Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
File: gtiJtzM2c4evJNBuf5IeHrwOjMA.mft (raw, json)
Hash identifier: vFxIwY1kBHOA646hhWuxMyGTnHtp6BMt/OnEY9f+zgw=
Subject key identifier: 29:2A:20:E7:90:80:81:FC:0C:28:B8:38:1A:77:04:D0:2C:CD:70:77
Authority key identifier: 82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
Certificate issuer: /CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Certificate serial: 01A0C47C456F6F10E2DC1B5D4CC5104B75FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:01:13 +0000
Manifest this update: Mon 21 Sep 2026 15:01:13 +0000
Manifest next update: Tue 22 Sep 2026 15:01:13 +0000
Files and hashes: 1: Ivo9foptlHgZGm6u5gb6QwW3XyE.roa (hash: 2DKjAU7c2CAk3rfklrUELipPt0YMxIA0kvbW1SiZbks=)
2: bd0fr_kRPnaKLvLN9ZpO5e3Kz2I.roa (hash: WDxxU0O54RTfygWfLBj7mncB1ZZMMpBFwyQajkCAytc=)
3: gtiJtzM2c4evJNBuf5IeHrwOjMA.crl (hash: A5ZXQs6MaQh5ohCaxmqibdy/Gkg3c5mh0qOTcM0jbtQ=)
4: i_5GgFY65mhct5XMfGA2cRGx7lE.roa (hash: u8f3lfAClBezvakZmVD5y6jZdKYCu72g+x8pASRVo2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:45:6f:6f:10:e2:dc:1b:5d:4c:c5:10:4b:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Validity
Not Before: Sep 21 15:01:13 2026 GMT
Not After : Sep 22 15:01:13 2026 GMT
Subject: CN=292a20e7908081fc0c28b8381a7704d02ccd7077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e6:7f:0f:9d:39:bd:a8:89:65:23:f4:f6:18:
8a:8a:6c:d3:a7:10:c4:9d:45:94:65:87:c0:74:ce:
4f:2c:1d:9e:b3:d8:e5:be:52:ef:21:26:2a:12:c0:
49:56:3f:f8:c2:dd:3e:d8:dc:0b:5b:f5:7a:10:dc:
3f:91:c0:59:75:38:b9:d2:c1:38:b9:bc:90:40:4c:
83:f0:8a:a7:90:ec:56:14:0c:c7:08:76:74:3c:50:
76:ef:51:a2:74:77:0f:74:09:3c:89:54:06:8e:1d:
2b:ad:f6:b3:2b:5b:e2:56:ef:a8:35:84:5f:ca:f6:
68:ab:a4:50:92:3e:34:f0:bb:ea:01:75:39:7d:6a:
95:58:8d:b6:68:eb:1c:f0:d3:7c:86:a1:b8:d9:e3:
4c:36:6b:94:5b:dc:44:3a:95:23:da:e3:b0:df:2d:
83:74:89:6e:9c:b6:43:3e:0b:66:96:a0:39:a7:24:
3e:2c:29:3f:0d:d3:9f:48:81:de:26:1d:76:45:5f:
a4:c7:f3:b6:0d:48:0a:b1:86:8e:0a:cd:e6:c0:02:
e9:c2:07:59:37:09:63:2b:0b:d8:cb:40:4b:bd:45:
d7:6b:1d:8f:d4:85:86:1b:56:77:7d:cd:07:f6:35:
d1:c0:b6:44:4f:a5:ac:a9:6a:d8:63:e0:22:91:22:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2A:20:E7:90:80:81:FC:0C:28:B8:38:1A:77:04:D0:2C:CD:70:77
X509v3 Authority Key Identifier:
keyid:82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:ab:0c:96:90:56:90:db:18:76:fe:32:b8:6b:20:85:42:9d:
07:5d:82:94:5f:93:d3:b5:c2:b3:4c:ad:8a:d1:da:fa:17:3d:
c1:0c:25:4e:11:18:64:15:f2:76:74:4c:a9:90:bb:10:9d:1b:
31:7c:fc:0d:2e:8d:b0:63:73:fd:1d:6b:62:ad:d8:0d:2b:53:
76:a9:02:ce:5f:c3:dc:3e:06:07:5b:95:75:db:d0:64:73:7d:
c3:3c:30:b5:4a:38:b1:0d:7a:53:a9:b3:ee:59:c6:3e:5e:85:
ba:78:55:10:9a:65:17:1e:20:77:40:24:a8:56:aa:e7:62:bf:
3e:fc:68:77:21:e0:ec:3b:3b:f8:6b:5d:c7:52:89:ea:6d:33:
42:ef:a0:ee:88:b7:c1:10:45:f0:d0:87:55:de:4f:62:8d:dd:
67:18:e3:98:f9:46:45:95:bb:56:56:66:6c:71:f8:1d:9d:82:
5f:c7:c8:4f:09:b8:63:08:e8:e8:6d:ef:cc:56:cf:43:7f:df:
c0:33:f8:fe:0d:82:50:ae:bf:f3:09:89:9e:2f:28:a0:ea:bf:
9a:02:f8:61:bd:0d:d1:68:83:50:fb:6b:73:a0:52:bb:f7:bb:
57:92:c7:30:54:54:a9:10:0e:1e:b5:3f:3d:f5:04:af:2e:cd:
e8:c6:13:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:19:23 2026 by rpki-client