Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: qL/vzYu5YfV0zr1pn59spsA3tj7WD6/ulLkCTtK2+Ts=
Subject key identifier: F1:34:48:E5:28:62:F7:94:C3:C0:A7:84:23:C0:CA:99:A0:00:C7:93
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 01A10F5EBE86ADB1B0248108351E9FDF499B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0FB5
Signing time: Tue 06 Oct 2026 04:00:29 +0000
Manifest this update: Tue 06 Oct 2026 04:00:29 +0000
Manifest next update: Wed 07 Oct 2026 04:00:29 +0000
Files and hashes: 1: fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa (hash: LXNlsf10QtsQkHE8Tm9n4uZsh/ON6f1nhNppQ718O5s=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: lBarkMRDZ43rCbyEf0uWSZ2gSM759pCxG3dBHBhr3O8=)
3: xG0VUDOknHsZasT5TDaZxzA4pvE.roa (hash: Xzghi2lIosJPiXM8pVY4mOf1fz9gQv7/1SCn9lu4mdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:5e:be:86:ad:b1:b0:24:81:08:35:1e:9f:df:49:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Oct 6 04:00:29 2026 GMT
Not After : Oct 7 04:00:29 2026 GMT
Subject: CN=f13448e52862f794c3c0a78423c0ca99a000c793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:52:00:22:b5:cb:ba:4a:56:f1:1f:fd:98:
c3:8f:19:1d:51:35:a8:03:aa:56:f0:35:aa:db:e7:
b4:79:09:cf:1e:df:91:b8:21:b8:ea:b4:00:e0:ee:
b4:5d:79:fc:98:4e:95:c5:f3:16:79:6f:2d:76:0f:
14:89:4a:86:2a:df:31:c0:97:35:cc:55:e1:43:f1:
d6:ea:f2:71:21:46:a6:d5:b1:dc:fb:c7:a5:b3:42:
00:41:ef:68:d8:24:b8:14:d5:bc:e0:13:a1:65:0d:
34:dd:1d:89:88:3c:06:8e:65:e2:70:71:ca:ef:a6:
e2:bd:37:75:79:fd:4c:88:d8:93:c2:51:f5:29:8c:
fe:e5:e5:11:45:1d:ec:4a:2d:f3:47:36:6c:3d:1b:
ff:c2:ad:d0:c5:ca:dd:f1:6d:ba:93:77:7d:7f:bb:
7e:51:f3:d1:90:15:eb:76:12:3b:44:12:0e:85:fe:
84:d5:fc:1e:69:3f:86:64:d8:df:c8:d3:a2:89:92:
5b:e0:94:f5:5d:18:d2:b4:33:85:1f:32:fd:7c:bf:
87:91:07:70:15:53:ed:3d:30:7d:a5:bf:71:98:21:
6c:8c:46:f1:0a:80:3b:fc:01:e4:1b:b9:09:1c:1b:
5e:22:49:bc:0d:12:df:57:56:92:99:77:ed:38:15:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:48:E5:28:62:F7:94:C3:C0:A7:84:23:C0:CA:99:A0:00:C7:93
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:05:6c:21:09:f6:b7:d3:77:fa:a7:3f:31:53:3d:17:70:24:
ab:17:fe:be:08:c3:6d:67:c1:d0:6c:9a:6a:6a:1f:a3:c6:ee:
82:d8:21:af:e5:c2:66:78:06:0c:28:89:ad:09:80:ec:69:43:
00:7b:46:55:ea:0f:e7:ef:56:26:2b:3a:52:ba:f8:14:ac:04:
f7:7b:db:c3:34:39:70:da:79:18:e4:22:b3:33:9e:58:3d:33:
8b:69:5c:ad:59:e1:39:6e:38:b9:cb:5c:fc:29:96:bd:c7:79:
e7:3c:66:7f:91:e6:a4:fa:10:2a:9b:de:ac:5b:7e:46:f9:aa:
ee:8b:97:b2:73:27:13:64:33:c3:68:8d:90:63:d5:25:df:01:
d3:99:36:a2:dd:61:07:c2:75:ee:14:b2:fc:ed:d0:87:52:d9:
33:0f:1d:9a:3e:1e:7c:6a:3b:49:a9:9a:6a:d2:22:ce:76:4c:
13:53:a0:7e:a2:5e:6f:2b:2e:b6:a7:f7:51:5c:1e:55:67:7f:
80:3d:40:95:99:17:7e:dc:f3:21:71:b3:ac:7c:cb:7e:40:1b:
88:74:57:9f:7d:3d:93:85:af:9c:fc:12:87:6f:f2:65:13:03:
0b:0b:e2:eb:e7:fb:2e:5e:d9:b1:8d:49:f4:47:73:71:2c:2d:
ee:41:47:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:31:19 2026 by rpki-client