Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
File: gIsAIvj93I8kiP-d-eE6xOLO1xA.mft (raw, json)
Hash identifier: aZeYpYvT1jt+9H7IHuhytM4svhZv4SldW1ixq8JKaa4=
Subject key identifier: 05:1C:07:6E:AD:EE:ED:09:F2:B0:11:56:00:EE:15:8E:FF:EC:0E:35
Authority key identifier: 80:8B:00:22:F8:FD:DC:8F:24:88:FF:9D:F9:E1:3A:C4:E2:CE:D7:10
Certificate issuer: /CN=808b0022f8fddc8f2488ff9df9e13ac4e2ced710
Certificate serial: 01A0C28DD2F1512989F35273FB7DCB3C2D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:01:09 +0000
Manifest this update: Mon 21 Sep 2026 06:01:09 +0000
Manifest next update: Tue 22 Sep 2026 06:01:09 +0000
Files and hashes: 1: EJdtqQdc0UeFz8mnfKqKtvtPGnk.roa (hash: va4uWHoCe/BbcgVjzuzuEu6jfJbdipgHv67I7KVhA7I=)
2: gIsAIvj93I8kiP-d-eE6xOLO1xA.crl (hash: NyNrhDAqR6qumj8DXm7XykhX2f2wane6Mzk2sJ8b4R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:d2:f1:51:29:89:f3:52:73:fb:7d:cb:3c:2d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808b0022f8fddc8f2488ff9df9e13ac4e2ced710
Validity
Not Before: Sep 21 06:01:09 2026 GMT
Not After : Sep 22 06:01:09 2026 GMT
Subject: CN=051c076eadeeed09f2b0115600ee158effec0e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:0c:83:e3:17:af:58:71:6c:dd:2d:8c:78:
ae:3b:82:80:06:14:3e:5e:91:1f:b5:79:74:c6:64:
ea:90:b4:5e:62:bf:86:7e:e2:32:2a:8f:df:65:6b:
44:dd:02:bb:de:a6:92:a7:1f:c2:56:d6:a5:22:da:
ec:de:26:2f:a5:50:7f:0d:5c:6a:0a:f0:5f:a8:0a:
c3:b4:ff:6a:a6:2c:93:9b:c8:20:4a:26:d0:66:df:
1e:d1:29:70:06:74:33:d6:b2:8b:3c:fb:36:e1:84:
4d:ef:18:ad:d7:2e:d5:35:79:f2:55:83:7d:5c:ce:
81:52:cf:30:bd:a3:30:65:0c:ee:17:86:e0:63:a3:
84:57:d4:0b:bb:be:9e:35:b4:93:09:88:af:4c:33:
5e:04:f4:cd:d2:f7:9d:cc:1e:c2:06:c7:33:84:ca:
f4:52:be:24:c8:93:92:0f:e1:ee:bc:cf:6c:c4:92:
70:45:29:ae:ad:00:33:29:84:f3:09:78:fd:18:48:
6e:6f:a6:8a:bc:14:aa:54:fc:5b:4a:21:85:26:63:
c6:7d:dd:62:ec:93:8b:eb:7e:fc:8d:16:26:a2:ca:
ae:f7:eb:e9:ea:29:ce:68:99:41:03:8c:4d:9d:02:
3f:3e:78:99:f4:c6:d4:89:1c:05:24:e0:91:d2:cd:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1C:07:6E:AD:EE:ED:09:F2:B0:11:56:00:EE:15:8E:FF:EC:0E:35
X509v3 Authority Key Identifier:
keyid:80:8B:00:22:F8:FD:DC:8F:24:88:FF:9D:F9:E1:3A:C4:E2:CE:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:43:3d:f0:58:ab:a6:f7:a4:49:fc:ca:6b:9b:ea:c5:9e:5e:
48:e9:cc:9f:6c:c3:6e:31:34:0d:f8:95:f9:6a:a0:c5:0d:a7:
be:29:53:6b:13:30:d5:cd:ba:fc:ca:bb:29:70:05:0a:0d:a3:
a2:8a:bc:ac:fa:bf:3d:6f:85:d6:f1:08:22:7f:2b:42:cc:e7:
63:2a:e8:b8:84:05:4c:b8:28:f6:cc:3f:b3:84:7b:4e:3a:40:
0d:f2:3a:0f:22:97:93:10:d4:4e:b9:0f:ce:79:90:35:85:aa:
b3:8f:fe:c5:dd:4e:37:4f:39:bc:b6:58:2b:b7:8d:4e:13:aa:
c4:be:14:5c:c5:a3:cd:5f:a3:cf:86:14:92:f2:2c:59:75:70:
86:2b:81:79:de:2b:23:77:16:05:ee:b2:2f:a5:b1:c4:20:53:
6f:76:59:71:b7:06:72:32:f6:0b:43:45:3e:54:4c:ff:8b:8b:
4b:55:a5:35:1b:d1:79:3b:68:f7:9d:21:69:f1:7d:44:f9:e5:
ce:e2:d1:a2:05:98:e3:b9:e9:f3:c6:65:79:fc:59:ce:1a:cb:
93:73:b6:3e:81:98:6e:ad:c6:4a:d9:5f:24:86:3a:e2:1f:e5:
72:6c:bb:fd:4e:36:ec:f3:48:67:15:c4:fd:23:d6:94:f7:b5:
28:3b:b6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:12 2026 by rpki-client