Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File: gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier: fklZRjO81OhjaksKpQrsuMqase6KxrQz48ze8lOn0Fs=
Subject key identifier: A3:89:54:72:2D:94:B5:8C:3A:BB:F5:A5:B1:B6:17:C6:7F:09:1B:54
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 01A0E81C927935836365361EBCB38075B8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number: 1A7D
Signing time: Mon 28 Sep 2026 13:03:01 +0000
Manifest this update: Mon 28 Sep 2026 13:03:01 +0000
Manifest next update: Tue 29 Sep 2026 13:03:01 +0000
Files and hashes: 1: NZ202JDARGMozqemjOm18XWqeB4.roa (hash: EMsYlcYoxjdRaOpIk5ySMPKn2gsFMeYDx9Ik13Whe1E=)
2: VizEqnthMjQ52TLR8h7x9BYDAIM.roa (hash: 41b89AhKzVApaqcIg1s1Z2VRJk8VnvLCBhm/gL3LlSM=)
3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: C7KMseU28exzS3AcPXzTNlh9JPHHuqOwecOK2on+Rv0=)
4: jOzeQvG-CSKEb84_kKnAL1PAC6Y.roa (hash: CUYbXow71FwfWTHYT6HzHF7ERdH4KcdRAJs9h9PrlE4=)
5: loP1-9Yxdj4AbH_rrSqa5GcHgiQ.roa (hash: M03ifXkLsZpfGj/FUbAJuSvBmjEYd8yCYHsKRiZZ6dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:92:79:35:83:63:65:36:1e:bc:b3:80:75:b8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Sep 28 13:03:01 2026 GMT
Not After : Sep 29 13:03:01 2026 GMT
Subject: CN=a38954722d94b58c3abbf5a5b1b617c67f091b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:ed:0d:24:10:e3:47:22:d8:6f:55:c5:61:
b7:8b:db:3b:5f:70:9a:e7:ac:eb:31:78:18:a8:42:
8d:3e:a1:43:3e:97:e1:4b:8e:e0:7f:17:a7:39:4b:
8c:1f:e4:c7:5f:09:52:0f:66:43:2e:c5:53:ba:46:
08:ad:3b:14:55:d8:dd:19:00:3c:7c:f4:19:5c:f0:
2e:c0:6b:58:12:e2:13:15:05:a3:60:7f:f0:51:1c:
62:c4:2c:15:e3:fb:d3:a8:b9:ea:ad:56:17:09:49:
3c:9f:9d:d1:c1:f0:78:73:43:10:1c:69:fb:58:f6:
7a:3c:d2:e0:0a:22:f8:7a:73:f6:dd:47:67:8d:ae:
7f:27:0a:81:9e:c1:bd:8d:19:85:9e:f5:4d:df:81:
59:fe:88:67:4e:49:0e:13:76:26:b7:de:29:a1:78:
c0:d8:84:f6:82:e1:57:48:e5:38:6d:b8:fb:18:6f:
c6:7a:ee:62:71:a8:7e:93:81:14:2d:5a:74:8b:49:
c0:d1:e5:1d:94:6c:e6:29:9e:8a:c6:4c:ca:38:ba:
ed:c6:54:34:f3:c9:63:ac:32:cd:e5:ad:65:aa:45:
e9:a7:8c:db:4f:79:70:8b:93:69:c5:79:37:b8:09:
6d:e4:e0:55:7a:06:b9:a7:2b:17:e4:16:4c:93:c6:
13:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:89:54:72:2D:94:B5:8C:3A:BB:F5:A5:B1:B6:17:C6:7F:09:1B:54
