Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: ySHudqrfz5z7DbPDdklnT/qGuIdiCO5AKujsNdK97Ig=
Subject key identifier: 68:2F:A0:5E:87:16:29:4F:64:EF:80:8C:74:1D:F8:33:C6:88:54:EC
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 01A1E13AFF0A51D716B3BF305ABA8A56D404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 051A
Signing time: Sun 15 Nov 2026 22:01:42 +0000
Manifest this update: Sun 15 Nov 2026 22:01:42 +0000
Manifest next update: Mon 16 Nov 2026 22:01:42 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: 12Ot6kbDQkp/BKHYIj+oABxXBHpcmucbOUSTqVfZcBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e1:3a:ff:0a:51:d7:16:b3:bf:30:5a:ba:8a:56:d4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Nov 15 22:01:42 2026 GMT
Not After : Nov 16 22:01:42 2026 GMT
Subject: CN=682fa05e8716294f64ef808c741df833c68854ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a6:fb:64:51:3a:91:86:f2:19:48:57:3d:7c:
9d:4b:1c:a3:d8:7f:8d:f6:54:72:6c:1a:6a:ec:70:
e5:91:51:cd:0d:5d:ad:83:8e:b1:04:fa:6d:e7:15:
5e:14:4a:f3:96:89:fd:d9:da:1e:5a:4c:ea:23:8f:
26:3c:af:d2:32:3a:de:35:c9:83:48:ff:a8:c8:13:
d5:30:72:27:eb:2e:d7:b8:60:37:2a:1c:47:07:99:
62:46:3e:22:98:14:66:d6:d8:0a:4d:27:7c:f1:e8:
40:b9:a7:4a:06:c5:6b:32:fc:80:6e:14:8d:91:fe:
99:c6:79:57:97:a1:9d:da:64:96:b3:8b:cb:b4:ae:
94:17:1f:c0:c7:e5:f7:fc:51:05:7d:28:6c:37:9f:
6b:e6:f8:15:3f:dd:c6:5c:36:d5:78:85:35:82:89:
fa:47:71:7d:f1:f9:f3:05:bf:ca:9b:76:95:24:c9:
87:e2:c7:e7:32:f6:c0:c7:0b:f3:58:af:d2:6d:ab:
cd:2e:ea:b8:40:67:73:a4:07:6a:fe:65:ea:61:ce:
95:c3:c1:b7:1b:3a:de:eb:e3:d7:ce:66:e9:d3:73:
20:34:e0:b0:bb:8e:d8:f2:35:38:40:a2:d0:e9:77:
90:28:f1:34:66:d5:5e:4f:37:45:2e:dc:90:f2:26:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2F:A0:5E:87:16:29:4F:64:EF:80:8C:74:1D:F8:33:C6:88:54:EC
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f0:9f:ca:38:02:ef:6f:9f:76:70:4c:65:7b:57:f8:57:d2:
42:95:f1:66:04:a3:a4:fd:ae:06:cb:d0:e1:9b:f1:49:bc:dd:
3e:fb:4d:0c:d9:19:c9:e8:8c:23:1b:73:ad:26:b5:f7:62:64:
9d:0f:c1:bd:ce:ef:93:74:32:61:1a:e9:68:3a:6d:95:f4:4a:
96:e8:24:c7:32:7d:99:45:eb:8a:5e:61:1d:90:34:00:6a:b9:
8b:c0:8b:f6:52:bc:46:e8:29:ef:3f:7a:a3:c9:7e:b5:20:b3:
a9:6c:ad:48:f0:e2:39:f4:d0:c9:e1:70:a4:f7:32:31:88:ee:
a0:32:75:ef:7d:8b:86:6e:48:c1:ce:83:7a:d6:47:66:ef:ab:
2f:aa:c6:6b:ed:b0:54:a6:1f:e9:a2:27:5d:08:a4:63:d6:e0:
3e:72:d6:ed:c6:f1:d7:85:e7:ed:a6:22:88:30:41:85:03:aa:
d4:96:55:6c:99:56:d0:e4:4c:13:3f:58:f0:c0:d3:bb:dc:b9:
10:79:14:c2:9a:45:f8:41:23:09:50:21:84:96:28:a5:6a:ee:
49:6a:03:b5:ea:5b:82:ea:1f:f5:aa:3d:7e:6c:c2:24:3d:83:
1b:9e:fd:30:ba:a1:59:07:6f:bb:ec:de:98:ec:76:1e:62:6c:
0e:35:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:43:07 2026 by rpki-client