Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: wOkjFFW80AYmZu5VGVpxCW0E82RHnRGjipzrjX+mZtA=
Subject key identifier: 7A:56:AC:AC:D5:7F:9A:D2:9B:E3:58:23:32:05:FD:75:4B:5C:4E:6A
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 01A13590D450968BB886F28F68DB72B48B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 1AAE
Signing time: Tue 13 Oct 2026 14:00:46 +0000
Manifest this update: Tue 13 Oct 2026 14:00:46 +0000
Manifest next update: Wed 14 Oct 2026 14:00:46 +0000
Files and hashes: 1: 0bqo0bUAXv_4CI9l73mqbhE8a2g.roa (hash: iEe2NrJePiOEkt4y1MNa7WFWziQ9517Q5QJMPLgLqF0=)
2: RT27iS5dmX-RpCR1NpzNSn8n2Uw.roa (hash: qBi2ogY38ZEBaQkYgKwRqyPlrZuDmr1aSjBSW1/pXdo=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: mWUkKbLdYKaUpPOwP/1JJ1Z/4Bhe5OlMNit8VjfBWRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:90:d4:50:96:8b:b8:86:f2:8f:68:db:72:b4:8b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Oct 13 14:00:46 2026 GMT
Not After : Oct 14 14:00:46 2026 GMT
Subject: CN=7a56acacd57f9ad29be358233205fd754b5c4e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:90:ac:16:17:5f:8c:81:16:be:8a:3c:f5:e0:
19:e1:a3:73:13:0b:93:21:89:12:b6:bb:94:9c:a5:
ec:63:6e:5b:0c:3e:ef:74:d0:6c:96:78:8a:ae:f5:
40:c6:6a:4b:86:2a:7a:d9:75:f0:95:10:e7:83:a8:
9f:7e:a1:a0:8c:0b:7a:cc:b1:ff:f6:d5:17:69:0d:
bf:d5:c6:86:6a:6e:60:e0:0c:01:01:dc:b9:9a:c8:
be:b1:12:1b:3d:e8:2b:9f:b3:d2:b0:a3:fa:36:8b:
1f:1c:06:b8:37:62:1e:b8:38:c7:0c:43:92:41:72:
68:a6:c0:88:a2:f3:b7:55:a4:a4:13:6b:cf:b8:aa:
dd:a3:01:37:74:9a:34:c2:13:22:b7:56:58:79:21:
2c:12:c5:63:26:2c:a8:e4:b2:a5:cc:15:7b:8b:74:
17:8a:88:6c:0e:97:ec:39:0b:ae:6c:e4:26:76:8d:
39:f3:88:a6:30:de:91:2d:c8:eb:4a:c1:76:8c:b5:
b7:bd:bb:0b:b8:e9:05:26:fe:e4:22:b0:d7:d8:47:
ef:5a:a6:b6:e9:e0:b1:02:d8:d6:4b:4a:7e:6f:05:
29:47:3a:f2:16:7b:6e:ad:6e:2a:64:03:93:5e:73:
98:4b:e4:4d:e9:97:ea:40:5f:4f:0e:1f:90:06:f9:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:56:AC:AC:D5:7F:9A:D2:9B:E3:58:23:32:05:FD:75:4B:5C:4E:6A
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f2:2f:42:7c:60:46:07:77:52:6d:52:7b:84:0a:18:63:e6:
3c:41:55:1c:6f:3e:68:9f:3f:e5:5e:8f:5c:76:18:c7:31:73:
7f:b1:20:1a:6c:c7:e4:64:fb:0e:3c:8a:6f:fb:d5:cd:47:a8:
df:0b:2e:f0:ca:e7:34:f8:36:d0:64:24:2f:ca:d2:d4:5d:b7:
63:14:dd:64:48:ae:a2:11:c4:33:1b:b0:20:44:00:0f:46:37:
7f:7d:e7:19:b5:4c:74:00:cf:55:8f:86:b3:1b:ae:f5:6f:d2:
54:16:51:05:84:aa:92:da:d3:c9:c0:75:ed:0e:d4:b7:d8:9f:
48:d2:39:11:2e:35:6d:6c:bd:91:74:2d:36:e3:c0:f9:85:84:
74:df:5d:10:3a:df:ca:03:9d:fe:66:b7:21:56:1a:91:87:42:
d3:32:11:ef:3e:01:77:f3:31:f5:5d:18:ca:45:e6:68:d5:38:
11:fc:ec:c5:5a:eb:1e:33:17:1f:ea:6e:55:12:5e:e0:59:f1:
9f:75:11:59:75:9a:e8:f2:cd:3c:e0:e1:48:02:ed:b3:5a:de:
aa:d8:e9:e6:df:ff:82:90:cc:19:ba:4e:1a:2d:5c:4c:81:7b:
84:50:ec:d7:14:08:15:0e:42:55:0e:58:92:4d:ee:e2:9d:85:
30:82:8c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:24:42 2026 by rpki-client