Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: 3wScIVMxXdeGLzbMkIHxBkHa3g3shcJ5cayRaado6Io=
Subject key identifier: 79:CD:89:AE:43:81:4E:2D:62:17:6E:70:FF:2B:46:BA:B0:7D:89:6B
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 01A0E73F96F064E850B316E5BCAED0777ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0E90
Signing time: Mon 28 Sep 2026 09:01:39 +0000
Manifest this update: Mon 28 Sep 2026 09:01:39 +0000
Manifest next update: Tue 29 Sep 2026 09:01:39 +0000
Files and hashes: 1: TtXo5-QRvXwKIgknKnZ4_4t2vL8.roa (hash: mXHeMxujxsacK8/QlflktbO+DxAXX0UCko2MtIwDM0I=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: in52lJw7QCdYuJ5ODep4nUD5CPZRYaVvrX+yXMfCHyQ=)
3: pbTK5peLIyvXvbiyDRGHdQgVdNA.asa (hash: Wtfdhvq2K7gS1UXNM4URBttcFhHoJO+q7bKyWG4w/Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:96:f0:64:e8:50:b3:16:e5:bc:ae:d0:77:7a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Sep 28 09:01:39 2026 GMT
Not After : Sep 29 09:01:39 2026 GMT
Subject: CN=79cd89ae43814e2d62176e70ff2b46bab07d896b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:0e:54:f0:6f:32:85:22:ed:6d:64:ad:61:
47:9d:c6:4f:e1:ad:83:39:82:e8:9b:cf:f1:d2:fc:
ad:5b:e3:2f:99:c9:00:5f:ed:3b:4b:b4:08:7e:9a:
33:e7:7e:91:98:80:b6:84:5b:4b:2b:09:d7:72:8b:
ea:8f:58:11:91:c4:82:9a:d5:5f:cc:8e:0d:68:eb:
17:4c:1f:c6:b8:93:d3:12:a8:84:e4:4c:11:ad:ec:
6c:b1:99:8f:f1:2d:50:7b:db:d9:62:14:34:bc:df:
e6:0f:49:90:da:48:f9:f8:1e:ab:e2:92:b5:ca:08:
4a:bc:eb:c7:bf:75:1b:dd:f3:d8:a1:ac:dc:27:87:
2a:db:f1:54:a0:cd:34:12:fa:60:7d:ca:47:8c:d1:
88:97:3c:6c:c5:7a:00:5e:73:9c:51:47:53:4d:19:
a8:b8:16:9f:64:0a:1e:5b:9d:7b:80:4c:f0:25:72:
f7:d2:cb:14:ff:8d:43:95:9f:26:8e:22:ac:cc:8d:
de:56:c8:9c:60:a1:ad:8f:a3:ad:16:b4:33:af:14:
ee:e2:7d:98:f3:f5:56:d7:1f:8d:11:0f:6c:c0:57:
cb:d4:3c:76:ad:c0:c2:b7:1b:8b:71:f9:9a:8f:e1:
73:f6:99:8a:84:90:19:dc:fd:ac:79:9e:7f:c7:a8:
0c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CD:89:AE:43:81:4E:2D:62:17:6E:70:FF:2B:46:BA:B0:7D:89:6B
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:67:63:04:d8:af:2e:9e:ab:e2:ae:42:e1:b7:58:0a:7d:b5:
05:eb:fb:87:2f:41:da:30:82:4e:f0:9e:4f:be:fb:be:94:a8:
ee:c4:df:cc:32:b7:ce:d5:ba:de:82:da:f2:a1:15:ee:c2:39:
18:a4:b1:47:95:c6:cb:42:22:25:7c:fe:c4:7b:3c:2c:72:2a:
c0:47:47:ae:b1:a8:ac:3f:7a:50:98:dc:6c:71:d5:82:cf:41:
37:f5:80:8d:43:eb:90:7c:82:4a:c9:d8:ba:78:75:17:4f:0b:
0c:9e:fc:44:b6:af:54:81:13:8e:3e:f9:be:84:78:3f:83:3d:
3a:63:13:ba:73:9b:cd:8f:2a:af:6b:b5:fc:88:b9:34:c0:0d:
42:8b:48:46:a6:d5:5d:82:34:9e:c8:54:ce:28:d1:81:6e:dd:
3e:f3:c6:a3:a1:6d:74:ef:4d:c4:a1:e3:a3:3a:a9:f6:13:85:
ff:ec:f3:90:a1:02:f4:97:2e:ed:4e:d1:93:19:3c:0d:1d:0e:
f2:a1:61:7f:c2:b2:87:ae:c8:84:5a:83:e0:a7:7d:d2:de:dc:
a3:61:84:7b:97:de:5d:49:df:08:83:4f:32:6f:99:45:68:06:
3f:2c:5d:ec:86:65:22:f5:c0:70:13:a6:be:69:37:ec:0b:04:
01:0b:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:32:37 2026 by rpki-client