Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: /c0WAgr/1UvOp2oKvTU9zv6/9BDvPnG55HUP8/tCtio=
Subject key identifier: 63:B1:BF:41:D3:98:67:AF:47:36:39:8E:AE:EF:6F:B8:AC:2E:4A:98
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 01A0EC2EF379880630319D5D06FF3935E7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0C5F
Signing time: Tue 29 Sep 2026 08:01:34 +0000
Manifest this update: Tue 29 Sep 2026 08:01:34 +0000
Manifest next update: Wed 30 Sep 2026 08:01:34 +0000
Files and hashes: 1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: 8Ar5LMfNpjCTlnmR6yU8+n8sjS0E7mphl5vHgiPt6aA=)
3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:f3:79:88:06:30:31:9d:5d:06:ff:39:35:e7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Sep 29 08:01:34 2026 GMT
Not After : Sep 30 08:01:34 2026 GMT
Subject: CN=63b1bf41d39867af4736398eaeef6fb8ac2e4a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:ee:e6:6c:99:30:88:de:91:9e:f9:91:45:
d9:59:91:39:5b:ee:09:05:79:4d:64:c5:ee:24:01:
38:97:60:93:38:55:ef:35:16:12:a2:bc:f5:e9:1d:
f4:ea:da:4f:e6:29:1c:fc:cf:60:1b:d8:3f:2d:97:
f7:b9:79:af:85:dd:a4:ec:e3:e8:45:dc:ac:e3:72:
01:ed:17:ec:4e:07:eb:0d:e6:66:32:1f:79:ae:ba:
f6:6f:9c:0e:95:53:33:be:57:11:6a:1f:b3:e6:11:
ac:5c:02:56:e5:44:c3:ae:1c:de:b7:b9:90:db:0c:
e9:bc:96:1e:73:06:6b:69:53:eb:4f:dc:35:6c:ab:
03:ff:cd:66:d5:83:0e:bb:66:0f:ce:2a:c7:7f:1b:
e5:18:4a:1d:e9:2b:ae:dc:2e:1a:ef:e3:08:9d:a3:
b2:c8:f8:e9:67:73:e5:91:b8:97:55:28:2f:58:6d:
e7:50:74:54:36:92:63:ea:b3:79:9c:be:c2:d7:f0:
07:8c:8a:ba:8f:4e:74:7f:5d:78:ee:2a:3f:bf:1a:
4a:ed:fc:da:24:5b:b1:e2:9a:e7:50:1f:5b:c6:ba:
7e:2f:22:98:d7:9f:9d:7b:af:28:e3:82:e9:74:ea:
08:cd:37:7b:99:f4:f1:99:8e:24:44:d9:15:51:6b:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B1:BF:41:D3:98:67:AF:47:36:39:8E:AE:EF:6F:B8:AC:2E:4A:98
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d7:7b:9a:34:a3:03:97:43:fc:dd:42:ac:d1:71:b8:f5:df:
01:7e:fa:1d:5b:25:91:11:ee:7d:19:da:8e:78:53:0e:78:9d:
b6:85:c4:8b:65:e1:74:0b:fd:9d:1c:b3:b5:c5:b7:d2:d6:b5:
b7:6e:b6:99:b7:61:fc:25:1a:b4:bb:23:0a:bb:06:96:ab:4a:
84:20:55:d4:26:62:6d:30:be:ba:8b:36:87:b0:17:58:b1:e0:
5f:7e:86:3e:52:6b:ab:00:2c:63:6e:d0:62:3e:45:1b:59:a8:
0d:50:cb:1b:83:db:82:c0:d2:4f:60:99:85:c4:62:5b:49:87:
d5:ae:2d:26:7c:e6:b8:de:a0:d5:3a:a8:aa:e3:34:80:52:6b:
42:01:72:b9:74:39:21:02:4d:7c:64:06:02:91:01:7f:62:ae:
49:29:bb:cf:6a:92:fc:6a:b2:57:88:cc:19:64:ed:79:d0:38:
ac:cf:b1:aa:46:9f:83:3b:6b:c8:4a:da:3c:ee:4f:52:50:50:
e2:f9:da:fc:76:7f:ad:bc:53:f2:bd:6b:18:06:0b:cf:7d:e7:
ac:ce:5b:5f:9a:7e:ca:10:54:2a:45:4e:46:f9:d1:95:c7:d5:
9f:dd:a9:e5:61:c5:35:0d:a5:ce:b7:3d:38:84:65:eb:a0:25:
83:b8:07:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:35:27 2026 by rpki-client