Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
File: gP-4grVdAkWUCj414a3dU6esf-Y.mft (raw, json)
Hash identifier: O4KPeUD0n+kLK40WNSMxwTP+etHm+uz01cLw4tmosU0=
Subject key identifier: 9C:1D:03:F2:71:E8:D4:05:49:78:F2:2B:99:7B:3A:DC:78:00:16:D4
Authority key identifier: 80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
Certificate issuer: /CN=80ffb882b55d0245940a3e35e1addd53a7ac7fe6
Certificate serial: 01A0D682A4BA2BBAD2565FA2A843BC727EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
Manifest number: 02BE
Signing time: Fri 25 Sep 2026 03:01:21 +0000
Manifest this update: Fri 25 Sep 2026 03:01:21 +0000
Manifest next update: Sat 26 Sep 2026 03:01:21 +0000
Files and hashes: 1: gP-4grVdAkWUCj414a3dU6esf-Y.crl (hash: Pi5oVYH7R5jaAf63ST6XUa/MEVv4mC0Qt9/PGrBaV8I=)
2: ghkZqiRBYP7F8aWdqRde-YlWVwI.roa (hash: D1th9djUsHfufM7g4Iy1vOHC4rWVpb4G82R0TUpgdcQ=)
3: uwzrkDAt1bWbxPHQL77n6ueMwTQ.roa (hash: v6tCrn+4VuGO560AfCeDjuj3YGlPBrSypyg+OiqsxoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:a4:ba:2b:ba:d2:56:5f:a2:a8:43:bc:72:7e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffb882b55d0245940a3e35e1addd53a7ac7fe6
Validity
Not Before: Sep 25 03:01:21 2026 GMT
Not After : Sep 26 03:01:21 2026 GMT
Subject: CN=9c1d03f271e8d4054978f22b997b3adc780016d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:c1:e5:ca:d7:55:1d:d7:21:62:01:f6:1c:
fe:12:2b:23:2d:bb:e4:6b:92:52:61:16:7a:56:cf:
6b:10:d9:30:93:42:ec:86:39:11:eb:e3:c5:18:0a:
2e:34:c9:cb:10:b6:6f:04:a0:17:80:50:18:11:a3:
43:1e:2c:8f:26:fb:31:19:93:a9:8f:d3:92:12:ca:
5b:8d:0e:3d:fb:1a:3a:ac:d8:33:85:c2:6b:58:ec:
cf:01:15:cc:da:29:37:36:b4:78:93:2a:82:bd:03:
c9:ca:8b:c7:31:17:40:6e:eb:f8:0e:4d:9a:24:be:
69:e8:38:63:9d:7d:a5:f4:a1:62:00:d1:16:04:a7:
20:74:72:77:2e:71:39:81:ac:89:aa:6d:ac:1a:1d:
56:14:de:13:03:b4:ac:51:3e:e3:40:54:a6:db:93:
d6:ed:34:49:0a:d0:28:04:25:d9:8d:24:9b:d2:1a:
d1:a5:52:b9:7c:9a:3f:35:d4:e2:eb:ab:78:fb:01:
a8:97:33:0c:68:ef:c3:15:75:6b:da:26:5e:2a:7d:
09:1c:f1:78:35:60:51:5d:84:0a:a2:05:d0:7e:e1:
75:37:f8:16:dc:19:3f:58:93:d4:1d:47:20:06:c0:
82:82:53:1b:2e:8a:02:7e:ce:f9:fc:ef:d0:02:6d:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1D:03:F2:71:E8:D4:05:49:78:F2:2B:99:7B:3A:DC:78:00:16:D4
X509v3 Authority Key Identifier:
keyid:80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5c:fb:9e:ce:6e:9d:3c:cc:1b:a6:fb:dc:45:7e:f3:45:a4:
00:81:ad:0e:d4:b5:72:bd:4c:22:ac:07:c0:80:73:0d:35:9d:
bb:07:d9:2a:01:6c:90:57:a8:e9:dc:7b:36:f7:bf:43:45:7c:
87:dd:4f:40:30:9b:e7:06:0e:b2:e6:eb:4f:11:5f:65:9f:b0:
d8:4b:f7:90:a9:24:52:2e:96:d0:82:da:b4:82:18:d4:86:46:
ff:09:d0:d7:4e:5a:bc:c9:66:ee:e1:40:28:31:30:cf:86:9e:
a6:a5:90:9c:31:12:5f:3b:02:55:ca:dc:5a:10:71:83:bc:95:
79:2f:6c:8c:f1:26:00:d1:bd:5d:10:66:f4:94:82:4d:bd:73:
f6:56:b8:71:40:4f:bf:1a:d9:c2:77:cf:c3:b4:8a:e1:2b:f1:
08:0f:8a:a8:8c:12:5d:46:bf:87:89:4f:f5:6b:bc:dc:d3:4f:
16:51:b0:b2:0c:1d:3e:f1:4a:91:5e:57:6f:70:b9:69:0f:37:
7a:20:3c:6d:5c:55:1d:8d:aa:ab:c3:91:76:0b:10:1a:8a:1c:
62:f0:0b:4b:96:d3:31:39:b9:12:d2:16:fa:22:7e:4b:a5:13:
cd:c3:63:20:6f:2a:37:23:2b:1c:b8:8e:35:ba:58:fd:11:fe:
b4:0a:c4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:10:37 2026 by rpki-client