Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
File: gh8Shdd1qfWJJD6shErcWridl8k.mft (raw, json)
Hash identifier: tBelV9ogHrdh/8oCeQ9f6tA4TSUCG97kUpMoy6nyEHA=
Subject key identifier: 28:18:2C:6D:85:B5:F6:30:0A:25:31:EB:2F:8A:99:D9:C5:DA:1C:26
Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
Certificate issuer: /CN=821f1285d775a9f589243eac844adc5ab89d97c9
Certificate serial: 01A0C9D99E787EF3DF30BA46BE193E8566BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
Manifest number: 0F0D
Signing time: Tue 22 Sep 2026 16:01:17 +0000
Manifest this update: Tue 22 Sep 2026 16:01:17 +0000
Manifest next update: Wed 23 Sep 2026 16:01:17 +0000
Files and hashes: 1: Ken1-UyKUV7K-ivTPRx21HrB1go.roa (hash: SzlYiDowE9Ts27wto98BsM6+plGlLtF6xf2nTMUOAKI=)
2: dGmTMuCLcokZ_dpzsnFglotPhbE.roa (hash: xS9B/n1G06zo3aHFhFfNBhI/mXvOeeGrRH7j7PtD+Q0=)
3: gh8Shdd1qfWJJD6shErcWridl8k.crl (hash: SHi2HkZjif/ZEvn+9/rvJhjBFK++QCL8KMqJpNhQknI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:9e:78:7e:f3:df:30:ba:46:be:19:3e:85:66:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9
Validity
Not Before: Sep 22 16:01:17 2026 GMT
Not After : Sep 23 16:01:17 2026 GMT
Subject: CN=28182c6d85b5f6300a2531eb2f8a99d9c5da1c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:db:71:11:95:67:4c:3d:11:21:b9:ce:a0:
5d:a8:e1:73:3c:7d:14:66:9c:1a:f6:d2:a2:41:d0:
c6:33:e6:1a:8e:2f:3d:e1:8f:a6:ae:d3:bb:ab:28:
f3:43:f4:07:e5:af:01:11:f9:a4:9b:9a:0f:23:6f:
98:f2:30:ae:de:16:9a:ec:fb:e4:d5:cc:6b:c7:62:
07:b7:ee:98:ba:f6:8b:7c:78:6d:94:fe:4c:db:11:
70:26:3d:29:5c:05:bf:05:ef:b1:05:3d:7e:19:ad:
7e:0d:24:ee:90:cb:d6:a4:f1:29:11:40:65:e7:d3:
fc:89:20:60:0b:09:d1:d2:ac:81:bd:2f:16:e2:6c:
ac:56:61:4a:8b:7c:ae:2d:f0:a3:3d:04:d2:ec:0a:
f1:58:54:d1:ad:1f:3c:9f:3b:95:fe:b2:af:a9:67:
cd:9b:80:eb:a8:82:50:de:0b:3a:2d:07:39:e0:8d:
4d:9e:76:1a:f1:14:a7:e9:74:74:0b:9f:22:cc:43:
d7:f7:a4:ec:c3:e3:02:01:15:99:bf:5e:f8:e5:0c:
05:92:d0:e0:c4:8f:fd:c3:a4:fe:84:20:62:80:e3:
85:d7:3a:d1:10:77:54:f3:11:6f:6f:e7:5a:c5:a7:
bf:93:1f:b2:57:4a:cd:32:b2:1b:2e:23:77:1f:16:
a7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:18:2C:6D:85:B5:F6:30:0A:25:31:EB:2F:8A:99:D9:C5:DA:1C:26
X509v3 Authority Key Identifier:
keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f8:c4:3b:67:bf:e9:86:ea:77:d2:e8:07:9e:5d:60:39:24:
fd:11:3c:61:54:20:03:9a:30:4f:30:a8:f5:dc:9d:e8:05:35:
9b:4b:06:75:c8:37:a3:ba:a1:90:2f:b2:ef:af:74:7a:85:62:
57:0a:f6:bc:cb:30:96:c7:db:50:00:68:26:5a:6e:49:ce:f7:
36:39:59:2b:d4:8f:1c:b3:26:62:aa:7f:9a:fd:10:10:75:55:
3e:54:a1:60:2a:83:55:68:c6:10:70:3e:1b:6d:92:c0:f3:34:
49:a4:0f:cf:4b:ad:35:8b:eb:d7:35:cf:ae:f1:1c:b9:d6:98:
d6:ab:fc:9c:e9:82:73:9c:97:0d:5a:f2:bb:91:2b:d3:02:35:
77:7a:76:8b:18:e7:05:52:5c:5e:45:78:51:4a:5d:b0:26:0a:
54:80:03:04:82:67:5d:45:da:6a:8d:41:b0:21:85:a5:cb:09:
fe:f3:83:85:2d:91:d0:13:cc:47:c2:36:d7:8e:49:1c:56:b3:
51:e5:f9:da:ff:a3:5c:ad:70:1b:eb:c0:82:f3:80:61:53:a9:
34:bd:6b:b7:cf:5f:eb:e3:d4:b6:9e:dd:46:d4:b3:10:ac:10:
ec:a2:d1:25:13:a2:bb:68:38:2c:57:f8:78:f0:6a:d1:1d:e8:
da:25:fd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:13:47 2026 by rpki-client