Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.mft
File: GN3Zj2vDOXdK7q5UcnicQsADEAk.mft (raw, json)
Hash identifier: R+RQ0sStTP2L2teYTyEKEscuXP+PYCKEtlar8CjFmD4=
Subject key identifier: 3B:5E:FB:03:85:22:AA:90:FA:6D:F0:E5:1B:02:41:76:0D:34:16:0D
Authority key identifier: 18:DD:D9:8F:6B:C3:39:77:4A:EE:AE:54:72:78:9C:42:C0:03:10:09
Certificate issuer: /CN=18ddd98f6bc339774aeeae5472789c42c0031009
Certificate serial: 01A0CE5AE5C5660FB136627C6B0E517706C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GN3Zj2vDOXdK7q5UcnicQsADEAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.mft
Manifest number: 96
Signing time: Wed 23 Sep 2026 13:00:58 +0000
Manifest this update: Wed 23 Sep 2026 13:00:58 +0000
Manifest next update: Thu 24 Sep 2026 13:00:58 +0000
Files and hashes: 1: 1-SjSk5srbQUmR71vyugabNrFPhk.roa (hash: 5tKd92URWMi7laCdF3UArKAQG+a0No+/QGtPmeVh8M4=)
2: GN3Zj2vDOXdK7q5UcnicQsADEAk.crl (hash: BwvELbLmaJOCEq+tL97fAmTmzKkPYBcBdp3j16J9ewg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GN3Zj2vDOXdK7q5UcnicQsADEAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:e5:c5:66:0f:b1:36:62:7c:6b:0e:51:77:06:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ddd98f6bc339774aeeae5472789c42c0031009
Validity
Not Before: Sep 23 13:00:58 2026 GMT
Not After : Sep 24 13:00:58 2026 GMT
Subject: CN=3b5efb038522aa90fa6df0e51b0241760d34160d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:d5:35:1f:24:b3:25:17:04:61:a5:de:fc:
1a:aa:a0:25:5b:b0:15:eb:42:d0:0d:9e:91:1c:80:
4b:e7:43:d8:ed:ef:b6:c4:90:a8:39:76:56:db:ea:
9c:f0:9c:a8:6f:c5:10:16:a7:12:3f:17:dd:d7:79:
6a:e7:a0:23:d8:d1:e1:36:34:dc:d2:5d:39:af:9e:
7e:fe:63:7b:7d:f8:54:af:de:de:ec:53:63:22:4c:
cc:29:86:e8:a0:db:8e:6b:38:42:14:2b:53:c5:f3:
33:a3:a3:e8:2e:bf:82:fb:d3:16:47:7d:1f:d7:57:
83:9f:25:8a:a8:fe:66:90:3d:66:9a:8e:58:c2:f0:
16:64:1e:0e:cc:ae:f2:b3:9d:9c:3a:75:af:d1:c4:
8d:fc:9d:41:5c:3d:64:42:80:e0:3d:1a:45:fe:5e:
1a:62:6c:1e:87:c0:fa:b3:6e:d5:5c:b7:75:a3:31:
1f:9a:2d:75:50:31:e2:8a:8e:c4:27:2c:7d:5d:78:
ac:91:b6:8f:06:05:7f:7c:d7:28:8f:c1:28:12:b1:
39:16:d3:36:29:50:98:df:c0:07:df:94:ca:1d:e8:
64:f8:c0:cf:27:9a:08:d0:ad:d2:c8:6d:42:56:bd:
05:f0:1c:3c:f3:f9:91:e9:4b:0a:78:07:b7:64:a1:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5E:FB:03:85:22:AA:90:FA:6D:F0:E5:1B:02:41:76:0D:34:16:0D
X509v3 Authority Key Identifier:
keyid:18:DD:D9:8F:6B:C3:39:77:4A:EE:AE:54:72:78:9C:42:C0:03:10:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GN3Zj2vDOXdK7q5UcnicQsADEAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:57:83:e4:50:fb:18:96:b5:b5:3b:9b:db:ab:0a:fc:e1:8a:
56:5e:d2:04:5d:c9:bb:64:32:8e:73:ce:d9:ec:81:bb:45:c0:
96:91:4e:1a:ed:54:e8:48:28:70:42:44:2d:c5:12:c7:31:6c:
15:6e:25:93:34:fe:39:ed:69:2f:2d:ce:e7:cd:e8:df:f6:ad:
1c:98:89:92:c0:a9:e4:65:9b:8a:d9:a3:63:3f:48:40:af:54:
51:05:db:90:cb:07:5e:72:73:c5:d4:68:43:e6:34:17:04:4c:
c2:c8:34:af:08:aa:54:bd:a2:fa:81:7a:c0:55:51:8b:13:62:
ab:fa:34:08:50:38:7d:b5:d8:fb:0e:3c:33:70:f7:4d:fc:2c:
35:12:2e:9f:89:ac:fb:92:ba:a5:5f:6e:d8:91:5a:68:34:36:
e7:a5:89:91:eb:25:94:69:6a:f4:de:9c:b9:f4:21:92:1f:06:
bf:a8:bd:ea:d9:03:bf:b4:ed:cf:05:2d:09:f3:4f:43:6e:63:
b9:32:6d:a5:d9:f5:e5:b6:23:ed:f7:02:b7:a5:2f:0c:88:86:
cb:30:1a:b3:5b:5b:1e:b3:55:80:c2:1f:88:a9:81:33:2f:41:
cd:70:9b:12:93:dc:dc:39:11:ec:b1:df:6a:b6:10:64:8f:c9:
0a:bd:42:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:51:36 2026 by rpki-client