Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File: gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier: /LDXprlMaqRwexupReXEUbU02cv4/VGB2TMQmECrvjc=
Subject key identifier: 73:49:29:E0:D8:44:23:23:3B:FC:37:A7:8B:15:28:5A:FB:12:74:14
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer: /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial: 01A0C63368ADC9AD7AFEEA2302F65185FF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number: 0BAD
Signing time: Mon 21 Sep 2026 23:00:52 +0000
Manifest this update: Mon 21 Sep 2026 23:00:52 +0000
Manifest next update: Tue 22 Sep 2026 23:00:52 +0000
Files and hashes: 1: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: pck2HV4N/+j16Tzwjlwjx1So8e48N2NuR6bbrZCK+ug=)
2: qG_zm-_87cXSw0_LhJiatFGZjco.roa (hash: 845weVVX02y1u2NuqLxhj3PGe6p4QBfV9nv+gr8bpog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:68:ad:c9:ad:7a:fe:ea:23:02:f6:51:85:ff:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Validity
Not Before: Sep 21 23:00:52 2026 GMT
Not After : Sep 22 23:00:52 2026 GMT
Subject: CN=734929e0d84423233bfc37a78b15285afb127414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:c2:f2:e3:93:5c:0e:6e:1a:ff:4d:85:ff:
92:4d:1f:78:d1:ae:f4:d0:5b:a0:67:0e:73:4c:15:
ee:91:46:49:f6:fd:15:01:8a:cd:ad:92:b3:e2:03:
85:2a:14:81:e0:26:77:1a:31:e1:1c:68:23:b2:f5:
48:b5:ce:50:5f:42:1c:54:bc:2a:bc:e9:60:ff:dc:
31:8a:ab:5d:84:7e:83:37:88:b3:13:e8:a5:19:eb:
12:6d:cd:08:b9:86:9f:1f:5f:15:6c:1f:79:6d:64:
ed:23:e5:78:7e:a5:38:86:d9:46:7a:36:d2:ea:fb:
67:fe:00:f9:70:c2:31:70:17:7c:68:5f:24:07:6a:
c6:cc:c5:06:8b:1f:2d:f4:8e:e3:3f:ff:8a:86:16:
1b:75:93:d8:40:44:fd:b1:89:66:0e:51:34:fb:9b:
fa:9e:d2:ba:a7:6a:02:09:45:c3:c9:e9:56:9d:9a:
20:a3:19:48:ff:12:30:67:4e:79:6e:fb:ce:4d:c6:
33:1b:21:67:e5:2f:4a:e7:49:1f:00:25:b8:2f:e8:
62:fb:ed:4a:de:0e:d9:20:04:90:a0:c3:6e:fe:cd:
67:dd:4b:b2:2d:3e:4f:76:0c:c5:f4:8c:93:35:39:
8f:9d:cd:69:a0:f3:b7:4f:4e:fe:64:34:f9:d2:2e:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:49:29:E0:D8:44:23:23:3B:FC:37:A7:8B:15:28:5A:FB:12:74:14
X509v3 Authority Key Identifier:
keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d6:7d:3b:88:3a:6d:42:d0:da:f9:65:62:04:f8:16:35:31:
c0:1b:cd:b5:c6:d6:99:9e:79:a7:4f:6f:0f:87:71:8f:d5:e9:
5d:59:23:f0:6b:e3:9e:4d:45:49:74:09:77:03:16:a2:95:5c:
c6:f3:c2:f0:b1:9c:25:84:b9:f9:e5:d9:c5:d2:51:8b:7a:6f:
39:9f:84:94:59:57:75:1b:2c:9e:6d:49:d1:46:d4:cb:3b:c7:
86:49:02:f5:b8:71:4c:6d:a7:c1:f4:8f:ea:b8:e2:da:4a:ad:
df:01:41:31:fb:bf:14:87:b8:eb:fd:28:4f:be:dc:b2:6f:18:
fe:ee:c0:1e:dc:03:91:6a:87:91:6b:41:89:4f:f7:28:63:3e:
1a:91:51:22:0a:a5:f1:12:9b:95:77:98:83:7a:6a:b2:df:d9:
d8:b6:f4:34:7a:c9:5d:10:5c:8b:24:12:bd:76:51:a2:58:8d:
cc:0e:61:8b:86:23:9b:a0:95:a0:15:c5:a2:d6:6b:13:03:1d:
d5:da:eb:9e:85:50:27:18:ff:0d:08:ed:87:5a:d1:e7:97:aa:
5b:b4:d7:e3:7d:c6:a4:94:d0:25:01:a5:72:2d:57:78:c9:5f:
a9:14:4a:54:a4:ad:a2:59:2d:c0:a0:2b:ea:7a:27:70:46:8c:
3d:24:1c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGM2itya16/uojAvZRhf8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZmU3ZDAwZTk0Y2QyYTdjYmY3ZjllODJjZjA5OTI0MTc0
MThkZjYwHhcNMjYwOTIxMjMwMDUyWhcNMjYwOTIyMjMwMDUyWjAzMTEwLwYDVQQD
Eyg3MzQ5MjllMGQ4NDQyMzIzM2JmYzM3YTc4YjE1Mjg1YWZiMTI3NDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPfC8uOTXA5uGv9Nhf+STR940a70
0FugZw5zTBXukUZJ9v0VAYrNrZKz4gOFKhSB4CZ3GjHhHGgjsvVItc5QX0IcVLwq
vOlg/9wxiqtdhH6DN4izE+ilGesSbc0IuYafH18VbB95bWTtI+V4fqU4htlGejbS
6vtn/gD5cMIxcBd8aF8kB2rGzMUGix8t9I7jP/+KhhYbdZPYQET9sYlmDlE0+5v6
ntK6p2oCCUXDyelWnZogoxlI/xIwZ055bvvOTcYzGyFn5S9K50kfACW4L+hi++1K
3g7ZIASQoMNu/s1n3UuyLT5PdgzF9IyTNTmPnc1poPO3T07+ZDT50i4goQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNJKeDYRCMjO/w3p4sVKFr7EnQUMB8GA1UdIwQY
MBaAFIL+fQDpTNKny/f56CzwmSQXQY32MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzct
NjNkZjYwMzE2MWM5LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzctNjNkZjYwMzE2MWM5
LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9Z9O4g6
bULQ2vllYgT4FjUxwBvNtcbWmZ55p09vD4dxj9XpXVkj8Gvjnk1FSXQJdwMWopVc
xvPC8LGcJYS5+eXZxdJRi3pvOZ+ElFlXdRssnm1J0UbUyzvHhkkC9bhxTG2nwfSP
6rji2kqt3wFBMfu/FIe46/0oT77csm8Y/u7AHtwDkWqHkWtBiU/3KGM+GpFRIgql
8RKblXeYg3pqst/Z2Lb0NHrJXRBciyQSvXZRoliNzA5hi4Yjm6CVoBXFotZrEwMd
1drrnoVQJxj/DQjth1rR55eqW7TX433GpJTQJQGlci1XeMlfqRRKVKStolktwKAr
6noncEaMPSQc4Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:44:30 2026 by rpki-client