Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.mft
File: gnff8FJ6VIBMlJwPjutSh2LhECY.mft (raw, json)
Hash identifier: UwlTcds4GNNbQa4t+uDSRBtLbRAUJfJpZYXxByGmNOA=
Subject key identifier: 66:22:E3:1E:81:7A:B9:81:0F:79:38:1F:19:38:D1:A6:AB:73:FC:A5
Authority key identifier: 82:77:DF:F0:52:7A:54:80:4C:94:9C:0F:8E:EB:52:87:62:E1:10:26
Certificate issuer: /CN=8277dff0527a54804c949c0f8eeb528762e11026
Certificate serial: 01A0CA47AEB805F0F2E4D1EE0390E71DA1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnff8FJ6VIBMlJwPjutSh2LhECY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:30 +0000
Manifest this update: Tue 22 Sep 2026 18:01:30 +0000
Manifest next update: Wed 23 Sep 2026 18:01:30 +0000
Files and hashes: 1: gnff8FJ6VIBMlJwPjutSh2LhECY.crl (hash: oi7TceKCXIdNsf3KFsfv/KqIUBHaPhlyg7ZfVhmJcq0=)
2: grPgsj_U_QGRTfB7WZEK8rXUTd0.roa (hash: UpluOkz2vEurspkOMoiPumwTMZrbSQWruSNQMoyw1xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnff8FJ6VIBMlJwPjutSh2LhECY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:ae:b8:05:f0:f2:e4:d1:ee:03:90:e7:1d:a1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277dff0527a54804c949c0f8eeb528762e11026
Validity
Not Before: Sep 22 18:01:30 2026 GMT
Not After : Sep 23 18:01:30 2026 GMT
Subject: CN=6622e31e817ab9810f79381f1938d1a6ab73fca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:fc:ee:06:71:8b:af:85:ac:b2:c0:90:93:
53:0c:8c:a0:20:23:87:be:0b:43:bf:1a:84:bd:d6:
44:02:ad:e7:db:84:03:99:ac:e3:23:60:d0:4c:a6:
6d:b4:4c:79:73:fb:04:0d:04:cb:ab:ea:41:f1:95:
8b:45:ed:3e:44:27:fa:21:52:d0:05:0b:3c:26:f6:
66:6a:f1:53:97:23:f9:70:8d:02:a8:36:38:b2:f8:
ab:35:eb:84:88:ac:cb:53:78:80:b7:e0:f7:97:37:
06:dd:72:2f:f8:14:0c:40:7c:b5:f5:c0:84:cb:a8:
48:96:e9:3b:35:46:a7:7f:bf:70:76:94:9b:5a:eb:
d9:f9:33:a1:dc:09:95:81:e6:08:88:90:3f:d9:f6:
ce:55:20:03:97:21:25:ea:16:6b:63:d7:ab:cc:1b:
bd:d2:eb:66:5f:77:2d:a9:7e:17:89:05:3d:34:2a:
4f:ce:9a:4a:7e:35:4f:c3:11:c1:ff:4d:3b:23:f3:
5b:62:44:1a:d8:b7:00:38:2d:d9:9c:bf:fb:40:35:
ee:49:c7:0d:ee:1d:28:22:bd:36:4b:69:52:94:23:
5c:50:4b:1e:2b:58:4c:3a:a6:9a:74:ea:c9:2e:05:
d6:26:d8:af:8f:11:96:0a:ae:da:84:aa:01:77:46:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:22:E3:1E:81:7A:B9:81:0F:79:38:1F:19:38:D1:A6:AB:73:FC:A5
X509v3 Authority Key Identifier:
keyid:82:77:DF:F0:52:7A:54:80:4C:94:9C:0F:8E:EB:52:87:62:E1:10:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnff8FJ6VIBMlJwPjutSh2LhECY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cb:df:df:51:d3:f0:5a:3f:92:00:33:57:04:25:6e:0c:d3:
f9:bc:42:47:28:ff:1b:a7:a8:d5:27:b8:53:6d:19:fd:64:46:
47:31:8f:fb:cb:ec:ee:5b:2b:d4:b2:13:95:79:e5:3b:ea:1e:
e1:60:0f:44:de:e9:2e:2a:07:d0:76:98:72:e4:fd:fc:6a:24:
a3:4d:28:35:b8:87:00:27:8a:9a:75:42:d3:70:8e:7e:05:65:
84:a8:b5:bb:ce:41:c0:e8:6b:21:90:2b:4e:ce:60:9a:cd:d7:
77:c0:7b:d7:b1:78:b4:db:cd:7b:4b:96:e3:d2:92:bd:db:04:
0f:f1:1c:a6:db:a1:50:0d:b1:e2:63:17:d4:5a:7b:01:60:17:
20:4f:fb:ca:c3:33:46:4a:64:93:81:f7:99:49:86:b5:36:00:
0c:de:64:2b:26:16:07:fd:2e:2c:ee:6e:cc:e4:ef:11:fa:8a:
22:74:c2:a6:a0:47:d2:bc:83:71:26:7d:17:e0:f5:07:8f:4c:
37:7c:43:1a:74:d6:b7:c0:b0:3e:1b:d0:88:7a:84:55:02:fb:
dc:9b:3d:e6:31:2e:f9:af:99:66:94:ca:10:2d:11:6f:9f:a5:
f8:47:24:b2:61:7d:00:39:30:1d:36:4f:7f:17:2b:95:50:88:
cb:94:4e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:44:21 2026 by rpki-client