Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: idU5J/KPHill3LycI/7DCXJ132rFNgtPv6DG3x1tBMY=
Subject key identifier: B1:E5:61:3A:08:49:D2:55:DD:22:AD:46:76:1F:3B:99:66:B5:9D:1E
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 01A0C7462B07762484218DDB76D2E4D804BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 0BE5
Signing time: Tue 22 Sep 2026 04:00:59 +0000
Manifest this update: Tue 22 Sep 2026 04:00:59 +0000
Manifest next update: Wed 23 Sep 2026 04:00:59 +0000
Files and hashes: 1: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: 4tkAm2vyaGZcLPpcb/QCXAgMkE9o8U8vk0+2Y5+CuWQ=)
2: ImbkEEuw8ciW4XZvQnskEOeml3A.roa (hash: s2ZZTRU19ZLlzKll7MUSBOLRlZD19z6bClWZADEJ0vA=)
3: xTy14ClaR4Rvu9WN2hIEK42ff6w.roa (hash: MWs9WTWsQLed5Ou31CqMyRYBYZdgWbH79vbLFld2S5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:2b:07:76:24:84:21:8d:db:76:d2:e4:d8:04:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: Sep 22 04:00:59 2026 GMT
Not After : Sep 23 04:00:59 2026 GMT
Subject: CN=b1e5613a0849d255dd22ad46761f3b9966b59d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:36:bc:3b:55:9b:e8:10:35:b7:71:f4:9a:
f5:ec:f2:29:d0:f4:be:ac:31:5a:dd:9e:3a:4d:54:
c6:70:8f:4b:3a:a4:8b:a0:19:6f:b0:b8:6a:ec:af:
be:62:69:99:1d:de:90:e8:86:5e:6f:85:2a:7b:39:
ae:03:64:be:36:61:f8:49:89:21:64:01:6c:76:cb:
54:9b:e5:ac:e6:08:d8:dd:fc:96:8d:56:5d:af:92:
ff:ea:87:1b:94:eb:5f:b4:03:be:13:da:4e:53:7b:
48:a0:c4:75:8f:ed:1e:cd:4d:1a:d3:57:52:99:ae:
81:f8:c6:b2:d5:2c:b2:8b:52:03:95:a8:63:ae:31:
94:f9:36:af:36:40:9f:0c:35:5a:5f:02:c8:a0:15:
b9:f5:75:1e:ce:27:9d:13:b2:58:36:e1:2e:5c:67:
9e:9e:99:50:f1:4f:01:dd:8c:d3:36:f6:10:9d:51:
aa:80:fc:28:29:97:d6:4e:d5:66:34:d9:ff:1f:9e:
f8:65:b6:2f:a6:d0:84:a0:a1:99:83:39:be:69:1f:
3d:36:2b:8a:bf:70:c4:29:d9:fb:f4:e4:de:0e:4c:
6b:70:2e:27:ab:35:25:bf:3e:3c:a1:ec:46:d5:88:
5b:eb:a3:1d:41:6c:83:ad:8e:10:52:9f:18:5a:5d:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E5:61:3A:08:49:D2:55:DD:22:AD:46:76:1F:3B:99:66:B5:9D:1E
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:88:c8:cf:5c:df:a8:2b:e9:26:3a:69:52:26:fc:a8:ae:44:
04:6f:3e:c8:d3:90:7f:71:61:b0:4f:b2:23:aa:20:f0:cb:6a:
37:9b:40:78:48:85:54:00:e1:78:81:c8:57:b3:59:91:ef:3d:
5a:7c:26:f5:93:40:23:a2:b0:23:d4:a0:c1:99:79:10:0c:5f:
99:c0:e8:32:22:fd:27:44:cd:06:79:02:71:0d:16:65:d1:48:
a1:c4:ad:bc:bd:b4:ff:d5:02:55:0a:d2:a1:e4:d8:74:a9:1d:
36:9e:7e:ee:df:98:6e:54:36:60:0a:79:40:f0:6c:4b:eb:d7:
d7:af:39:b1:44:9f:f3:15:8d:1e:8e:28:7a:be:4c:cb:2b:bc:
83:2d:c8:26:5c:c5:a1:8a:98:4c:e7:5e:9e:ea:78:1f:94:22:
6d:87:45:ba:36:3b:ee:4a:d5:24:77:23:e7:83:5d:df:4e:9a:
9e:40:65:e9:98:82:b2:9c:42:79:17:a0:5d:41:3e:99:05:2a:
9f:8c:8e:d3:66:f4:5a:64:08:b4:58:2c:a9:0f:70:0b:fb:dc:
bf:ce:2d:b3:16:9d:73:d0:11:a2:f7:07:ac:fb:6a:80:6c:8d:
e5:5a:be:35:9e:7e:bf:e7:84:76:0b:c9:73:32:5e:5c:f0:d5:
e4:5a:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:49:59 2026 by rpki-client