Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
File: GifvY687wptvZBikmfAnZKQ4PLc.mft (raw, json)
Hash identifier: NZRUQSbB8ekGORaDhTSxOBGQjmSBjeztEBX4/0lIhs8=
Subject key identifier: F8:8E:55:C7:52:55:4E:0D:2B:ED:97:0A:EE:16:EF:18:96:77:65:01
Authority key identifier: 1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
Certificate issuer: /CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Certificate serial: 01A0C40E7E27D24D7E86F760C72B96DBE2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
Manifest number: 98
Signing time: Mon 21 Sep 2026 13:01:19 +0000
Manifest this update: Mon 21 Sep 2026 13:01:19 +0000
Manifest next update: Tue 22 Sep 2026 13:01:19 +0000
Files and hashes: 1: GifvY687wptvZBikmfAnZKQ4PLc.crl (hash: NarstKn6jbGL48N6y568Kp7SdTMcQ0lpLDXwOJ+a3rg=)
2: UiMf7f5n42zTiPf7IakwvZXEbdI.asa (hash: k2dVGaFmamobcWJoIpqC3rtPtcdg0E13E2589Cu8GUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:7e:27:d2:4d:7e:86:f7:60:c7:2b:96:db:e2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Validity
Not Before: Sep 21 13:01:19 2026 GMT
Not After : Sep 22 13:01:19 2026 GMT
Subject: CN=f88e55c752554e0d2bed970aee16ef1896776501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:2d:e0:f0:df:14:54:65:7c:ed:2d:36:77:
13:68:ef:c0:c3:d2:d3:39:63:48:c6:d6:ef:8f:54:
03:31:21:a2:a4:a5:7d:c2:f5:50:72:08:a6:b0:b5:
10:64:83:d0:a6:92:68:4a:e0:ca:65:d0:1c:02:8a:
76:33:00:34:82:00:91:a0:10:79:0f:ac:ad:43:ae:
cd:a6:51:2c:b1:0d:2c:5d:b9:e9:e2:f2:61:d1:25:
23:b4:9c:ca:1c:3c:67:d7:fd:a1:ff:38:ff:e3:16:
6e:7b:8d:f2:90:bf:81:91:03:d8:af:7a:b4:7d:db:
19:87:b5:ce:15:d0:dd:df:16:07:aa:0a:2e:2b:ca:
7f:4c:d7:05:ea:1d:d5:1c:ad:5c:4b:39:0b:7d:23:
35:04:da:cd:46:41:98:29:61:87:18:be:aa:e8:ef:
f4:39:f5:9e:1d:23:32:34:84:60:3e:69:cb:2f:29:
4b:06:cb:9c:34:5f:9d:36:a3:75:91:20:8e:46:df:
55:62:58:f9:eb:ee:4b:05:77:78:ae:10:80:1b:7b:
bf:51:4a:33:b3:8d:f3:3b:9e:3e:3b:83:d0:61:d5:
fa:6b:81:64:24:79:cf:8d:29:55:dc:50:d7:e8:44:
2f:4e:08:ee:6a:12:03:4f:8d:f3:d0:55:ef:c6:6c:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8E:55:C7:52:55:4E:0D:2B:ED:97:0A:EE:16:EF:18:96:77:65:01
X509v3 Authority Key Identifier:
keyid:1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:81:58:f7:10:32:41:d1:a8:0e:a7:7d:61:80:a3:02:8a:c9:
45:ac:21:f8:e5:98:a8:9f:b9:95:c5:30:8a:52:fe:8c:e7:66:
5c:bb:aa:bc:dd:1f:b1:c3:07:81:c6:bb:7a:cd:dd:e2:20:2a:
b0:79:44:74:69:34:03:81:c6:1e:a6:c1:52:b4:ce:65:2e:5b:
5e:54:16:76:57:21:78:73:63:89:48:90:31:44:fc:4b:c5:d9:
05:c6:48:c5:52:02:52:ce:04:95:fb:0b:19:8d:f2:e3:00:bd:
01:83:2f:0d:ef:79:6f:8b:e2:51:3a:20:17:a2:bc:18:35:24:
6b:62:1c:fa:83:2b:f4:f9:64:d2:d0:73:8b:ea:d1:34:75:ac:
f5:d0:5b:d3:16:10:9b:68:b8:af:f3:ca:f7:98:e5:f5:9f:0b:
44:bd:13:92:32:56:52:33:8a:37:14:60:9d:51:58:22:04:eb:
27:bf:5f:79:8a:f2:1e:b2:7a:1d:c8:4f:95:2c:bb:36:01:a8:
ad:e1:96:82:77:65:53:47:af:17:a4:85:b2:f6:68:dd:a8:11:
a9:b4:9c:90:ec:dd:8f:de:e1:51:06:e5:1c:6e:8e:aa:7e:b1:
80:12:b7:90:b3:a4:5f:71:12:0a:74:bd:60:5e:66:e8:b2:aa:
7c:d3:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:48:24 2026 by rpki-client