
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
File: gLWnciaEnxty0GO-Y4mX-wnK21E.mft (raw, json)
Hash identifier: 31pdu+BK2ukTV2oIqMnZegASO9WdC4fzeNbbb7G6+Ps=
Subject key identifier: A7:F6:14:23:CF:A7:B5:03:A9:4B:7E:D7:A3:03:AB:C2:F0:0E:DD:22
Authority key identifier: 80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
Certificate issuer: /CN=80b5a77226849f1b72d063be638997fb09cadb51
Certificate serial: 01A0DC855B9A32AE45921A3D711B06122084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
Manifest number: 017F
Signing time: Sat 26 Sep 2026 07:02:02 +0000
Manifest this update: Sat 26 Sep 2026 07:02:02 +0000
Manifest next update: Sun 27 Sep 2026 07:02:02 +0000
Files and hashes: 1: LpMnQmkW8eK1z14dUTCVF0MYEHc.roa (hash: P2Gc+4XzB+nZwbiFLhbDc9T1+zG9R61PeCv2JvqaWck=)
2: gLWnciaEnxty0GO-Y4mX-wnK21E.crl (hash: yoCnE8egZORP6ykOZqvCkM14mFVA0K5USy0oV6WbsKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:5b:9a:32:ae:45:92:1a:3d:71:1b:06:12:20:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b5a77226849f1b72d063be638997fb09cadb51
Validity
Not Before: Sep 26 07:02:02 2026 GMT
Not After : Sep 27 07:02:02 2026 GMT
Subject: CN=a7f61423cfa7b503a94b7ed7a303abc2f00edd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:90:6f:43:3f:5d:7a:e5:6b:07:d2:92:ba:
62:fb:03:c8:31:c3:42:d0:ab:ac:1b:c7:4e:ea:f5:
66:b0:b1:a1:3b:4a:01:50:0b:fb:59:0a:76:a6:76:
50:5a:1b:ee:00:2d:6b:eb:37:d1:11:d2:54:32:6d:
10:26:47:50:0c:ff:0a:9e:b4:b9:7a:90:1b:7d:4a:
c0:9e:b7:1c:19:84:5d:fd:8d:cf:d0:9e:95:08:62:
9d:d8:a7:43:c2:c9:05:f5:c9:84:22:58:f0:f7:eb:
8d:13:a4:02:34:71:c3:74:3b:dc:c1:ea:4d:87:cd:
75:97:07:b6:bf:39:45:79:99:56:e7:57:45:bd:60:
51:d5:e4:db:8b:12:a5:4e:f4:21:50:01:b6:7c:1a:
f3:69:d3:fa:f4:77:aa:9f:c1:2f:27:d2:0c:b8:23:
9d:15:fa:ba:37:b1:39:a0:2b:bd:c6:98:fd:ae:0e:
22:9f:a9:11:48:a1:51:8e:f2:89:7d:78:74:3e:48:
7b:af:4c:31:0d:6d:2a:da:0c:3c:34:d5:0f:12:4d:
23:f1:c1:3a:a5:b7:46:da:c6:bb:3e:a6:75:17:d4:
6a:87:5a:52:f4:91:33:1f:a7:34:9c:7b:45:ff:00:
8a:68:ff:d0:60:7b:71:c1:f0:db:7b:54:66:77:68:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F6:14:23:CF:A7:B5:03:A9:4B:7E:D7:A3:03:AB:C2:F0:0E:DD:22
X509v3 Authority Key Identifier:
keyid:80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9b:5d:77:f6:27:d6:55:04:0d:53:15:b3:f5:10:c7:4a:8f:
c0:4e:62:48:4c:fe:66:b4:c9:c0:43:5f:8c:58:4d:e5:e5:d9:
1c:a9:10:d0:a8:39:2f:34:dc:8b:53:33:1e:dd:72:30:57:f7:
ab:8d:5c:46:fc:91:15:8f:cd:87:49:c9:b1:0a:40:c9:f3:04:
8e:ab:22:dd:4b:5c:8e:d3:e5:30:4b:41:c6:ba:f8:a3:9a:a1:
19:3e:cc:44:b7:0b:fb:ac:66:29:f6:6d:85:13:79:2f:ed:71:
45:72:c2:80:2e:b2:7d:6d:41:e4:ee:49:e9:0c:30:93:09:a3:
f0:a8:44:a5:23:8d:a0:32:7c:42:11:ee:15:69:a3:05:0a:33:
83:12:0c:50:1f:89:10:49:06:54:0c:8a:87:29:d7:a8:17:7c:
e7:21:ee:d2:7e:84:0d:73:d4:20:71:3e:3d:ef:30:2f:57:b8:
09:d1:49:fb:44:b0:97:3b:09:1d:97:28:c9:cb:a4:84:cb:27:
49:13:2b:2b:36:88:3a:97:20:f1:87:85:f3:76:c1:1d:9b:ca:
f9:d5:d8:90:1b:8a:18:e0:c5:31:b3:b7:b4:6a:b1:b5:85:f9:
5e:64:1f:c9:c3:d4:b3:ba:1a:5b:b1:78:1b:89:8a:b8:0e:d0:
f8:79:b0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:27:04 2026 by rpki-client