Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
File: gFOrw9SfVluUh47Y8iDOMn-XSjI.mft (raw, json)
Hash identifier: WKd+o9im4tPd9h3OB/QUU+D45m8r+SiUwZy9tIHvSRc=
Subject key identifier: D9:B7:A5:C0:96:FD:FD:7E:54:AB:F5:38:48:6A:63:16:AB:C5:B9:DD
Authority key identifier: 80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
Certificate issuer: /CN=8053abc3d49f565b94878ed8f220ce327f974a32
Certificate serial: 01A0C10CB1A90A4554313A31F98D55BA50C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
Manifest number: 0161
Signing time: Sun 20 Sep 2026 23:00:29 +0000
Manifest this update: Sun 20 Sep 2026 23:00:29 +0000
Manifest next update: Mon 21 Sep 2026 23:00:29 +0000
Files and hashes: 1: GPJ5YibQX7Qs5zXj8y25gwD4O7o.roa (hash: dw68P8crMQR+t7pqyZ2DtV9eQd5KOVoGJFGq3g9A+8E=)
2: _5dlpHFSfnZB5fPESdwe0vcQoK0.roa (hash: 648yr+Yw2hgriwVmDfKLpfCh/5rjlF0ILGcl2PNzoO4=)
3: gFOrw9SfVluUh47Y8iDOMn-XSjI.crl (hash: OeyvN6GplSpdPfJ0VT0AhRLa9kJwwJMbApKjYJrjzTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:b1:a9:0a:45:54:31:3a:31:f9:8d:55:ba:50:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053abc3d49f565b94878ed8f220ce327f974a32
Validity
Not Before: Sep 20 23:00:29 2026 GMT
Not After : Sep 21 23:00:29 2026 GMT
Subject: CN=d9b7a5c096fdfd7e54abf538486a6316abc5b9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:63:b6:2b:e0:8d:92:fc:dc:b4:e0:db:58:
7e:ab:3b:62:7b:05:0a:22:12:5c:d0:bb:a8:7d:e9:
49:b4:e1:fc:c4:92:a2:0f:24:a6:c4:5a:6f:24:6c:
a2:be:f4:91:8d:e0:65:9e:f3:4b:fc:e2:42:62:5c:
95:a4:8b:d6:fd:46:6e:b0:43:b4:7a:c3:ee:a6:32:
61:52:ac:98:d2:4f:70:13:99:56:6c:e9:d3:9c:dc:
52:75:6e:30:f5:58:af:1e:71:da:fa:1e:0f:64:17:
bb:a6:ac:3b:31:18:00:53:cf:cd:9c:7d:c8:aa:65:
5f:a4:e5:aa:d5:67:49:da:d8:f1:04:74:6f:1b:95:
16:97:f0:48:62:46:91:f9:7a:43:8d:60:e0:9c:9d:
e9:7b:94:a2:df:61:d1:2b:5f:25:e2:61:e2:fa:13:
66:79:e7:0a:b7:52:78:a4:3e:e3:49:59:e5:d8:46:
3f:ac:31:31:bf:06:af:b2:91:f3:a5:7e:4c:1b:97:
6c:b8:52:42:eb:d6:76:9a:52:02:fb:9e:3c:ff:00:
6e:04:79:2b:e7:2e:a2:4d:86:31:58:48:30:6c:1f:
83:d0:06:3a:eb:e6:0d:88:2e:a6:7e:48:3b:78:fa:
a7:36:c1:c0:4b:73:10:da:e9:9d:b3:da:4a:65:47:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B7:A5:C0:96:FD:FD:7E:54:AB:F5:38:48:6A:63:16:AB:C5:B9:DD
X509v3 Authority Key Identifier:
keyid:80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8a:cc:04:b7:a1:62:06:8e:32:6b:68:27:6e:97:ee:6f:98:
e6:67:23:0e:15:09:09:b1:77:c3:9d:e4:35:7c:b3:e4:4d:e2:
fa:61:b5:1d:7f:79:c0:74:b5:27:89:de:bb:39:e7:b5:80:9f:
4e:44:27:84:92:88:63:ec:6f:91:b2:3e:73:ae:d3:0c:0d:1c:
b7:43:11:c2:a3:43:6a:60:66:63:3a:d4:67:9c:b0:66:6e:c3:
fd:34:f2:f8:37:d8:ae:cb:96:dd:2f:ff:83:40:3a:a6:5a:10:
91:6c:1c:0b:4f:f1:c2:30:28:49:34:f2:3c:1e:8a:35:b4:11:
9c:f0:d6:a6:82:7c:6a:49:74:1a:fd:45:6e:9a:10:83:de:ba:
b2:bb:5b:d7:d8:65:3c:56:49:a4:36:b1:64:bf:9d:14:af:ce:
4e:99:c0:9d:40:46:ac:10:42:92:33:d6:b3:a3:c8:a4:0f:0b:
e4:27:2a:41:83:04:cb:3d:b0:f9:dc:d4:5a:0f:b7:f6:a4:77:
7a:14:7f:83:35:d1:6c:5f:8e:3d:51:2a:06:3f:93:27:fd:26:
57:b9:f5:cb:7b:18:f1:4c:91:09:b9:45:b7:2f:f4:f2:4a:15:
6e:8c:b1:09:de:01:c2:f0:5d:e8:7e:54:3a:4f:c2:b2:1b:e4:
03:92:47:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:16:15 2026 by rpki-client