Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: ZI5VTIxnrLj7V9Fcr4CeO1aRWnHDXR2Y4gGf9V8fyWc=
Subject key identifier: A0:97:47:C4:21:10:DF:39:E2:FC:01:D9:20:27:81:8C:CD:F1:F2:E6
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 01A12C1FD62D268B57449300A63D040A2435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 04FD
Signing time: Sun 11 Oct 2026 18:00:46 +0000
Manifest this update: Sun 11 Oct 2026 18:00:46 +0000
Manifest next update: Mon 12 Oct 2026 18:00:46 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: HteZImDtEYmPfovsQvHIFqZ71Kyl3siWyU7weWZyvkA=)
2: t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa (hash: Gojw7FbJO6oLOCFdJ+IonU5RAeRQTmH3d/fqvSSbRko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:1f:d6:2d:26:8b:57:44:93:00:a6:3d:04:0a:24:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Oct 11 18:00:46 2026 GMT
Not After : Oct 12 18:00:46 2026 GMT
Subject: CN=a09747c42110df39e2fc01d92027818ccdf1f2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:26:4b:da:43:d2:4a:d6:f5:2a:43:c3:fa:
94:c0:c6:42:7f:6f:94:2c:55:b3:5d:bc:2e:b4:92:
e2:9b:a6:94:3f:63:c0:a2:92:04:53:73:09:26:82:
31:fc:ed:13:ab:d7:2b:5f:3c:a4:6f:db:70:e5:dd:
97:31:3a:6c:37:a9:22:11:ea:59:4b:35:b3:79:1c:
58:ff:34:20:1e:7e:41:e1:e8:ac:46:9d:c9:ad:29:
70:49:ea:7d:a5:36:70:8f:4b:28:d1:da:2d:e2:12:
48:0e:d6:ec:b8:93:79:33:7c:b8:48:6b:47:3c:b6:
5f:82:d2:7a:d2:95:2e:46:14:cd:7c:94:92:60:08:
5c:86:f7:c2:63:17:3c:3a:32:ef:a3:1f:2b:67:63:
44:f5:92:3c:92:1e:26:54:2b:5e:63:32:35:66:01:
47:07:77:ce:3a:98:eb:e6:38:d5:fe:24:32:45:f5:
b3:67:ad:48:fe:7d:c8:86:cb:dd:4c:97:0f:35:ef:
9b:f3:0b:3c:e7:f9:47:70:7f:45:19:c0:7a:72:62:
91:19:56:85:5d:76:34:de:c8:31:a2:86:a9:74:62:
8a:24:44:c7:80:f4:c0:8c:6b:c8:2d:bc:87:5a:29:
52:41:38:5f:d0:3d:31:46:16:b4:fc:f0:12:45:22:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:97:47:C4:21:10:DF:39:E2:FC:01:D9:20:27:81:8C:CD:F1:F2:E6
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:f6:c8:c3:28:fe:0d:d1:a2:8d:5a:d7:c4:0d:28:35:64:84:
21:21:21:df:f2:c1:90:35:59:22:55:c0:c9:c8:61:65:7f:7f:
3b:3a:24:b6:00:13:e0:ef:6e:9f:35:d8:80:d3:fe:bf:18:a7:
d5:92:2f:19:2e:e0:a2:b2:9c:26:15:3e:70:06:1e:7d:8a:4b:
43:1a:5c:01:60:d7:e4:6c:1a:43:58:30:a2:ce:a0:69:aa:b3:
81:0c:e3:e3:91:4e:7b:de:4a:a7:50:b0:7b:50:0c:39:02:86:
d8:51:bf:4c:a6:87:f8:d3:65:a0:26:2e:bc:32:c6:b2:8e:6b:
d2:16:7f:0e:85:b9:19:9b:4e:d7:e5:ce:91:8b:09:3b:04:b9:
63:b3:05:b8:48:bb:5c:e1:5e:e6:99:c8:50:f8:71:df:c3:24:
31:98:71:cf:29:66:29:6b:28:ff:68:13:da:35:80:c0:07:27:
15:bd:2c:03:c1:3d:dc:f1:07:e5:0d:3c:5f:c1:d2:1f:f5:5e:
94:90:b6:ff:af:86:24:03:ca:03:19:49:c4:28:ee:70:61:b1:
79:95:34:d1:29:fc:38:e8:c7:81:93:bb:31:98:0c:27:e4:d0:
c6:60:a4:f3:e1:e9:50:04:0a:93:27:63:0f:b3:3f:24:75:ec:
be:50:68:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:16:00 2026 by rpki-client