Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: n7tjPFYgX26El5w8hvfa4QDLpYsGIXcTlephKC6YYfY=
Subject key identifier: 9C:A3:3F:7A:32:C2:93:46:62:E7:45:F4:C3:17:DE:29:D8:D1:D2:DC
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 01A0CC6BFA1D56DBB294F782BAA74DD29A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 19FD
Signing time: Wed 23 Sep 2026 04:00:23 +0000
Manifest this update: Wed 23 Sep 2026 04:00:23 +0000
Manifest next update: Thu 24 Sep 2026 04:00:23 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: /Q1jh2k7wFtTgdNgLVcylYVNOg5V/dNeuPeecE4kH3c=)
2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:fa:1d:56:db:b2:94:f7:82:ba:a7:4d:d2:9a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Sep 23 04:00:23 2026 GMT
Not After : Sep 24 04:00:23 2026 GMT
Subject: CN=9ca33f7a32c2934662e745f4c317de29d8d1d2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:06:30:09:93:ba:04:3f:92:fd:a6:4a:06:
fb:e9:cb:d8:a8:de:cd:1a:2d:0a:a7:6f:fe:e1:13:
d7:08:45:f4:0b:bb:b6:20:80:be:1a:9f:94:a6:59:
b5:48:ec:34:66:56:86:f6:e2:d1:db:35:24:0c:ed:
67:2b:7f:aa:5a:2a:59:7b:b8:eb:49:8f:56:31:7f:
fa:4c:d1:a7:50:92:bc:98:46:54:0a:26:6b:38:d7:
71:47:3c:b0:5e:f5:0b:26:89:a4:b2:d8:18:71:b4:
d6:eb:14:df:a8:e3:da:70:3d:ab:9d:da:19:ad:1a:
a1:b1:f3:4f:b6:a1:f6:85:6b:7a:49:bf:0a:73:f9:
35:f8:bd:79:bb:8f:d5:57:60:dd:4d:ae:39:61:7c:
af:5e:87:12:cc:ad:4d:22:73:d6:9c:cf:c4:98:7b:
45:73:af:65:1f:21:e2:40:11:67:58:50:01:d4:7a:
11:22:fc:2b:4d:65:c2:c9:b1:cb:3d:3c:bb:bd:b9:
1e:a1:87:66:d9:49:66:85:32:fc:44:94:db:33:e7:
3a:c6:f6:e3:47:3e:b3:dc:9f:2e:0b:4f:20:5e:6c:
13:72:1f:30:9b:4f:b3:c1:9f:79:d6:8d:9a:1a:46:
c0:9c:cd:13:c7:b1:cf:eb:25:38:83:b5:a5:7c:77:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A3:3F:7A:32:C2:93:46:62:E7:45:F4:C3:17:DE:29:D8:D1:D2:DC
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e8:48:ee:32:4a:e1:1d:52:02:72:a9:27:7b:8f:a9:1d:87:
b5:82:d0:b9:4c:af:ee:d9:a4:4e:a1:ba:61:d7:8c:16:97:e2:
7a:3f:0b:27:ac:0d:25:81:48:7d:76:8a:ed:ab:b8:8b:52:55:
e2:b4:0f:5d:be:51:38:6f:fb:18:d9:b4:5f:32:65:f3:5f:3c:
b1:20:2e:bc:21:73:94:36:77:43:29:ef:bb:b9:53:d7:2c:c6:
df:f0:2d:a7:3f:08:5f:6d:0f:12:d1:f4:f5:a3:98:1d:52:10:
c8:80:7d:be:08:4e:59:3b:81:c5:25:07:ce:ad:0e:8e:fb:66:
9f:01:8c:bb:4b:67:9f:eb:7f:9d:1e:f1:71:a6:3e:95:8f:0c:
48:9e:77:7e:f6:34:0f:58:29:f9:23:b3:a0:7c:0d:67:e7:8f:
e9:81:72:c5:95:45:8e:3c:d2:41:f2:85:79:71:1f:5f:72:ca:
7c:1a:51:cf:4c:d0:5c:24:fd:b3:3c:6b:65:f3:e4:87:31:7d:
49:6b:92:63:52:0b:de:85:c7:5f:c9:bb:4d:f3:4b:98:03:14:
1d:6d:9e:e1:13:c2:d9:bc:65:5d:79:cf:55:f2:47:e4:19:23:
c6:24:b5:03:52:e0:25:af:18:3d:56:d6:5a:40:a8:1b:39:d9:
9c:2e:05:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:17:40 2026 by rpki-client