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: Ig1epZi21a1K6tHbU3jORWFpOiDQvekRhzEmUzCKpTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:86:e4:21:c5:3d:b0:c7:60:66:64:36:98:6b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Sep 24 11:03:18 2026 GMT
Not After : Sep 25 11:03:18 2026 GMT
Subject: CN=72513142dcf24255c8c2df5413d1a08f39a08b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:30:96:de:38:4d:a1:47:86:d3:54:43:23:18:
f0:9b:0f:1f:34:28:2b:5c:ce:6e:74:8d:77:a9:ed:
ce:44:7c:3f:66:4b:f6:df:a9:e6:3e:c9:ca:74:ba:
56:3a:73:c5:c2:13:95:4b:d5:79:3f:9f:c9:b1:5f:
23:d9:80:77:10:80:ec:7f:ba:e3:63:fe:e9:d0:21:
5f:50:81:5b:87:ea:38:5e:e5:e2:c9:1d:bb:12:41:
55:e0:de:19:c0:ed:fd:28:6c:46:dd:fd:b9:77:fc:
e0:27:cb:0c:12:3c:30:63:7d:60:4c:a8:ea:e3:3d:
0a:03:12:7b:5c:b7:f8:52:86:d8:e3:2c:ee:84:08:
c0:bd:da:db:82:78:e1:ce:48:44:7a:b8:9e:ef:2c:
3b:81:8e:89:49:7a:0c:b0:57:50:98:82:54:82:18:
0f:30:a6:03:c6:fa:ca:09:2a:14:62:27:a4:35:1d:
d2:4f:88:68:c2:08:4e:cf:9d:d4:89:85:eb:2e:e2:
e1:a5:cf:86:ae:3b:ac:8e:d3:6f:f8:7a:23:64:d5:
37:2a:d2:42:af:f0:56:c1:98:71:67:c3:51:aa:50:
fb:ba:14:0d:1a:7c:af:be:a5:ba:fa:cb:36:9b:52:
e1:f6:29:e9:76:f6:ca:3c:11:36:a9:dc:73:83:eb:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:51:31:42:DC:F2:42:55:C8:C2:DF:54:13:D1:A0:8F:39:A0:8B:12
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:39:d9:0d:59:9a:82:9f:8a:70:7d:b6:8b:6f:17:52:21:49:
ad:48:70:4d:f1:4a:ac:7a:60:df:59:62:23:15:1b:9a:3c:73:
9e:89:fe:b1:1a:14:34:8f:be:41:a3:ee:91:c2:ac:f3:1a:57:
ed:9a:68:b7:84:a1:44:24:a5:6f:08:ab:7c:53:d7:ea:3c:39:
d8:23:68:5a:01:7a:9f:44:74:cd:fc:02:47:ce:8e:eb:77:aa:
ee:01:71:d9:11:1b:01:c4:12:c3:a4:ad:6b:4d:f9:d6:1f:c7:
5b:ab:7c:7e:1d:b9:5c:42:49:8c:39:75:26:45:e1:21:47:96:
e3:c5:25:89:50:a7:3a:fb:04:a9:0c:ff:ef:75:c9:e4:c7:19:
ef:12:95:d5:9e:a4:b9:36:aa:a3:cc:2b:0b:0e:6f:b1:c2:5c:
04:11:8e:a6:10:e1:a2:c0:c3:d7:fc:19:bd:72:8a:40:c0:06:
b0:cb:58:40:4b:6b:12:59:60:7c:47:6f:9d:25:14:7e:00:a7:
57:7f:a2:41:2b:0c:e6:a3:f7:14:97:f8:a0:43:da:a8:d8:2c:
55:80:aa:1a:b5:d5:35:03:51:52:43:8d:b1:fb:89:84:a4:3e:
18:cf:38:5f:06:b5:a7:24:4c:5f:13:c4:cd:8d:4c:51:09:50:
30:c7:13:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:53:59 2026 by rpki-client