Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: 3z6hb4/vIJmHrDvKAVdjQJjxU8RXDkSHgh7rfYMNams=
Subject key identifier: D0:19:23:5F:66:67:29:6C:83:03:43:EB:AC:11:C6:E2:BD:09:40:AC
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 019ED4999717968392A6375333FC46988D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 1095
Signing time: Wed 17 Jun 2026 08:01:35 +0000
Manifest this update: Wed 17 Jun 2026 08:01:35 +0000
Manifest next update: Thu 18 Jun 2026 08:01:35 +0000
Files and hashes: 1: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (hash: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: 2F3n3NJetuPBwpn5oWzMXpeNm854gAW0ZNghJRuDTeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:99:97:17:96:83:92:a6:37:53:33:fc:46:98:8d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Jun 17 08:01:35 2026 GMT
Not After : Jun 18 08:01:35 2026 GMT
Subject: CN=d019235f6667296c830343ebac11c6e2bd0940ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:1b:ea:5a:74:8d:f5:8d:a8:c7:b2:c7:cc:
0c:ff:4a:5a:1f:68:24:a7:7f:4c:5c:d1:d1:eb:f6:
18:3f:d8:90:66:5c:3e:f7:d8:ce:69:04:a3:74:87:
a2:35:47:8e:ef:b0:6d:b5:5a:4d:38:8e:c8:bf:1c:
b0:2a:75:95:6c:22:e9:42:8d:6e:0e:5c:9e:3e:ce:
41:e8:9e:a8:fe:ec:38:b4:cc:99:0b:e8:24:6e:b9:
77:88:c9:34:c0:2e:b1:a8:89:2c:f3:33:ea:00:82:
06:a6:7a:4b:f6:6a:f5:d6:92:d3:72:d7:46:d5:db:
87:90:84:40:b6:70:8d:02:97:a0:0e:be:39:5f:71:
4c:0b:51:4c:54:24:4a:3d:75:b7:a2:08:88:08:4f:
7a:ce:15:bb:ac:7b:2f:db:7f:56:40:6a:a8:14:b3:
e5:b4:f1:a4:88:3a:f5:64:52:8c:d2:38:57:9f:dc:
90:61:ee:40:61:bc:94:2e:52:ea:c6:be:54:61:b0:
2e:f5:0a:94:e1:44:fc:19:fd:89:89:59:52:61:d8:
97:32:b8:e5:5d:74:58:07:26:bb:29:a6:88:ba:1c:
6d:99:3d:74:bc:7b:f8:63:90:70:40:b8:f0:5f:0d:
34:63:b4:0e:bb:76:06:bd:b0:9b:84:61:49:13:27:
65:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:23:5F:66:67:29:6C:83:03:43:EB:AC:11:C6:E2:BD:09:40:AC
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:14:07:39:b0:f7:e5:3d:da:d9:f3:d1:2a:31:3e:24:15:d1:
b0:f2:80:bd:39:34:ff:6d:2c:0d:40:fa:00:ac:c3:2b:da:8c:
29:f5:fe:5c:31:d3:bf:b6:85:ea:af:37:2f:7a:0f:c7:0e:b2:
ec:7c:1b:01:f4:8d:52:22:29:d4:f3:4d:e0:6e:c8:3f:db:77:
42:db:86:83:97:6d:e2:50:cf:18:79:21:9d:77:ba:f4:c9:38:
f4:f3:6f:b5:65:15:29:14:1f:10:c6:c5:cd:3d:b2:9a:4a:fe:
f0:2c:e4:a1:7a:7d:13:be:6e:f9:ef:88:d8:3a:ea:51:2e:56:
01:00:7e:1d:66:87:45:3b:38:c6:0b:83:36:64:8b:64:70:e6:
a7:7f:41:49:cb:d3:82:7d:d3:d8:44:18:dc:19:8e:cc:e0:58:
89:7a:f4:78:fb:c8:9e:20:6a:f5:18:3c:ff:88:27:99:5c:73:
8b:58:6b:24:28:59:74:31:ed:4d:57:2f:1f:e9:a2:df:0d:ce:
46:72:6a:fd:47:23:1c:08:96:fb:09:0d:7c:de:7e:4e:c8:a5:
25:94:40:c8:d6:6c:12:aa:c5:7e:1a:d6:4d:d5:c2:09:c2:dd:
b5:80:a1:15:34:50:c7:42:c3:c3:11:5a:7f:17:dd:2f:0d:28:
e2:6b:07:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UmZcXloOSpjdTM/xGmI0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2
YmFlNGMwHhcNMjYwNjE3MDgwMTM1WhcNMjYwNjE4MDgwMTM1WjAzMTEwLwYDVQQD
EyhkMDE5MjM1ZjY2NjcyOTZjODMwMzQzZWJhYzExYzZlMmJkMDk0MGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eUb6lp0jfWNqMeyx8wM/0paH2gk
p39MXNHR6/YYP9iQZlw+99jOaQSjdIeiNUeO77BttVpNOI7IvxywKnWVbCLpQo1u
DlyePs5B6J6o/uw4tMyZC+gkbrl3iMk0wC6xqIks8zPqAIIGpnpL9mr11pLTctdG
1duHkIRAtnCNApegDr45X3FMC1FMVCRKPXW3ogiICE96zhW7rHsv239WQGqoFLPl
tPGkiDr1ZFKM0jhXn9yQYe5AYbyULlLqxr5UYbAu9QqU4UT8Gf2JiVlSYdiXMrjl
XXRYBya7KaaIuhxtmT10vHv4Y5BwQLjwXw00Y7QOu3YGvbCbhGFJEydlAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAZI19mZylsgwND66wRxuK9CUCsMB8GA1UdIwQY
MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt
YTE1YWY1ZThmMTNjLzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj
LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhQHObD3
5T3a2fPRKjE+JBXRsPKAvTk0/20sDUD6AKzDK9qMKfX+XDHTv7aF6q83L3oPxw6y
7HwbAfSNUiIp1PNN4G7IP9t3QtuGg5dt4lDPGHkhnXe69Mk49PNvtWUVKRQfEMbF
zT2ymkr+8CzkoXp9E75u+e+I2DrqUS5WAQB+HWaHRTs4xguDNmSLZHDmp39BScvT
gn3T2EQY3BmOzOBYiXr0ePvIniBq9Rg8/4gnmVxzi1hrJChZdDHtTVcvH+mi3w3O
RnJq/UcjHAiW+wkNfN5+TsilJZRAyNZsEqrFfhrWTdXCCcLdtYChFTRQx0LDwxFa
fxfdLw0o4msHaw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:53 2026 by rpki-client