Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
File: GnZ2d6M9OnmfNkOEKW30apHTkn8.mft (raw, json)
Hash identifier: EN83/X+w0bCgA1M5xa94xFhiLVX7hkAwTK6f/4qACxk=
Subject key identifier: DE:CA:42:CB:14:15:6C:F7:57:40:3E:AE:E7:DD:F8:9C:D3:85:85:71
Authority key identifier: 1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
Certificate issuer: /CN=1a767677a33d3a799f364384296df46a91d3927f
Certificate serial: 01A0C28D9FF9E946459839CF9867B6E30162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
Manifest number: 52
Signing time: Mon 21 Sep 2026 06:00:56 +0000
Manifest this update: Mon 21 Sep 2026 06:00:56 +0000
Manifest next update: Tue 22 Sep 2026 06:00:56 +0000
Files and hashes: 1: GnZ2d6M9OnmfNkOEKW30apHTkn8.crl (hash: 62ULjO8ccZxyLxm+97gp5y+nIkZXtLVjvzwcmlPEgdU=)
2: Mz6b9RE1a7PQVFNLNaep4PvMXLo.roa (hash: nsEHtmuLKoEjphj16JeJMAKFgiSN3+GdZGkD3234iFM=)
3: Yi0TKtM0nQuln6ka8POKCK5eqkA.roa (hash: 1OzTKQ02jIhXuSZBpi43UbeD8IkwLG7/H92g3GIwi9E=)
4: auXxSkXbPLVr2qSGlp2m2RZI7ow.roa (hash: PtjbpIz9UroKWiq2Wn+CkY0YcxqAxqQ7Vku1bByME5U=)
5: cLwsvL062UHY2NWasAhe0el2t4g.roa (hash: CImORy1DAVhb5txV/FdsWzrP7esG2NdvlSEYTEDPBuY=)
6: mU0gWqVg1HBT44ZXxn8T_KBlAjI.roa (hash: 7pusZvkMpb7VcSYsj2xehhYrZkhM308klNZu6IksJ6k=)
7: vRgxmWXzNodvSG8_D9abHZ2m5Es.asa (hash: fWmfZRjLdd3RRZ5Avb54DnOuwjol/RjRIZpj5dircvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:9f:f9:e9:46:45:98:39:cf:98:67:b6:e3:01:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767677a33d3a799f364384296df46a91d3927f
Validity
Not Before: Sep 21 06:00:56 2026 GMT
Not After : Sep 22 06:00:56 2026 GMT
Subject: CN=deca42cb14156cf757403eaee7ddf89cd3858571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:e6:d5:08:35:5d:13:1d:4c:aa:b2:4e:b5:
a5:a4:1a:3e:68:3f:43:13:8d:da:75:c6:2b:70:28:
81:27:89:94:dd:83:c0:29:9c:f7:1f:6e:e7:28:f7:
60:80:4d:7f:9a:d5:48:d4:d3:81:4d:a5:9b:2e:25:
24:a6:8b:9b:96:60:f4:87:b3:5b:b8:f4:bf:06:4a:
d8:04:b4:2d:b0:90:dd:15:65:5d:78:84:36:14:6d:
3f:8f:88:10:8c:1a:0d:0a:f9:77:24:7c:a4:13:ee:
7d:26:b7:bf:2b:cc:32:69:ff:d5:30:ef:54:1b:47:
e8:5b:74:7c:9d:08:35:61:75:6f:40:4a:ae:2d:6a:
f9:3b:5e:07:c0:50:35:6e:15:27:00:19:9f:08:a2:
28:98:bb:2a:16:1f:5c:5e:25:5b:8a:98:9d:c4:d0:
34:dc:be:7f:95:f7:4f:db:88:1b:7f:e4:38:b6:f5:
92:0e:5d:6e:e1:d9:4d:a1:95:b1:f2:2f:00:85:07:
90:04:41:c0:ba:18:19:cc:2c:48:16:6e:20:23:ce:
cf:59:b8:39:06:1a:70:e6:54:cd:5e:13:b3:dd:9f:
5e:ea:49:5a:fe:ad:26:f5:f6:90:19:3e:ac:3a:62:
98:e5:1e:4c:a2:bb:8a:54:6c:5c:51:1b:5c:dc:b1:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CA:42:CB:14:15:6C:F7:57:40:3E:AE:E7:DD:F8:9C:D3:85:85:71
X509v3 Authority Key Identifier:
keyid:1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6a:26:04:88:19:5d:3f:53:c4:50:f6:f3:7f:09:8b:38:73:
92:ad:65:be:18:2b:7b:1f:6f:5e:78:20:f2:9d:91:70:f1:b0:
d9:87:8e:d2:67:f2:e6:84:4a:f8:82:ea:a5:97:dd:56:11:c3:
36:e3:25:d9:d9:24:55:26:fa:d5:1f:6e:6e:51:32:0a:1c:b5:
ff:8d:61:b7:0d:1e:94:aa:88:05:e0:b5:2d:b0:65:b1:0e:0e:
10:27:cc:45:4b:01:ac:17:ad:5d:6e:c3:5e:62:e8:d7:b1:00:
56:9e:3f:34:49:28:4c:59:89:89:0e:4f:ec:ca:5e:11:a0:e0:
bc:b1:04:32:28:e6:2b:e5:06:54:f9:14:a8:2f:11:1d:d3:cc:
ec:b1:ac:68:bb:9f:b0:e0:20:ec:66:c0:34:db:31:ed:67:f8:
4f:14:d9:fe:c4:e5:f6:45:65:80:9e:f6:19:4a:56:92:cd:55:
27:08:37:21:55:47:6a:4b:4f:68:ec:f9:a2:c1:b5:22:b3:76:
8d:77:5d:33:46:b9:f9:63:75:d4:a4:a1:fa:c1:10:c6:58:8b:
1b:e4:8b:fe:3d:e0:7c:a8:ed:ff:11:74:46:88:f5:25:5b:8e:
66:32:ee:7a:7b:af:35:85:eb:af:5a:de:1a:17:49:66:6a:ec:
10:bd:d4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:22 2026 by rpki-client