Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
File: gFOrw9SfVluUh47Y8iDOMn-XSjI.mft (raw, json)
Hash identifier: y+g9t+4+hasbevDiYoMDHFMXaVbxOZAtV6bJJL/rgsI=
Subject key identifier: BB:9E:39:14:30:23:A5:32:23:65:4E:15:BA:1D:B8:17:05:8A:B7:C6
Authority key identifier: 80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
Certificate issuer: /CN=8053abc3d49f565b94878ed8f220ce327f974a32
Certificate serial: 019FA9077D1E00D4CC6A109E339DBAE4F1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
Manifest number: D0
Signing time: Tue 28 Jul 2026 14:01:07 +0000
Manifest this update: Tue 28 Jul 2026 14:01:07 +0000
Manifest next update: Wed 29 Jul 2026 14:01:07 +0000
Files and hashes: 1: GPJ5YibQX7Qs5zXj8y25gwD4O7o.roa (hash: dw68P8crMQR+t7pqyZ2DtV9eQd5KOVoGJFGq3g9A+8E=)
2: _5dlpHFSfnZB5fPESdwe0vcQoK0.roa (hash: 648yr+Yw2hgriwVmDfKLpfCh/5rjlF0ILGcl2PNzoO4=)
3: gFOrw9SfVluUh47Y8iDOMn-XSjI.crl (hash: gi8H16ta6Asza4kWq1Kc6qjKKtlKdpQMElvt6bZm+wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:7d:1e:00:d4:cc:6a:10:9e:33:9d:ba:e4:f1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053abc3d49f565b94878ed8f220ce327f974a32
Validity
Not Before: Jul 28 14:01:07 2026 GMT
Not After : Jul 29 14:01:07 2026 GMT
Subject: CN=bb9e39143023a53223654e15ba1db817058ab7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:8f:d3:15:ca:e5:55:0b:b5:53:ff:db:78:
f8:ac:ea:49:41:7c:23:53:20:47:6b:27:a4:c7:8f:
69:3e:ca:6d:23:b8:86:48:5a:ff:f6:02:66:fa:71:
44:9a:91:57:03:38:61:81:e3:1d:fb:ff:a3:a6:bd:
5f:bc:d5:ad:9b:dc:ec:67:db:4d:72:91:0a:db:e3:
f6:19:9b:7b:80:3f:4c:c8:96:02:39:b5:e8:dd:df:
fa:2d:d3:be:55:39:30:c3:10:ea:f1:0a:da:5e:09:
bf:b3:0c:4c:db:48:20:53:b6:10:47:b1:99:83:76:
28:2c:55:1d:cb:1b:8f:c5:7a:e0:9d:5f:81:0e:13:
68:41:c5:a2:dc:0e:03:34:b8:bc:69:eb:65:a0:c5:
92:5d:a1:40:45:53:92:78:a6:8a:1b:32:05:df:a7:
51:a9:f9:e6:28:f7:b7:d3:46:c6:26:ce:14:fb:c2:
c2:54:ec:db:46:b8:83:a0:ae:9d:51:14:4b:b1:af:
7a:16:17:8b:10:b7:24:d0:58:e4:64:3a:ef:01:3b:
44:cb:61:f5:cd:44:ad:b2:3f:89:60:e7:4f:72:e6:
f8:ce:3f:aa:e4:aa:9e:a1:44:5e:54:58:74:6c:b6:
d6:41:08:cd:50:1c:77:ce:7a:89:a6:b5:a2:a1:65:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9E:39:14:30:23:A5:32:23:65:4E:15:BA:1D:B8:17:05:8A:B7:C6
X509v3 Authority Key Identifier:
keyid:80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:60:d1:33:9b:1e:aa:4b:7a:81:6e:d2:7b:c6:4b:12:f0:e8:
