Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
File: GifvY687wptvZBikmfAnZKQ4PLc.mft (raw, json)
Hash identifier: Tw/mgCm+w5lS4tUmQjiWPHrNcMcLLvuCdv++tdgKXRg=
Subject key identifier: 3C:2A:74:C3:F9:DE:8A:AB:68:AB:7B:DD:E9:A5:85:D5:9D:7E:21:DA
Authority key identifier: 1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
Certificate issuer: /CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Certificate serial: 01A0C031C09D928216725770B9D2E5A442A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
Manifest number: 96
Signing time: Sun 20 Sep 2026 19:01:20 +0000
Manifest this update: Sun 20 Sep 2026 19:01:20 +0000
Manifest next update: Mon 21 Sep 2026 19:01:20 +0000
Files and hashes: 1: GifvY687wptvZBikmfAnZKQ4PLc.crl (hash: wf3YOYNGHJOW53Z7WrugCfpZsWgzVHUmeiCmoEk/0YA=)
2: UiMf7f5n42zTiPf7IakwvZXEbdI.asa (hash: k2dVGaFmamobcWJoIpqC3rtPtcdg0E13E2589Cu8GUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:31:c0:9d:92:82:16:72:57:70:b9:d2:e5:a4:42:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Validity
Not Before: Sep 20 19:01:20 2026 GMT
Not After : Sep 21 19:01:20 2026 GMT
Subject: CN=3c2a74c3f9de8aab68ab7bdde9a585d59d7e21da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:75:eb:c9:87:92:3a:ed:9d:74:17:69:04:
fc:d6:13:70:0e:76:a9:91:1f:e0:09:c5:84:fd:14:
b2:e3:ca:7e:84:bf:cb:38:f2:ff:28:cc:8c:75:c3:
8c:b9:1d:0b:a3:33:c0:79:bf:c1:58:d0:eb:53:41:
e2:3d:ed:66:64:1c:1f:fa:88:47:57:6e:14:0c:22:
fa:6d:4f:b8:5c:f6:d9:0d:73:3c:3c:b9:fb:a0:54:
98:52:63:5a:12:5e:f6:7e:0e:8d:f5:bf:f5:16:56:
c8:e5:0d:a1:10:44:d5:04:bb:12:9f:5b:96:72:c3:
18:d6:32:7b:7b:ed:08:54:d7:1b:69:ca:d2:59:08:
5d:44:11:38:c7:1f:85:71:37:3c:a8:33:0a:a5:9f:
f0:b7:23:15:48:2c:0b:df:fd:44:13:cc:a9:ce:f1:
ae:d0:ea:34:c4:59:44:e5:1d:9c:68:bf:b6:30:1f:
51:a4:4f:fd:33:a0:d6:6c:04:0c:ab:9f:60:3f:69:
73:38:81:85:9f:5c:2e:9f:b2:a0:9d:0b:6d:2b:d5:
c3:69:68:d6:fc:b0:b3:45:ec:12:db:5f:73:59:26:
f4:b5:b2:c6:99:03:a5:aa:04:ee:1a:3c:69:4d:d7:
b5:0c:cd:ac:c7:f6:bc:d7:21:fe:2b:51:67:99:70:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2A:74:C3:F9:DE:8A:AB:68:AB:7B:DD:E9:A5:85:D5:9D:7E:21:DA
X509v3 Authority Key Identifier:
keyid:1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:82:df:51:45:3d:cd:b9:9b:2d:00:93:0c:2a:8e:f0:d3:d4:
28:cb:05:d9:d2:bf:bf:7d:3b:76:7b:ea:d2:65:e0:73:0a:e0:
8e:0c:4e:f6:23:a4:d3:5c:2d:b2:3f:6e:81:56:bd:2c:be:de:
c3:b0:00:d2:a0:58:e0:d7:a3:f4:fe:27:49:32:85:18:9d:68:
13:ed:21:d4:08:e2:cb:33:c0:cb:db:a4:4e:ef:c8:cb:a6:62:
53:35:6e:ed:61:69:e0:19:47:ff:c9:f5:33:92:af:19:cc:52:
76:83:31:de:46:1d:2d:28:a6:5b:05:ee:d2:dc:53:5d:c6:fa:
61:6d:13:2d:fb:fa:98:6c:c8:e6:1f:ca:09:60:0d:0f:0b:0e:
d7:da:07:ba:20:aa:49:45:e9:8e:c4:70:07:1e:2e:3a:5b:85:
e1:16:62:87:f5:03:03:a7:9d:29:e7:99:ec:8d:3a:43:02:28:
c2:88:85:c7:3f:15:4c:92:66:85:91:df:65:ef:ec:38:42:40:
2c:21:d1:58:e5:a4:d8:8b:bc:ce:0f:ab:52:b2:a7:0c:be:29:
58:fe:79:23:08:3d:67:07:26:21:61:c2:5f:2c:9e:fe:a6:33:
e1:01:d0:24:2b:d7:5b:1e:b2:ed:85:49:78:25:66:d3:bd:7b:
35:db:39:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:06:58 2026 by rpki-client