Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: VgGnbTN87hu+5oKyFRY8PbCjHthVznkr0v3KStcCvcA=
Subject key identifier: CF:51:AD:1E:7C:04:94:77:17:C9:7C:D1:B5:23:26:99:A5:9D:13:61
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 01A129C46F99C4ACF9C93673477258ACB362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 124B
Signing time: Sun 11 Oct 2026 07:01:41 +0000
Manifest this update: Sun 11 Oct 2026 07:01:41 +0000
Manifest next update: Mon 12 Oct 2026 07:01:41 +0000
Files and hashes: 1: 9PZjCn76gwRRUpq9MvbclVXkdOU.roa (hash: CaqNlJNQ1Ni2aWKqDPfoQcAYDuSQhepNqZ+uo297E2U=)
2: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: w6mec7DUs4RG34d8TPN3tZO6y47frIdL5bYrECA92O4=)
3: ur76ehndzl2-pGTHmrbh1qcAWBI.roa (hash: Sb+oNrAUwZsJERFHDlGdgS7sblzKLRz12cNiy1csEgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c4:6f:99:c4:ac:f9:c9:36:73:47:72:58:ac:b3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Oct 11 07:01:41 2026 GMT
Not After : Oct 12 07:01:41 2026 GMT
Subject: CN=cf51ad1e7c04947717c97cd1b5232699a59d1361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:6e:99:04:13:44:3e:be:75:9a:c2:13:82:
4c:3a:6e:ba:bd:cc:8f:92:d8:35:27:f5:00:00:6e:
d1:fd:76:1a:db:15:44:ab:7a:d3:87:2b:fe:df:23:
98:ce:4b:3d:ae:92:ce:f6:d7:49:3d:fc:9b:17:31:
f3:3e:9f:72:7a:11:6c:f3:6b:11:e9:c9:dd:d9:f7:
c4:fa:fe:70:e9:21:b3:db:04:84:51:6d:cb:87:ab:
31:c9:72:e7:a8:33:91:3c:ef:e5:79:95:49:b3:da:
3a:fa:16:14:72:2a:cd:d8:38:25:e1:19:53:6f:19:
d6:9c:ef:12:87:52:c4:dd:cd:c7:a2:92:62:b2:83:
ac:4c:73:e9:4c:3a:eb:29:55:a6:de:40:97:82:56:
ed:4c:4c:bf:89:8c:c7:3d:50:c7:a0:49:07:6b:12:
c7:79:12:ef:40:8c:89:a4:e0:72:3e:75:90:7f:f9:
7b:28:01:4b:f5:b7:0d:79:3d:c6:14:3a:66:c0:44:
6f:01:0e:fe:07:e7:29:ff:fc:31:53:6a:b4:d8:36:
8d:1f:73:77:85:2c:fc:c6:37:3c:3f:50:18:cc:63:
8e:43:be:cb:6e:5a:7d:b0:26:67:26:c1:ef:85:9b:
76:42:86:b2:95:36:40:c2:14:a5:db:ac:44:a6:76:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:51:AD:1E:7C:04:94:77:17:C9:7C:D1:B5:23:26:99:A5:9D:13:61
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a9:49:2c:bf:00:6d:cb:0e:51:b4:79:67:fd:2f:e0:c8:b4:
1e:26:b4:02:86:e1:8d:48:0a:a3:6d:de:6a:92:56:75:48:bd:
f3:25:aa:93:8c:9a:c1:cc:40:a3:2f:a9:d3:7b:8d:b2:d4:d2:
89:0e:26:5e:33:df:c2:a1:57:85:10:cc:ec:78:21:4c:0c:cd:
54:3d:4d:94:18:ac:11:ae:00:5e:2e:17:84:32:e3:19:ed:1f:
7b:7f:2d:52:b6:c2:75:0f:24:73:a8:83:92:94:88:0b:84:c4:
fc:68:4a:20:9e:94:06:15:8f:22:77:44:8f:61:68:99:44:b7:
53:5a:4d:6d:b4:b5:84:2d:7a:ca:6e:d9:e4:b4:27:b1:8b:cb:
56:08:ba:5d:e0:77:da:24:b2:02:43:d0:0e:ec:9f:3e:12:5c:
6c:f2:39:7c:d9:92:b0:d6:46:ac:5b:15:4d:6c:2c:0f:2e:bd:
45:61:b4:6e:25:64:a1:68:3f:a5:a0:01:7b:5e:1a:74:f4:79:
0a:f2:11:13:bf:e0:e2:8e:a2:dc:d4:b6:7c:b3:67:76:67:1a:
3a:ec:ea:52:a8:34:c8:74:94:fb:9d:3e:42:f1:57:0c:a3:d9:
c9:2a:cc:ee:9f:49:21:b5:25:a2:ae:7d:65:4a:ce:42:8b:85:
f5:ba:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:37:49 2026 by rpki-client