Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
File: GfRzuqwkYD6teVw6ot6t-G01H8I.mft (raw, json)
Hash identifier: JrHd+kJKlIixxWB5gCBisUZSJNBCxO9wxacABzU7gWo=
Subject key identifier: 2A:FA:88:1D:1A:2B:D0:83:74:C1:AD:5E:74:4B:30:3E:FA:6D:42:1F
Authority key identifier: 19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
Certificate issuer: /CN=19f473baac24603ead795c3aa2deadf86d351fc2
Certificate serial: 01A0E1E1E379BFF9B5CC38A25F6408CEC1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
Manifest number: CB
Signing time: Sun 27 Sep 2026 08:01:12 +0000
Manifest this update: Sun 27 Sep 2026 08:01:12 +0000
Manifest next update: Mon 28 Sep 2026 08:01:12 +0000
Files and hashes: 1: GfRzuqwkYD6teVw6ot6t-G01H8I.crl (hash: x+5loF4XTJtflmyKq7JtnYORrAEcnrguVMYOrgPIR14=)
2: gNE4IPEZB9u0WmCsF4Pfsq8nHMA.roa (hash: xyIv1xmiMjTFOEwHYgnbJZRjv1TpjuI5f7fPV5Q1SEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e1:e3:79:bf:f9:b5:cc:38:a2:5f:64:08:ce:c1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f473baac24603ead795c3aa2deadf86d351fc2
Validity
Not Before: Sep 27 08:01:12 2026 GMT
Not After : Sep 28 08:01:12 2026 GMT
Subject: CN=2afa881d1a2bd08374c1ad5e744b303efa6d421f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a8:fd:0c:25:9b:87:d8:a3:fb:80:70:eb:57:
14:ce:5c:b1:1f:dc:3e:b0:f6:7f:91:2c:05:78:1a:
38:0c:16:d8:14:73:e6:f9:58:03:6f:59:85:f2:e2:
31:70:9c:14:31:c4:e3:85:34:d9:47:6d:3a:37:69:
00:d5:ab:53:f9:0c:81:3e:3b:02:87:2b:75:ee:78:
ff:b4:fa:6f:ce:8e:c3:c0:aa:bb:2c:12:7d:a7:24:
24:eb:15:53:b9:fe:2e:1f:9e:f0:56:47:7a:1a:27:
b7:fd:6d:d0:1c:41:dd:d8:97:77:63:b6:a0:dc:3b:
99:f1:42:74:b5:f6:87:2b:6b:0f:34:fa:3f:31:26:
4e:32:8d:24:90:58:aa:8a:fa:43:23:67:3a:40:ed:
f7:16:c4:3a:fb:56:7d:3d:c3:af:ba:46:cc:8e:d7:
28:24:e4:82:cd:4b:ce:f7:8c:d8:a2:9e:69:a8:6e:
4f:0c:8c:3f:3c:56:47:a9:d7:35:c5:b8:50:2b:a3:
71:9a:de:8c:d3:6f:02:83:fe:ae:15:8c:16:80:dc:
27:0d:02:2a:5e:f7:df:00:13:63:02:c5:9b:82:9c:
cf:40:54:eb:4b:ef:10:24:6b:15:4c:f2:fd:7b:51:
53:02:b0:2d:34:e3:fd:d8:f5:c2:11:ca:e4:a2:f1:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FA:88:1D:1A:2B:D0:83:74:C1:AD:5E:74:4B:30:3E:FA:6D:42:1F
X509v3 Authority Key Identifier:
keyid:19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:11:51:d2:f4:f5:49:30:9d:d3:a7:08:f4:1c:46:c4:63:e3:
9d:e2:0c:7c:db:7e:82:dc:d4:ec:a0:9e:4d:3e:7e:92:eb:42:
54:5d:f3:5f:87:2c:48:29:27:9b:dc:28:73:89:65:46:54:bb:
ad:9b:17:9b:7f:45:dc:dc:eb:25:79:e8:99:ad:f2:f5:8f:52:
3b:9d:ab:ad:4f:39:e8:04:47:2b:3a:b5:73:56:5b:80:7d:31:
d5:c2:32:b3:73:67:a3:99:63:13:00:32:15:5c:aa:0c:e1:f3:
65:3e:37:90:f9:32:c1:ab:88:f4:c8:18:3d:11:e4:f9:48:24:
2b:13:dc:7f:bd:f2:3f:a6:af:5f:42:07:e1:82:d9:f4:7a:8b:
b1:cc:2c:6f:56:48:72:d4:e1:21:14:20:ce:a9:3d:3d:6c:b6:
e8:5e:64:2c:6c:62:38:39:63:1f:83:28:50:72:42:a3:c6:fa:
76:27:79:4e:a6:8b:fd:c8:6b:c6:ea:31:53:62:4f:04:45:08:
5a:2c:fa:ad:d1:fe:1b:f9:f8:24:68:9b:3d:1e:74:bf:af:32:
c7:f6:1e:f8:b2:6c:77:22:b2:01:7f:9b:f3:5f:e9:e5:25:d0:
e2:48:01:f7:b8:31:89:1d:17:fc:8c:1f:91:17:e1:03:5b:de:
1d:16:eb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:02:10 2026 by rpki-client