Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: kgy7FefZz1/xAoMGt0GGmDGeoAv97IamLmDuS0OcSl4=
Subject key identifier: EA:6E:6A:6B:32:BA:2D:45:0D:FB:6C:35:E2:96:9A:68:8F:8C:17:35
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 01A0C8C701B592AA1E30CA045FB4C2EB8827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 11:01:20 +0000
Manifest this update: Tue 22 Sep 2026 11:01:20 +0000
Manifest next update: Wed 23 Sep 2026 11:01:20 +0000
Files and hashes: 1: 1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa (hash: riRb4iPkDBtyw2U0WQzBeSsFtt3y8g90iqUigaVwK4I=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: ODx9PbwDR5hsS/2ly6aTaBiAv6LTPctXDRcfxL7xjyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c7:01:b5:92:aa:1e:30:ca:04:5f:b4:c2:eb:88:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Sep 22 11:01:20 2026 GMT
Not After : Sep 23 11:01:20 2026 GMT
Subject: CN=ea6e6a6b32ba2d450dfb6c35e2969a688f8c1735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:6e:8b:94:9c:8f:17:0e:87:b7:b3:32:eb:
cb:08:7b:7c:86:33:e6:0e:0e:10:c1:f9:9a:1e:3b:
07:37:77:1b:24:65:41:0c:2f:41:6b:e6:bd:da:32:
db:69:d9:0e:7b:d8:79:cc:c0:ad:55:e5:18:e4:45:
4b:63:84:8c:4c:85:d9:50:6f:54:72:97:07:71:99:
e5:a2:cf:2d:4c:0e:27:71:4f:bb:f0:b5:ce:49:7c:
f6:79:b5:25:00:16:35:ad:14:73:17:d6:c3:a5:9a:
64:f9:47:31:db:36:95:88:3c:c3:ad:5f:02:e3:b1:
d9:f4:77:71:aa:c0:65:64:b9:c0:19:ca:60:f7:3c:
e4:0b:35:c6:2b:f5:31:c5:d6:86:ef:17:86:12:ef:
2b:8d:cb:40:53:d9:30:a1:c5:22:89:65:01:40:e0:
6b:3c:97:30:19:f3:f7:6f:f2:07:a6:f6:c4:df:83:
85:a3:07:10:39:3a:51:9f:46:46:71:7f:46:2e:0a:
ec:bb:c9:c9:f2:b8:71:64:9e:d0:d6:05:e2:a7:c2:
06:ac:09:69:fd:67:8c:33:b8:33:69:ca:9a:f9:46:
31:dd:82:53:da:2b:c8:da:4b:05:46:5d:8e:a7:de:
9f:b3:43:d5:3f:74:bc:f9:f4:2f:fc:2c:b1:cf:21:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6E:6A:6B:32:BA:2D:45:0D:FB:6C:35:E2:96:9A:68:8F:8C:17:35
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ac:bd:ac:c4:4d:fc:c4:76:28:da:de:17:f4:94:39:b3:d8:
d2:d3:44:8f:e9:a7:6b:90:f9:28:29:1e:39:cc:a1:83:cc:aa:
62:3b:0a:d1:37:aa:0b:6c:94:df:06:d8:c6:ac:c5:80:22:d8:
68:5d:27:26:33:5f:03:35:5d:52:cd:4a:12:79:48:6a:cf:b3:
c6:76:f4:b8:15:aa:e5:db:ea:a6:a4:98:3b:4d:34:09:a8:0c:
36:f1:b7:20:05:c1:0e:51:05:a4:e1:3c:52:5f:6d:4a:a3:2f:
aa:0b:d6:48:bf:66:3e:59:de:bc:83:1f:dc:1d:31:55:27:14:
d3:15:25:36:e8:d8:62:a8:f6:42:47:e7:ba:82:d6:4a:ce:44:
1a:5f:72:4d:5a:aa:65:4b:70:0a:71:c6:8e:d4:79:ae:1f:3d:
d5:37:94:39:8e:a9:ef:e4:e0:d2:d9:f6:90:00:a4:14:e2:6e:
9e:cb:eb:b8:1b:c5:15:73:a8:0f:ca:d9:32:d1:da:4c:c0:18:
43:8a:2e:f4:9d:c2:7d:f0:79:ae:cf:e8:3c:ee:2f:30:6d:80:
2c:5a:c5:ce:19:e0:2a:07:29:09:d6:38:a8:74:a5:62:5e:cd:
1b:64:fb:c5:19:be:b9:19:19:fa:bb:0b:9d:4c:7c:ca:34:66:
6c:00:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:38 2026 by rpki-client