Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: uMIbszOwFeNLj/eODPEMkvrdE531W2hHFiY8TWc6syo=
Subject key identifier: 02:FA:DC:1F:67:86:D7:E3:74:1A:70:00:43:1D:CC:5C:DF:48:27:79
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 01A0D1920A3445D10A9FEC55962150BF4D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 0B47
Signing time: Thu 24 Sep 2026 04:00:03 +0000
Manifest this update: Thu 24 Sep 2026 04:00:03 +0000
Manifest next update: Fri 25 Sep 2026 04:00:03 +0000
Files and hashes: 1: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (hash: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: GDR+fcBnJ7OA3U00JF6PsZvInyrw3UOA70/25It+D6g=)
3: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (hash: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY=)
4: XtW69XYWfcYs9FhfW77svXCHmQk.roa (hash: +2PiuVV/xd9FID0vQ4PS/1nWqfCBv4fOx6GV++A7pIo=)
5: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (hash: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:0a:34:45:d1:0a:9f:ec:55:96:21:50:bf:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Sep 24 04:00:03 2026 GMT
Not After : Sep 25 04:00:03 2026 GMT
Subject: CN=02fadc1f6786d7e3741a7000431dcc5cdf482779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:27:e1:ef:f3:3e:8c:fc:e4:8d:da:90:77:98:
b0:c0:f9:bb:39:4d:26:36:88:6f:99:09:ea:4e:12:
30:0b:3a:dd:24:a0:c2:31:96:30:aa:d2:46:23:e1:
cd:b0:e6:5d:76:d3:fb:64:cd:68:c4:84:1d:f5:70:
b6:69:4c:17:a0:47:67:3d:1c:32:26:31:a7:40:f2:
87:97:10:0c:6d:5b:32:a1:b8:05:93:6f:ba:6b:8d:
22:72:f9:bb:08:be:0f:d2:e0:b3:c0:56:fa:67:3f:
ba:c3:33:96:2a:61:7c:a1:7b:78:e0:28:6e:2f:04:
4f:19:52:bd:b8:5b:8b:99:78:55:d1:52:a4:41:08:
84:6e:0b:18:ea:75:dc:1a:5c:1b:6e:a7:ad:e9:42:
ea:b4:77:6a:f0:ac:b7:a0:38:ea:f2:6b:8b:72:56:
63:89:01:1f:c8:94:b1:7b:72:71:1e:7b:1f:2a:00:
54:57:d4:1a:2f:54:8f:cc:f7:6e:f4:a1:7b:1e:c0:
63:c4:4c:85:92:2a:11:1e:ff:b7:24:b6:8c:a4:5a:
0d:fb:85:74:b6:6e:25:e2:ba:90:d2:ce:49:55:23:
84:be:5c:0a:75:d4:b7:a9:5b:ac:28:b3:c0:d3:35:
0b:c3:33:f3:7f:54:a8:fc:91:ba:88:72:fd:12:a5:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FA:DC:1F:67:86:D7:E3:74:1A:70:00:43:1D:CC:5C:DF:48:27:79
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5b:1a:c2:34:7a:2c:08:ce:23:26:fe:50:42:ca:62:f1:f9:
76:88:93:13:a6:e4:ae:03:4a:31:fb:ac:a8:f1:c9:c6:e4:ce:
40:a6:d6:a1:4a:df:8a:82:23:e9:99:fc:ff:c9:fb:20:3f:47:
03:7a:83:eb:15:44:55:de:bb:b8:b9:91:7a:79:c1:87:97:2a:
2c:80:fe:05:c2:03:d5:4d:46:65:83:82:43:4b:43:77:ec:d2:
3c:9a:ed:9c:90:65:aa:de:bd:c0:cf:9b:4d:f8:37:e7:d7:77:
57:31:3f:e1:7f:08:28:4a:da:f2:6f:a4:f9:f1:53:1b:b9:e3:
20:88:a0:d1:ae:81:1d:46:42:d5:e4:e7:e0:51:aa:97:97:e7:
43:ae:7d:12:a7:17:e0:50:c1:93:ec:ea:2b:b6:c1:c6:f7:05:
8a:86:37:f5:9b:41:b9:45:43:be:22:2e:f3:43:90:d2:2e:c5:
1e:76:18:4b:18:21:41:20:b7:cf:26:48:e8:c7:50:2a:31:6a:
ad:5a:7b:fd:9c:54:61:61:66:9f:c6:24:92:13:9e:d0:93:30:
12:7f:30:08:c1:8e:c5:f9:ef:4e:4b:9c:b3:16:01:85:79:9d:
d0:66:ef:07:22:be:b2:b0:53:8c:2b:2b:b7:b9:78:f2:f7:86:
6a:d7:71:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:37:40 2026 by rpki-client