
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: Aesbgt2cOUgeUK5zXjKMb4g/khRX8RgH6KW/prSqlLA=
Subject key identifier: 9C:0A:DE:67:CA:F8:E0:A2:6E:F3:61:E1:57:96:6C:ED:DD:7C:A5:61
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 01A0DC4DDB234045AE5371A9390297DA1492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 06:01:24 +0000
Manifest this update: Sat 26 Sep 2026 06:01:24 +0000
Manifest next update: Sun 27 Sep 2026 06:01:24 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: C+rjx9b9rC3+XhU90pLiRQLbjcmKAYCptBMwwSkBQ5w=)
2: _LIMNGBB_bM1l_RNh7Jn1ke8Z1Q.roa (hash: Y1Vdc4Bk2253+dyiXjTYX2rbKWMSURyUVb6exyc6X4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:db:23:40:45:ae:53:71:a9:39:02:97:da:14:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Sep 26 06:01:24 2026 GMT
Not After : Sep 27 06:01:24 2026 GMT
Subject: CN=9c0ade67caf8e0a26ef361e157966ceddd7ca561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:41:c7:90:b5:8e:46:18:e9:3f:5b:56:49:3e:
bf:3a:49:de:e2:4e:50:f9:cb:bd:b1:ff:49:5f:21:
99:0c:68:c9:a1:05:72:a0:88:9f:f2:1d:e2:b0:88:
ac:4e:7f:bc:44:f7:10:87:d2:7c:4f:aa:01:f6:39:
67:4b:4f:a6:36:02:aa:2d:2e:44:64:e2:df:2f:f2:
97:85:72:b7:d7:20:93:ff:02:61:27:f8:be:83:03:
04:f0:2f:f0:3a:1b:69:ce:ed:9b:76:9a:8c:ff:d8:
9d:8a:b0:fd:58:78:97:a9:17:63:f9:07:6f:42:78:
f2:71:04:0d:c3:c1:e8:64:24:0c:45:f8:ed:55:0d:
7a:69:2f:44:37:5d:7b:5e:af:89:66:42:17:40:1b:
ce:87:52:59:66:14:f3:a1:0d:0a:8e:b3:c3:22:39:
60:5b:47:36:5a:50:ce:29:64:16:93:3a:99:03:88:
a3:f7:80:6f:7b:28:bb:46:ae:e5:b9:9f:fb:3a:ad:
32:51:ed:65:ac:e0:7f:2c:4a:51:34:ed:f1:17:19:
cf:a9:e2:b5:6d:15:cf:e6:3e:f3:ad:f0:bb:6f:46:
ee:9c:3d:b9:25:26:c6:bc:02:69:5a:b0:0f:59:c5:
22:f3:7a:64:aa:b3:35:56:78:f1:a9:89:a2:44:3f:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0A:DE:67:CA:F8:E0:A2:6E:F3:61:E1:57:96:6C:ED:DD:7C:A5:61
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:94:8e:28:d9:d3:93:22:2e:32:bf:76:24:c2:24:81:fa:c1:
36:e1:08:33:02:fe:be:41:cc:95:c4:23:27:7b:bc:e9:bb:9e:
e0:8a:ec:b5:e7:74:42:7a:5d:ae:df:6b:41:a0:24:73:8f:85:
29:68:b6:ad:27:58:3f:b8:01:21:26:4d:90:08:57:dd:c4:65:
ba:48:57:8d:b9:33:a2:4a:fe:33:aa:27:11:9e:a3:95:a5:90:
ad:6c:ec:11:96:f9:67:eb:b6:7c:48:2f:27:84:d5:85:90:88:
3d:fa:4e:d5:61:e3:63:1d:17:c9:58:bf:fa:59:67:f8:d6:91:
13:0e:6e:15:18:f3:ce:7e:f5:77:f7:62:a0:84:f4:a7:85:33:
47:0c:4b:79:f3:67:17:f6:09:03:58:6c:ba:08:da:06:34:a0:
18:9a:c6:fd:d8:7a:af:ae:53:de:01:1c:1c:c6:d9:f4:d6:1b:
58:2d:6a:50:52:ab:9d:84:3c:d0:88:1d:99:af:d8:39:c2:86:
70:ff:13:84:d7:79:6b:99:b3:92:15:39:36:64:25:d7:c3:96:
37:ed:5f:99:a5:89:de:55:b4:57:26:d1:cf:94:6d:e1:c0:9c:
4a:cf:52:6e:7c:6b:e4:e4:d0:4b:d0:27:4c:7b:d1:07:73:eb:
dc:48:c7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:40:12 2026 by rpki-client