Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: 44ArXQCYoJUQy4pfkHXc6To9Mhsn8kAQe5s+vGBC4fE=
Subject key identifier: 68:1F:68:C9:33:81:BB:E6:12:53:51:BE:FD:7D:E3:2F:EA:89:E9:75
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 01A1291EF70F6683EE0A62528D5B9B6832CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0DDD
Signing time: Sun 11 Oct 2026 04:00:57 +0000
Manifest this update: Sun 11 Oct 2026 04:00:57 +0000
Manifest next update: Mon 12 Oct 2026 04:00:57 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: UDW8Db/fheUp/8kMZSjgsFBfNtdV47McX9wmAaeKcMk=)
2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1e:f7:0f:66:83:ee:0a:62:52:8d:5b:9b:68:32:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Oct 11 04:00:57 2026 GMT
Not After : Oct 12 04:00:57 2026 GMT
Subject: CN=681f68c93381bbe6125351befd7de32fea89e975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:4d:2b:4d:d1:07:45:9b:b8:fc:d6:30:bd:
da:ab:33:02:c8:fb:5b:db:bb:a1:5e:55:a1:68:80:
a2:fe:c5:0d:f1:6e:c5:29:8f:9d:f1:b1:29:fc:3b:
39:9d:e6:b0:54:21:da:4d:13:5b:68:af:11:fa:3c:
97:7f:fc:7f:56:1c:57:84:d0:59:2b:eb:40:70:57:
4f:e5:80:14:7d:24:34:4f:04:14:41:5b:74:f1:bf:
69:50:57:1c:65:3e:78:f7:8e:6a:ed:68:cf:ea:22:
88:da:47:bd:58:9f:8e:c5:ec:72:e7:ae:3d:ab:23:
15:af:6c:5b:37:0d:6d:0a:48:35:84:8d:df:ae:6e:
c1:0e:ac:f5:2b:43:d0:77:bc:47:a6:6c:8b:40:6d:
cb:c4:7a:f7:ce:01:84:d6:65:29:80:17:c5:e1:4a:
3c:79:43:55:62:0d:30:eb:41:b6:d8:1f:df:2c:c3:
ce:c6:ab:d1:85:92:05:46:f5:ac:99:ff:a6:0b:58:
49:21:9d:4c:34:0f:c1:56:69:de:ca:ef:81:5c:ee:
a9:12:5e:2a:f0:8d:10:58:c1:f0:ee:14:f1:1f:31:
cd:46:a7:03:c1:63:c4:83:30:70:61:e2:ad:6c:65:
7c:85:e2:e6:26:43:09:63:84:84:ef:e9:31:f4:66:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1F:68:C9:33:81:BB:E6:12:53:51:BE:FD:7D:E3:2F:EA:89:E9:75
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:03:94:7f:ca:e8:ab:05:23:3d:48:5d:b0:21:26:77:45:ad:
80:26:26:e4:5c:f6:06:0b:b7:63:00:9d:c8:d0:86:1c:5a:d6:
9b:f7:6f:93:06:7a:1f:b4:78:12:7b:bb:4a:d8:ff:8f:32:b6:
2b:5f:8e:f2:5f:67:bb:58:3d:61:33:17:22:e6:78:6e:4e:e2:
a9:2b:9e:b3:65:1b:36:17:26:9b:09:2c:0b:9e:e8:27:48:21:
24:89:28:4b:61:19:bf:43:c6:67:16:76:ee:c6:df:28:a8:ac:
2e:61:3a:88:15:f7:09:ee:a3:cd:11:6c:4d:6e:c5:61:d4:25:
4c:88:04:a6:2c:76:2e:39:1c:64:f8:c4:de:d9:c8:15:c2:97:
40:fe:fb:ec:ec:13:26:57:97:86:73:6c:51:67:65:47:c0:56:
00:c9:6f:52:39:56:91:09:8f:af:41:ff:f2:86:e8:f1:30:05:
13:db:60:7c:00:00:07:06:a6:ca:42:78:4c:b4:c8:10:18:86:
a0:66:ee:d7:83:30:be:3f:a8:1d:2c:9e:3e:4a:05:77:78:b8:
65:5d:bd:d1:ce:f4:71:2a:31:b9:2b:e2:48:cc:fb:cb:ca:6e:
66:d6:e2:15:3a:09:23:7d:8a:d3:97:73:f4:69:3c:c3:ed:40:
98:5b:4e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:14:31 2026 by rpki-client