Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: fSe4x39K3z0oECo3uy186LW1iOXQBRg/9a8OAjS8CfY=
Subject key identifier: 46:11:E8:05:FF:8D:E9:52:37:09:55:75:4D:04:B3:F3:71:72:77:8F
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 01A0C40D90E96DE031FC363BC9EC978571F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 1A7A
Signing time: Mon 21 Sep 2026 13:00:18 +0000
Manifest this update: Mon 21 Sep 2026 13:00:18 +0000
Manifest next update: Tue 22 Sep 2026 13:00:18 +0000
Files and hashes: 1: BCTCosehzN-IVujDky1DFPEPdk8.roa (hash: dD51Omff3fmTkuQoAW0zLyIe0HD79k7wegGUmnwdJ5U=)
2: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: IObnM4IbV2vsk8z1pBga7RRb2VOS/gpsVBG4PLWViY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:90:e9:6d:e0:31:fc:36:3b:c9:ec:97:85:71:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Sep 21 13:00:18 2026 GMT
Not After : Sep 22 13:00:18 2026 GMT
Subject: CN=4611e805ff8de952370955754d04b3f37172778f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:21:0b:8b:6a:c0:7b:46:50:4c:c4:a5:00:
c2:2a:fe:4e:e6:9e:82:cc:d6:b1:8b:b1:06:07:55:
f8:9b:77:31:e4:1e:45:10:41:89:71:38:07:a7:e1:
23:e4:7d:63:0c:2e:d3:7e:e2:b3:b5:11:7c:01:b6:
50:fd:ba:32:bb:5a:dc:d6:c1:6f:b0:55:c5:ac:70:
33:64:fb:e6:2d:24:37:6a:17:7a:12:17:1a:ae:ed:
73:55:10:73:d4:56:62:5f:b8:de:41:8d:57:1f:3f:
96:ea:81:32:96:4d:e2:72:f1:02:b0:70:f1:9f:cf:
c4:85:cf:8f:cf:6b:78:46:f8:d4:0f:30:86:2d:5d:
0c:8b:29:39:29:60:2c:03:4a:06:71:f3:1c:a0:c0:
16:eb:f1:8d:bf:b8:fc:50:8c:5a:2b:0f:92:cb:ea:
1f:d4:66:0d:da:bb:62:38:82:9a:33:10:62:a6:fe:
98:8a:00:21:ff:a1:ee:ac:82:f9:af:d0:cd:68:1a:
41:9b:51:ac:c6:bc:d6:2e:91:3b:a9:b4:5b:c6:68:
e7:37:4e:ed:7a:80:e5:60:92:f9:10:cf:e8:0c:cc:
26:c3:8c:94:f3:dd:e5:24:8c:e7:88:af:00:e0:93:
3a:c8:a2:51:9a:8b:b4:ce:e8:f0:e0:da:81:c2:6d:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:11:E8:05:FF:8D:E9:52:37:09:55:75:4D:04:B3:F3:71:72:77:8F
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8c:b6:88:44:53:63:9e:0a:4d:6f:cf:dd:dd:e6:e9:c8:d1:
7e:02:28:b6:76:c1:4a:d4:2e:57:d7:58:78:87:1a:5a:c7:c5:
b7:6e:55:e5:eb:bb:51:1d:b7:8c:2a:af:fb:39:aa:56:33:7a:
dd:7b:84:eb:3e:8d:9e:5d:43:d7:48:58:a6:c5:2f:63:cf:a4:
f9:8f:b7:a6:88:5f:a2:0f:c9:0d:43:25:a7:75:ce:82:0f:f7:
39:44:04:81:11:5f:1a:27:59:19:4c:a0:4f:5b:e6:0b:20:3d:
f5:fb:1d:4d:dd:3b:95:69:38:58:6b:1f:7f:32:bb:3a:e6:c7:
5c:ec:3c:2f:11:25:42:f5:f3:69:d4:2a:04:31:ca:99:75:30:
c5:6c:50:d9:a6:6a:34:fd:eb:c7:40:22:ec:d9:15:79:4b:7f:
68:02:fa:14:24:2c:ad:72:07:c1:bf:1f:62:0c:fa:89:91:e4:
d0:04:f0:d3:0f:db:70:1b:c9:8c:b7:30:6c:75:3e:28:23:b8:
d9:33:e2:eb:7c:28:14:00:05:91:6a:dd:ea:1e:b9:27:00:ec:
2c:60:4b:6e:bf:e0:9a:e3:b1:e5:77:3d:2a:9b:70:c9:c4:35:
12:4c:88:d5:91:fe:ef:c2:62:e0:09:43:68:b0:1b:c6:e6:46:
73:87:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:59:04 2026 by rpki-client