Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: +XvO/tsIbEgh5zhVeK6UVXr/GyAMsHINBIVqu+h4zFY=
Subject key identifier: 87:9E:EA:10:F3:66:18:ED:3A:59:32:A3:46:00:A9:FE:19:B4:28:4D
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 01A12B0DB106F2FE4E05DC7A60696632E999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 1A9F
Signing time: Sun 11 Oct 2026 13:01:19 +0000
Manifest this update: Sun 11 Oct 2026 13:01:19 +0000
Manifest next update: Mon 12 Oct 2026 13:01:19 +0000
Files and hashes: 1: K4rNlv6gYUKRgIqav4ptqCTSNGg.roa (hash: peGnClYWPqnMOOfi13oSusAgZ5+U+k8ztyI3Zgy/aPo=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: 8tx3t0kgAZLvO+IkwoOe4gLx15QXgptWZKeXAN9sgcg=)
3: zposQW8-Ml33uc3ENu1a83hxjEI.roa (hash: aFqmx16M5gCNIMqJZ5eqfmDRHZVtOgPSXQjK2JfuQ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:b1:06:f2:fe:4e:05:dc:7a:60:69:66:32:e9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Oct 11 13:01:19 2026 GMT
Not After : Oct 12 13:01:19 2026 GMT
Subject: CN=879eea10f36618ed3a5932a34600a9fe19b4284d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4c:5c:bc:a6:c9:c5:77:0b:0f:16:f3:9a:8e:
cb:66:ae:d4:35:4e:e9:f6:55:af:8b:1e:62:b5:91:
44:48:56:c9:e2:f4:c8:f8:57:1c:71:1c:69:4c:30:
40:49:fb:f6:01:30:63:de:68:d1:49:c4:ab:78:47:
aa:8f:7c:97:ff:cf:e9:bb:0b:93:2b:fe:c9:83:c1:
3c:a3:25:bf:bf:5c:d8:5b:f5:62:51:c5:db:52:c2:
c7:c4:24:fd:b4:ee:71:8f:45:19:06:7a:54:71:ed:
d2:8e:c0:33:ea:5a:cc:ff:89:c4:64:7b:5c:a7:ec:
d6:1d:51:d2:74:18:76:b0:09:06:eb:10:fe:43:4a:
cf:c2:f9:53:c0:98:93:fc:94:c6:91:e4:01:0f:e3:
61:a8:30:53:f0:12:0f:85:6d:76:89:f3:fb:b8:b7:
48:d6:88:db:9c:99:52:a1:b4:e6:9c:eb:b2:b6:11:
90:f3:0f:18:70:a3:64:5c:ae:14:90:a7:b8:c0:ef:
46:57:a4:72:a4:8b:6b:e0:ce:ee:95:c0:2e:ff:02:
3e:55:55:8f:2d:2d:c0:5c:05:24:4a:b8:83:70:b9:
e8:b0:53:3a:3c:ed:d2:8c:99:53:a8:af:68:78:61:
58:46:a8:fb:1c:c0:5c:d2:0d:9f:f0:3e:ba:99:63:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9E:EA:10:F3:66:18:ED:3A:59:32:A3:46:00:A9:FE:19:B4:28:4D
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1a:bc:c7:ab:a6:1f:65:c6:f6:b0:4d:76:9f:4c:d3:76:04:
95:d6:12:11:af:6e:28:7e:56:c4:d7:b5:c5:07:05:6e:4a:c3:
e6:a2:c8:86:78:76:e7:ed:18:a3:81:69:e5:ca:ca:4c:50:fa:
57:54:4c:ec:d8:8a:db:7b:d4:dd:da:48:0e:78:93:4c:b4:ab:
b7:34:d4:a9:d6:c3:90:0a:5f:51:73:c4:c7:98:49:d8:80:60:
7d:7b:27:cc:d4:65:5d:de:94:a6:36:9f:b2:6f:a1:2d:c6:26:
e5:f5:fc:67:48:2b:ca:dc:2e:7f:4b:8f:f0:df:06:85:49:08:
d0:b5:43:03:7d:8c:c6:a6:b1:5c:dd:60:ba:1c:eb:4a:14:9c:
d9:f4:2a:99:9b:ab:70:67:49:ac:57:13:95:ce:96:b2:ab:f5:
f8:fa:5d:66:f5:8d:5d:9d:09:83:c8:d8:b7:b4:d3:a0:f2:14:
c7:2e:f3:db:ce:f4:d6:94:db:bb:85:9c:45:9c:ef:3e:3b:19:
86:65:6f:78:2a:e3:92:6d:71:73:e6:60:84:d8:33:69:05:37:
fc:60:22:76:65:86:0e:eb:bf:58:63:1f:f3:88:26:19:e5:af:
91:65:f3:98:3c:37:b8:60:a9:c7:f9:17:65:43:c9:08:97:75:
02:20:93:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:15:29 2026 by rpki-client