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:da:2c:77:13:f2:c8:11:83:03:de:cf:d7:1b:6f:3f:f8:2f:
3c:3d:e5:80:e3:b2:c3:38:58:77:ee:2c:62:a6:9d:45:50:b1:
3c:c7:c8:b8:5a:5f:b0:8a:2c:31:02:7d:7e:19:45:46:d7:49:
e8:09:73:6b:0c:6f:73:f2:a6:02:52:38:17:51:25:7e:74:5c:
3c:cc:ae:e0:12:a6:94:7d:13:8c:d4:41:e3:8f:5a:a6:4f:62:
2a:fb:85:a9:92:33:6d:d6:a9:4f:2d:12:cc:85:8f:23:26:b8:
49:91:03:7f:d6:35:ed:2d:10:c3:c3:d2:79:7b:2f:e8:a6:8c:
80:f7:ab:fb:b2:43:88:4b:af:60:c1:53:13:ee:71:62:65:64:
a9:29:98:46:7e:58:b4:55:87:bb:f8:60:64:90:1e:92:27:d6:
6e:72:71:e4:b0:46:4e:0d:b7:77:1e:86:2a:d0:2c:03:48:e1:
43:c3:2a:70:3b:aa:6a:ed:bd:0e:9e:40:6c:6a:a2:6d:02:ec:
6c:01:e3:8c:b9:f1:cf:df:3c:66:e6:54:29:cd:98:e2:bf:e4:
cd:ef:1d:9e:66:f9:66:5d:0a:c3:f8:64:98:44:fb:6e:4d:d0:
90:94:c4:39:b7:e2:58:fd:0a:30:17:dc:08:55:e6:4f:d3:a3:
d5:0b:77:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoHJJ5NYNjZTYevLOAdbjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjY4NGEyOTU4ZTAxOTBmMjcwYTgwYTk4Nzg5MzE5ZTFj
ZWU0ZDgwHhcNMjYwOTI4MTMwMzAxWhcNMjYwOTI5MTMwMzAxWjAzMTEwLwYDVQQD
EyhhMzg5NTQ3MjJkOTRiNThjM2FiYmY1YTViMWI2MTdjNjdmMDkxYjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT3tDSQQ40ci2G9VxWG3i9s7X3Ca
56zrMXgYqEKNPqFDPpfhS47gfxenOUuMH+THXwlSD2ZDLsVTukYIrTsUVdjdGQA8
fPQZXPAuwGtYEuITFQWjYH/wURxixCwV4/vTqLnqrVYXCUk8n53RwfB4c0MQHGn7
WPZ6PNLgCiL4enP23Udnja5/JwqBnsG9jRmFnvVN34FZ/ohnTkkOE3Ymt94poXjA
2IT2guFXSOU4bbj7GG/Geu5icah+k4EULVp0i0nA0eUdlGzmKZ6KxkzKOLrtxlQ0
88ljrDLN5a1lqkXpp4zbT3lwi5NpxXk3uAlt5OBVega5pysX5BZMk8YToQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOJVHItlLWMOrv1pbG2F8Z/CRtUMB8GA1UdIwQY
MBaAFIFmhKKVjgGQ8nCoCph4kxnhzuTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUt
ZDU5MDMwNjYxOTQ5LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUtZDU5MDMwNjYxOTQ5
LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9osdxPy
yBGDA97P1xtvP/gvPD3lgOOywzhYd+4sYqadRVCxPMfIuFpfsIosMQJ9fhlFRtdJ
6Alzawxvc/KmAlI4F1ElfnRcPMyu4BKmlH0TjNRB449apk9iKvuFqZIzbdapTy0S
zIWPIya4SZEDf9Y17S0Qw8PSeXsv6KaMgPer+7JDiEuvYMFTE+5xYmVkqSmYRn5Y
tFWHu/hgZJAekifWbnJx5LBGTg23dx6GKtAsA0jhQ8MqcDuqau29Dp5AbGqibQLs
bAHjjLnxz988ZuZUKc2Y4r/kze8dnmb5Zl0Kw/hkmET7bk3QkJTEObfiWP0KMBfc
CFXmT9Oj1Qt34w==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:22:30 2026 by rpki-client