2e:63:e1:3c:f8:a2:13:e8:25:ff:86:14:3e:6b:42:23:2c:6e:
69:37:87:0f:e0:51:b8:ad:75:f0:0c:4a:9e:b9:dc:6e:9d:96:
60:a8:ad:3c:fe:85:86:1a:f5:67:80:28:dd:93:56:67:1d:ec:
98:c4:44:0e:ed:71:e6:b9:45:16:d2:a3:65:89:10:47:5e:7b:
2b:c7:d6:fb:0e:59:41:1a:24:af:b7:0c:36:d8:13:d3:a8:ed:
5b:5c:c7:b8:27:32:f5:c9:ef:8c:d1:90:c0:32:f9:a5:80:94:
3c:3c:74:7f:6c:17:a0:04:52:d2:5e:94:6e:5d:e3:da:17:72:
28:ec:92:4b:b5:82:c7:5d:62:1a:10:2a:bb:2f:4e:50:f9:b3:
34:3d:9b:33:0e:33:bb:f9:84:d7:4b:5d:e5:78:ab:2d:5e:02:
ab:2a:cf:27:88:31:4b:14:0e:af:80:27:f8:88:1a:4c:20:51:
ab:c8:6d:d4:07:d2:04:60:8d:ef:3a:5f:4e:b8:20:e0:79:b8:
65:55:fe:4b:34:0a:f8:55:c7:c3:ae:7f:08:87:44:32:9e:29:
ca:84:a3:88:a9:63:56:26:cb:06:02:63:40:46:56:f1:be:6b:
9b:f5:ad:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB30eANTMahCeM5265PHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNTNhYmMzZDQ5ZjU2NWI5NDg3OGVkOGYyMjBjZTMyN2Y5
NzRhMzIwHhcNMjYwNzI4MTQwMTA3WhcNMjYwNzI5MTQwMTA3WjAzMTEwLwYDVQQD
EyhiYjllMzkxNDMwMjNhNTMyMjM2NTRlMTViYTFkYjgxNzA1OGFiN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaWP0xXK5VULtVP/23j4rOpJQXwj
UyBHayekx49pPsptI7iGSFr/9gJm+nFEmpFXAzhhgeMd+/+jpr1fvNWtm9zsZ9tN
cpEK2+P2GZt7gD9MyJYCObXo3d/6LdO+VTkwwxDq8QraXgm/swxM20ggU7YQR7GZ
g3YoLFUdyxuPxXrgnV+BDhNoQcWi3A4DNLi8aetloMWSXaFARVOSeKaKGzIF36dR
qfnmKPe300bGJs4U+8LCVOzbRriDoK6dURRLsa96FheLELck0FjkZDrvATtEy2H1
zUStsj+JYOdPcub4zj+q5KqeoUReVFh0bLbWQQjNUBx3znqJprWioWW8TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLueORQwI6UyI2VOFboduBcFirfGMB8GA1UdIwQY
MBaAFIBTq8PUn1ZblIeO2PIgzjJ/l0oyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0ZPcnc5U2ZWbHVVaDQ3WThpRE9Nbi1YU2pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85YWFkNmMtZTAxZC00MTMzLWE2M2Yt
MDUzMGE2Y2ZmYTNjLzEvZ0ZPcnc5U2ZWbHVVaDQ3WThpRE9Nbi1YU2pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85YWFkNmMtZTAxZC00MTMzLWE2M2YtMDUzMGE2Y2ZmYTNj
LzEvZ0ZPcnc5U2ZWbHVVaDQ3WThpRE9Nbi1YU2pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGDRM5se
qkt6gW7Se8ZLEvDoLmPhPPiiE+gl/4YUPmtCIyxuaTeHD+BRuK118AxKnrncbp2W
YKitPP6Fhhr1Z4Ao3ZNWZx3smMREDu1x5rlFFtKjZYkQR157K8fW+w5ZQRokr7cM
NtgT06jtW1zHuCcy9cnvjNGQwDL5pYCUPDx0f2wXoARS0l6Ubl3j2hdyKOySS7WC
x11iGhAquy9OUPmzND2bMw4zu/mE10td5XirLV4CqyrPJ4gxSxQOr4An+IgaTCBR
q8ht1AfSBGCN7zpfTrgg4Hm4ZVX+SzQK+FXHw65/CIdEMp4pyoSjiKljVibLBgJj
QEZW8b5rm/WtfQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:47:05 2026 by rpki-client