Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: 3Xhi9rdmilggm7RXEULPbGlERATom3hq8LsJt0aesxI=
Subject key identifier: 17:36:1F:F2:E5:8C:C4:4C:31:D4:B6:A5:B2:5C:6C:50:12:DA:E1:0E
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 019FAB63F6EA29D84DBC952057D39780E5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 0B2F
Signing time: Wed 29 Jul 2026 01:01:22 +0000
Manifest this update: Wed 29 Jul 2026 01:01:22 +0000
Manifest next update: Thu 30 Jul 2026 01:01:22 +0000
Files and hashes: 1: EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa (hash: CaEBziMi2C6rN6WGf7O34W/+WtB1Ogao7r0fRD3u2XA=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: gvO3WhrEx+pw0AYQ0la4lcx9YTgrYhDgLKkwm0Z6REY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:f6:ea:29:d8:4d:bc:95:20:57:d3:97:80:e5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Jul 29 01:01:22 2026 GMT
Not After : Jul 30 01:01:22 2026 GMT
Subject: CN=17361ff2e58cc44c31d4b6a5b25c6c5012dae10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c0:eb:99:75:3a:6b:23:36:0a:78:7d:05:1f:
c8:4e:14:96:f3:2b:7d:05:0d:92:9b:4d:5a:d3:f3:
18:51:0a:dd:ad:8f:31:46:00:be:22:5d:79:d9:89:
37:d0:d1:fc:64:17:e4:09:92:1a:87:f3:33:63:c3:
cd:89:ee:49:84:d7:8c:80:33:45:3a:24:c4:8f:e9:
cd:65:5e:26:21:46:aa:5f:11:25:05:b3:4c:62:8a:
4c:a9:be:39:68:d3:9a:41:3a:58:95:9f:02:bd:ae:
31:f6:75:82:45:79:63:5b:2e:ff:18:a7:04:68:21:
8a:a2:ee:d4:7f:80:26:91:b0:c6:97:4a:6d:cc:b8:
20:12:36:0a:8c:d2:a3:18:db:7c:47:2d:f5:db:ab:
92:4d:d3:5d:af:86:c1:82:5b:24:cf:88:6d:ee:9e:
b6:6c:04:c7:58:96:6e:76:76:b3:f1:ea:07:f6:04:
db:09:e9:e5:59:b9:ff:09:ee:c1:4b:79:1d:40:99:
fa:c5:10:06:c6:c6:17:2f:10:c7:8b:2d:d8:f1:c7:
e3:4e:02:68:4d:4e:25:23:27:19:d3:53:4e:c9:0e:
db:ce:82:4e:82:e2:c6:0b:ec:05:f0:ba:7d:f5:cb:
84:5d:61:2d:e7:87:b1:c1:66:6d:98:93:fd:18:6e:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:36:1F:F2:E5:8C:C4:4C:31:D4:B6:A5:B2:5C:6C:50:12:DA:E1:0E
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0d:cb:39:a1:ec:ce:11:e5:e8:2d:4d:86:86:96:19:2c:3a:
66:d9:dc:f2:f6:06:94:63:7c:40:32:66:7d:4b:be:df:a9:f8:
6a:a3:e6:24:0d:b6:75:cb:e1:c7:bf:3d:c5:ed:25:fa:e4:3d:
0b:ed:ac:53:dc:24:b0:6f:45:0e:2c:0f:3d:04:a6:3c:ac:ae:
0d:bb:42:6f:66:78:3d:4e:87:35:57:39:f2:80:f8:a2:1f:bb:
32:69:ce:b4:65:91:a0:19:45:2c:52:17:c5:6e:38:95:b0:fe:
09:64:bf:72:50:5b:b9:3f:cc:63:c5:b2:5d:52:27:92:c9:7e:
d6:7b:6a:8d:73:4c:c5:f1:31:fa:8c:43:07:a3:62:bc:5f:da:
5a:8e:dd:b5:29:fd:ff:21:b3:a8:36:10:c1:07:e2:c2:c7:b5:
5e:0d:87:12:d1:a8:81:5d:49:4d:19:00:15:a3:2f:9b:c5:08:
90:ad:24:74:3b:77:6f:47:5f:54:e9:2d:12:c4:63:72:f6:bb:
39:2d:46:dd:b2:ff:34:cb:78:48:f9:73:ea:34:fe:18:99:1b:
68:27:3a:07:37:68:48:e7:05:76:8a:25:a0:a1:da:a9:6b:1a:
6d:b7:7a:dd:d9:22:cc:b4:15:d1:fc:b7:0b:f3:d2:df:ca:0a:
c7:03:d4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY/bqKdhNvJUgV9OXgOX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYWU3MGRmZDQzMDUyNzM2ZmU4NWYwMGQyOTg0Y2UzNzZi
NzZlYjMwHhcNMjYwNzI5MDEwMTIyWhcNMjYwNzMwMDEwMTIyWjAzMTEwLwYDVQQD
EygxNzM2MWZmMmU1OGNjNDRjMzFkNGI2YTViMjVjNmM1MDEyZGFlMTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58DrmXU6ayM2Cnh9BR/IThSW8yt9
BQ2Sm01a0/MYUQrdrY8xRgC+Il152Yk30NH8ZBfkCZIah/MzY8PNie5JhNeMgDNF
OiTEj+nNZV4mIUaqXxElBbNMYopMqb45aNOaQTpYlZ8Cva4x9nWCRXljWy7/GKcE
aCGKou7Uf4AmkbDGl0ptzLggEjYKjNKjGNt8Ry3126uSTdNdr4bBglskz4ht7p62
bATHWJZudnaz8eoH9gTbCenlWbn/Ce7BS3kdQJn6xRAGxsYXLxDHiy3Y8cfjTgJo
TU4lIycZ01NOyQ7bzoJOguLGC+wF8Lp99cuEXWEt54exwWZtmJP9GG4nMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc2H/LljMRMMdS2pbJcbFAS2uEOMB8GA1UdIwQY
MBaAFIGucN/UMFJzb+hfANKYTON2t26zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgt
YmI1ODkzYTZhYzkxLzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgtYmI1ODkzYTZhYzkx
LzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcg3LOaHs
zhHl6C1NhoaWGSw6Ztnc8vYGlGN8QDJmfUu+36n4aqPmJA22dcvhx789xe0l+uQ9
C+2sU9wksG9FDiwPPQSmPKyuDbtCb2Z4PU6HNVc58oD4oh+7MmnOtGWRoBlFLFIX
xW44lbD+CWS/clBbuT/MY8WyXVInksl+1ntqjXNMxfEx+oxDB6NivF/aWo7dtSn9
/yGzqDYQwQfiwse1Xg2HEtGogV1JTRkAFaMvm8UIkK0kdDt3b0dfVOktEsRjcva7
OS1G3bL/NMt4SPlz6jT+GJkbaCc6BzdoSOcFdooloKHaqWsabbd63dkizLQV0fy3
C/PS38oKxwPUSw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:47:57 2026 by rpki-client