Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier: VAZeuYXsN6qcpgXtVJE08hkYO6Y5B++lhIUmyhQWrTM=
Subject key identifier: 11:13:6F:57:14:9D:DE:B0:B9:CB:29:9F:65:C5:5F:C0:88:8B:DA:5B
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 01A0C96B8EC6B90772675B44095D4BD386CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 14:01:04 +0000
Manifest this update: Tue 22 Sep 2026 14:01:04 +0000
Manifest next update: Wed 23 Sep 2026 14:01:04 +0000
Files and hashes: 1: 9iYRo82i9hRkUCgmREahdJYxLLE.roa (hash: Iaajzt1IR/GS2dadWD8d0yfp4+37Bgf5XHM3q2W76dA=)
2: Jm12F1fJac9AdzTGN7xQVn8K_U4.roa (hash: P/nVz8qxvVHC3IkIASDUTBADr0JHFnsbfxbsnkdVypc=)
3: U17Ig7TH3Hf9u0Hjug4B8FqbaeM.roa (hash: h4vlRYblnFE5NeXhaGifoUzHbL8gvX60WPtBD/isPek=)
4: Z81lv8qaADBtEGYsx0-brJvvQeg.roa (hash: r6SobeHV+YoGbEJkji/z1sNc1KoSoCEgvZU8Lt5eYac=)
5: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: UFGoMR8sEU0S6kgUIh0y4ubh6VOAPt0Jv/hY2zPo4ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:8e:c6:b9:07:72:67:5b:44:09:5d:4b:d3:86:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Sep 22 14:01:04 2026 GMT
Not After : Sep 23 14:01:04 2026 GMT
Subject: CN=11136f57149ddeb0b9cb299f65c55fc0888bda5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d3:61:34:b1:a4:bd:40:c4:0f:de:bd:5b:b6:
21:0e:a8:7c:60:cb:c3:ff:02:55:50:ed:56:3c:d0:
b5:84:e1:73:c9:08:a9:9d:52:81:00:94:e1:40:14:
bd:5d:bc:b4:a1:5b:c1:5f:5d:e5:97:cf:8b:50:02:
f4:36:d2:2a:62:36:cc:b3:59:b1:04:8a:43:9c:9b:
3b:4e:1d:e3:8d:ff:f9:aa:ff:68:bc:1d:c5:1c:54:
ec:38:1c:6d:a7:8a:c2:c6:37:eb:9e:9a:3b:ac:f2:
2d:7f:a0:e8:2b:0b:e0:aa:31:f1:80:b9:f3:5c:df:
6e:03:62:71:d0:dc:80:b1:72:b9:7c:9c:59:60:14:
a2:2b:92:5f:45:96:6b:6f:79:43:31:42:63:b4:eb:
13:9e:75:61:1e:9c:d3:1d:3b:be:4e:ca:e2:b9:af:
bb:20:4a:ac:aa:6d:b6:7d:6a:23:09:02:e1:68:8c:
35:fb:36:26:ec:85:b4:a5:a0:49:3f:c6:61:8f:a6:
54:87:15:40:61:ca:ee:73:05:63:59:25:86:fc:ae:
b1:e1:16:f1:da:f1:43:4a:67:7d:a3:33:2a:af:36:
43:93:6d:33:a2:a3:cb:ea:54:82:52:e0:a2:8e:05:
ae:2f:ab:be:96:47:6a:df:33:58:bb:cc:0e:1e:8c:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:13:6F:57:14:9D:DE:B0:B9:CB:29:9F:65:C5:5F:C0:88:8B:DA:5B
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:25:48:f3:b0:ec:85:4d:f1:90:70:e8:66:a2:fc:f6:36:97:
ae:d4:d3:5a:4a:0c:fa:88:7d:7a:32:46:f9:9a:1b:71:83:3f:
31:0a:3e:4b:ab:1b:a0:e0:86:ee:8e:c4:24:c4:2a:cf:56:d1:
2a:f9:fa:92:68:04:50:30:18:c1:07:45:12:a3:e4:bf:ac:e9:
c9:11:56:60:d2:64:87:03:c3:ef:7f:93:1f:5e:29:7f:74:42:
64:5e:e9:16:81:c2:70:ce:ed:12:6f:e6:5c:91:ec:1f:ef:9e:
b6:5b:90:58:f0:56:c3:5b:4e:d6:a9:04:9e:b2:1f:ff:0b:9b:
62:81:bc:35:0d:4f:dd:03:28:09:41:e8:dc:c5:91:02:a4:19:
ac:db:b8:c3:fe:5e:55:c1:75:54:13:e9:57:d7:ff:db:ce:3a:
7f:49:2a:85:29:10:c4:a9:78:d9:68:4f:90:20:c4:81:53:35:
9e:82:fc:3e:98:7a:29:b5:49:46:f0:55:3c:49:c9:00:4e:02:
32:69:ce:b4:ec:4a:01:cb:85:8d:6c:a1:0f:98:60:94:3a:6f:
fc:f2:56:3c:a6:0b:ec:71:71:ef:51:c6:b9:db:ca:2d:65:f8:
5c:1e:1a:1f:c3:6e:4b:51:6e:99:e6:80:be:34:e0:22:47:24:
66:78:6b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJa47GuQdyZ1tECV1L04bPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyN2FmMTdmMDQ5OTYyN2U0YjNjOGNjNWMzMzNlYzRiOGU3
NjM1ZTAwHhcNMjYwOTIyMTQwMTA0WhcNMjYwOTIzMTQwMTA0WjAzMTEwLwYDVQQD
EygxMTEzNmY1NzE0OWRkZWIwYjljYjI5OWY2NWM1NWZjMDg4OGJkYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89NhNLGkvUDED969W7YhDqh8YMvD
/wJVUO1WPNC1hOFzyQipnVKBAJThQBS9Xby0oVvBX13ll8+LUAL0NtIqYjbMs1mx
BIpDnJs7Th3jjf/5qv9ovB3FHFTsOBxtp4rCxjfrnpo7rPItf6DoKwvgqjHxgLnz
XN9uA2Jx0NyAsXK5fJxZYBSiK5JfRZZrb3lDMUJjtOsTnnVhHpzTHTu+Tsriua+7
IEqsqm22fWojCQLhaIw1+zYm7IW0paBJP8Zhj6ZUhxVAYcrucwVjWSWG/K6x4Rbx
2vFDSmd9ozMqrzZDk20zoqPL6lSCUuCijgWuL6u+lkdq3zNYu8wOHowMFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBETb1cUnd6wucspn2XFX8CIi9pbMB8GA1UdIwQY
MBaAFIJ68X8EmWJ+SzyMxcMz7EuOdjXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgt
NzMxM2M3ZjNjYTNmLzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgtNzMxM2M3ZjNjYTNm
LzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCVI87Ds
hU3xkHDoZqL89jaXrtTTWkoM+oh9ejJG+ZobcYM/MQo+S6sboOCG7o7EJMQqz1bR
Kvn6kmgEUDAYwQdFEqPkv6zpyRFWYNJkhwPD73+TH14pf3RCZF7pFoHCcM7tEm/m
XJHsH++etluQWPBWw1tO1qkEnrIf/wubYoG8NQ1P3QMoCUHo3MWRAqQZrNu4w/5e
VcF1VBPpV9f/2846f0kqhSkQxKl42WhPkCDEgVM1noL8Pph6KbVJRvBVPEnJAE4C
MmnOtOxKAcuFjWyhD5hglDpv/PJWPKYL7HFx71HGudvKLWX4XB4aH8NuS1FumeaA
vjTgIkckZnhrfA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:45:59 2026 by rpki-client