Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
File: gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft (raw, json)
Hash identifier: pr3J7NUCg+TWjYTKVs8yjZfyxJcPAm0yqCXZRQYUCdI=
Subject key identifier: 7D:8C:E2:5F:D8:DC:15:98:E7:FC:4A:33:30:4B:F8:38:71:FF:93:C1
Authority key identifier: 80:A9:21:40:84:33:B6:6E:A5:0A:40:00:AA:CE:10:D2:AD:D0:6A:85
Certificate issuer: /CN=80a921408433b66ea50a4000aace10d2add06a85
Certificate serial: 01A13F020738EED289BC41E81C48A5831C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKkhQIQztm6lCkAAqs4Q0q3QaoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
Manifest number: 08FD
Signing time: Thu 15 Oct 2026 10:00:59 +0000
Manifest this update: Thu 15 Oct 2026 10:00:59 +0000
Manifest next update: Fri 16 Oct 2026 10:00:59 +0000
Files and hashes: 1: TADovInnVhImIAMNLhy833dYeyU.roa (hash: f/dalF6vRD8VNn9XqvAc5SALl8hYeWv1uoN4z7iWDuo=)
2: gKkhQIQztm6lCkAAqs4Q0q3QaoU.crl (hash: kMqnn4wpzDyIZK/uywEQplo7vGltieNnJBM8ettAA1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKkhQIQztm6lCkAAqs4Q0q3QaoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:07:38:ee:d2:89:bc:41:e8:1c:48:a5:83:1c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a921408433b66ea50a4000aace10d2add06a85
Validity
Not Before: Oct 15 10:00:59 2026 GMT
Not After : Oct 16 10:00:59 2026 GMT
Subject: CN=7d8ce25fd8dc1598e7fc4a33304bf83871ff93c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:c0:dd:69:55:1a:11:ad:af:55:a9:97:0b:
7a:bf:a9:4f:85:a9:2f:de:83:ec:dc:77:db:5c:0c:
cd:8c:22:ef:68:ac:e0:e3:0e:e5:71:63:be:4d:92:
fe:5c:f7:80:bf:13:a4:67:1f:c9:f3:41:d7:bf:13:
0d:8a:1e:34:f4:c8:b3:3f:e9:e8:56:eb:55:06:3c:
78:3b:43:a3:7a:5f:29:39:44:96:1d:10:df:4b:c7:
7c:a7:7e:fc:5d:d5:77:7a:82:c0:4f:c8:fb:3c:9e:
98:7d:be:b1:c4:64:2c:0f:0c:b9:13:84:3b:43:51:
7b:14:94:5c:7c:9b:96:01:9b:d7:d5:d0:73:ab:e3:
10:b0:c9:fe:28:6e:9f:fd:98:df:96:d3:ed:23:90:
b9:57:9f:50:a0:f5:c8:68:c7:0c:3b:d8:11:bb:53:
32:fb:a2:72:74:7e:3a:4f:41:fa:46:a8:b6:d3:a3:
1d:ea:aa:ac:00:d6:7f:d4:81:b3:d3:9e:34:a5:af:
e8:ac:fd:43:db:6b:9b:70:0b:0b:f3:34:be:7d:b6:
b1:16:92:e4:ab:3a:c1:b2:41:70:9a:78:c4:7c:3a:
9a:85:cf:8d:46:37:3c:b5:01:77:c5:2d:fc:8a:a7:
25:1d:43:92:67:f3:f9:c6:fd:99:fa:f3:dc:19:be:
01:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8C:E2:5F:D8:DC:15:98:E7:FC:4A:33:30:4B:F8:38:71:FF:93:C1
X509v3 Authority Key Identifier:
keyid:80:A9:21:40:84:33:B6:6E:A5:0A:40:00:AA:CE:10:D2:AD:D0:6A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKkhQIQztm6lCkAAqs4Q0q3QaoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8d:a8:38:eb:84:f3:6e:3d:fb:8d:24:c2:f7:1a:02:8c:d1:
a4:5c:21:2e:22:94:da:db:8f:fe:19:b5:08:0a:0b:7a:82:ed:
d1:55:02:7f:c4:88:35:b1:47:cb:7b:15:a3:98:01:92:3b:bd:
67:fa:09:79:24:18:68:22:b5:d4:01:b5:ec:ff:e7:37:3a:cd:
35:78:ed:95:70:c8:01:a5:8e:91:a6:04:84:b3:d5:31:bd:d6:
1d:ac:9f:f7:fa:db:9c:31:2b:5a:fc:fe:ad:48:90:13:39:85:
86:c2:1a:37:ed:1d:32:63:9f:f1:a6:3d:51:fb:86:82:ec:a4:
40:dd:ae:87:2d:ba:26:dc:c8:25:01:02:68:53:46:d0:90:73:
4d:93:df:fc:f9:35:41:df:4c:0f:e3:6b:e0:f6:0d:d5:7d:44:
a0:0c:e0:64:e7:00:fd:a5:52:ec:c5:9d:23:26:23:2c:c6:32:
fc:95:20:2d:0d:4e:62:7c:a5:81:64:7d:aa:d4:cd:07:d5:fd:
b8:19:23:95:37:18:cb:23:f4:bd:ba:c0:8c:51:77:3e:ba:81:
2f:e0:eb:30:63:3b:6c:e3:41:f7:38:6b:08:21:31:64:f7:6b:
2c:8c:f5:04:b3:e6:6d:2d:9b:52:d4:06:84:9f:a8:8e:40:4c:
c7:76:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:49:06 2026 by rpki-client