Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: 1Q9Au3x/guC2Jg+mtsKytVQ/Nemr4E/Shujkt94te7o=
Subject key identifier: 60:8E:F9:12:B7:E4:D0:49:0D:4E:DB:72:B4:78:88:53:F5:F2:6E:9A
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 01A0E3D12BEB7097E5732F06FB40B86472C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 1A2F
Signing time: Sun 27 Sep 2026 17:02:11 +0000
Manifest this update: Sun 27 Sep 2026 17:02:11 +0000
Manifest next update: Mon 28 Sep 2026 17:02:11 +0000
Files and hashes: 1: 6K4rT6VCuHtrpHkb6XBvfHzGcts.roa (hash: rcgp9RRt2ZMAtK8hgAgj71whrGluIkO7wLBZN77JUi8=)
2: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (hash: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8=)
3: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (hash: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00=)
4: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (hash: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo=)
5: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (hash: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso=)
6: aLeBPPf7ugWBDmXZtGstFAYR5d8.roa (hash: WCjwJf715go5YX++trIsBUfbf3PUAGqQfhdqAZp7NwQ=)
7: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (hash: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI=)
8: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: AeQMeObIyUuparlE32VsBLQHg5UqwjtxOBQ7ygCL8VI=)
9: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (hash: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d1:2b:eb:70:97:e5:73:2f:06:fb:40:b8:64:72:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Sep 27 17:02:11 2026 GMT
Not After : Sep 28 17:02:11 2026 GMT
Subject: CN=608ef912b7e4d0490d4edb72b4788853f5f26e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:6a:84:a5:5e:b9:ec:85:4c:39:f5:ba:be:
18:77:06:e5:ca:06:05:ca:cf:3f:6a:15:ac:5d:d2:
f6:35:e2:ce:0a:1d:91:3a:58:b3:3b:69:73:9c:35:
02:96:a8:ec:f4:9e:68:f2:58:ce:19:ac:8e:1f:ac:
dc:e6:b2:b5:73:75:ae:91:84:86:a7:b1:b0:97:af:
50:76:85:d8:77:51:be:e4:11:3f:86:86:2c:f5:82:
5a:d9:bd:33:44:da:40:75:d6:60:91:a2:8a:39:b4:
55:db:89:8e:48:07:03:c6:2c:15:48:54:d7:c6:f3:
11:c8:0f:8c:25:43:8f:4b:93:a3:61:ea:7a:07:62:
1a:f8:d7:75:63:44:6f:ae:d5:7d:3e:ee:fd:5d:c4:
91:bd:02:a3:da:16:3d:13:48:75:a8:41:67:6b:be:
3d:47:df:2f:de:3f:8b:25:97:03:30:8a:81:37:8a:
dc:ba:2b:64:ec:46:ba:32:83:56:03:70:4f:84:50:
d5:3c:b7:83:8a:df:8c:3d:dd:09:2e:a9:58:9e:d2:
f3:4a:71:97:14:56:b3:f9:dd:31:6c:7f:08:19:8a:
4a:be:b2:b9:b1:c1:18:4c:56:78:39:1a:62:a7:9d:
13:ae:57:28:26:db:32:74:37:ac:84:6b:54:04:a6:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8E:F9:12:B7:E4:D0:49:0D:4E:DB:72:B4:78:88:53:F5:F2:6E:9A
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:07:f9:e2:93:bb:fe:f6:69:13:b8:68:f6:fc:e6:f2:dd:43:
9f:97:62:15:24:8e:bf:78:f0:10:7b:ca:ce:e0:78:12:cf:a4:
3f:c6:58:31:94:4b:51:02:42:4c:e6:78:ab:f2:db:c3:0f:f8:
83:73:74:18:87:84:98:17:6b:13:3b:ca:49:47:f3:5f:62:d1:
20:04:85:a3:49:11:01:16:32:99:22:5f:4c:ce:94:c2:59:83:
04:9e:6a:7f:dd:82:98:18:ad:0c:d7:4b:3c:25:0b:4a:2d:a0:
75:2a:0b:ec:b7:84:d3:3c:6c:ff:5e:13:02:e5:27:e2:68:3c:
fb:d6:ba:8e:fc:f0:7e:b5:11:2b:4e:e8:f9:5a:cc:01:2d:e5:
4a:c9:60:10:db:f8:74:a4:dc:8d:31:9a:85:63:8d:35:c9:6e:
b0:9b:76:f8:dc:90:55:2a:ce:06:7a:af:c3:2a:d6:93:e3:19:
3a:c0:33:f4:43:ec:2f:c8:93:5b:ca:71:34:e2:7e:43:33:92:
be:c7:cc:8e:2f:1c:f2:13:79:f4:10:64:bc:3a:6c:b1:89:fe:
02:00:02:dd:c8:ba:de:0b:95:80:5e:f3:b1:fc:59:9f:dd:29:
8f:a0:30:c5:f5:ba:c1:69:60:ea:07:46:d4:c2:8e:d7:87:ea:
95:5d:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:34:19 2026 by rpki-client