Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
File: gFOrw9SfVluUh47Y8iDOMn-XSjI.mft (raw, json)
Hash identifier: SmQD2kg/I61/jUgh3pEP6GiAyDZ+ocUvBA0AHkLZXNU=
Subject key identifier: EE:CC:A4:54:39:8C:4F:AF:79:44:59:39:E4:98:08:FE:A2:E7:B8:61
Authority key identifier: 80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
Certificate issuer: /CN=8053abc3d49f565b94878ed8f220ce327f974a32
Certificate serial: 01A0C2FB53D252B6D28E48B5404BB99C20F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
Manifest number: 0162
Signing time: Mon 21 Sep 2026 08:00:45 +0000
Manifest this update: Mon 21 Sep 2026 08:00:45 +0000
Manifest next update: Tue 22 Sep 2026 08:00:45 +0000
Files and hashes: 1: GPJ5YibQX7Qs5zXj8y25gwD4O7o.roa (hash: dw68P8crMQR+t7pqyZ2DtV9eQd5KOVoGJFGq3g9A+8E=)
2: _5dlpHFSfnZB5fPESdwe0vcQoK0.roa (hash: 648yr+Yw2hgriwVmDfKLpfCh/5rjlF0ILGcl2PNzoO4=)
3: gFOrw9SfVluUh47Y8iDOMn-XSjI.crl (hash: AI41FSs4q+OYkpoZINyID3GWZBIVb0X46S3FVT4pLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:53:d2:52:b6:d2:8e:48:b5:40:4b:b9:9c:20:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053abc3d49f565b94878ed8f220ce327f974a32
Validity
Not Before: Sep 21 08:00:45 2026 GMT
Not After : Sep 22 08:00:45 2026 GMT
Subject: CN=eecca454398c4faf79445939e49808fea2e7b861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:f9:d1:b3:0c:12:0d:7d:4f:08:0f:3f:dd:
ba:7c:9f:7e:5f:43:41:44:e9:11:0f:fa:91:ae:6a:
7f:0e:83:3a:8f:c7:e9:4e:a9:a7:10:02:90:23:14:
02:47:c9:31:c9:47:25:29:2a:db:c8:16:0f:3f:0a:
e9:60:dc:6b:73:2f:21:2e:3b:3c:96:45:1d:38:a7:
29:4a:56:42:2a:c5:59:5a:e3:e3:9c:6d:ee:d4:3e:
b3:62:43:42:11:df:3d:75:70:b5:fa:59:9a:e9:55:
ba:d8:d9:2d:a5:11:61:fd:52:86:d9:fa:9d:83:fa:
9c:ef:38:bf:d0:7c:46:2b:c7:2b:3e:20:d7:e2:1d:
9c:37:fa:d2:14:8f:40:ff:53:e3:c9:63:dc:07:e5:
9d:aa:2a:69:1e:3f:ed:d7:14:92:58:c7:bb:27:d8:
97:3e:40:8a:0d:9f:8f:94:6e:f4:f4:a8:57:ee:c3:
03:35:d7:84:2e:d8:98:4d:f3:02:8a:89:f8:d4:25:
f2:75:6d:14:bd:be:ab:56:63:cd:a8:be:a1:57:28:
b7:a1:ba:55:7f:cd:75:78:f4:78:4f:8c:15:84:d0:
a3:36:cb:84:45:06:77:09:61:c3:4b:ae:94:21:09:
fc:2c:a2:38:bc:a9:32:25:dd:23:db:a4:16:58:2d:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CC:A4:54:39:8C:4F:AF:79:44:59:39:E4:98:08:FE:A2:E7:B8:61
X509v3 Authority Key Identifier:
keyid:80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4e:79:14:ea:8f:3b:70:b7:95:1b:63:dc:74:db:67:c6:80:
25:cb:71:14:6c:f3:b9:10:3a:e5:88:aa:48:b4:9d:f3:5c:26:
4f:cc:83:81:03:1e:3e:15:87:5b:ad:56:e4:15:69:a7:f6:c9:
6d:f3:67:21:b3:e3:e8:8e:95:3d:81:06:a3:2c:12:0f:ea:33:
1d:b6:86:ec:d0:c6:b2:de:a4:2f:8f:cb:62:9f:03:5b:6d:b0:
bb:67:d5:f0:0c:52:44:02:ec:7d:08:2a:eb:d3:57:f8:b9:84:
e0:51:70:bf:c7:56:0c:6c:23:64:ec:ee:8e:31:94:01:b4:24:
67:24:42:d1:4e:34:0d:e8:88:43:65:cb:90:b1:1b:85:56:37:
88:9b:a4:f3:d2:e8:1a:bb:30:dc:96:5f:c0:7a:da:b2:4f:79:
b1:f8:4b:21:9e:d0:99:9b:f2:e0:c5:c7:e4:db:cf:1e:17:d7:
5d:69:18:66:c5:8f:11:c8:69:e2:1e:a7:e5:85:69:9c:65:91:
ac:c7:d2:e3:e8:3e:c0:91:24:9f:c3:13:3e:4d:77:5e:86:ce:
65:38:ff:77:34:67:4c:cb:46:0b:d1:c3:6d:9d:b8:f9:21:68:
1a:0b:46:76:fe:f6:ab:8d:c6:a1:c4:01:c9:18:b8:19:38:09:
32:9d:f9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:46:19 2026 by rpki-client