Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: uv3ogyVKN/EW/1+xSRTqIJog16JpCr6jA9VxPi9dFvc=
Subject key identifier: 8F:65:74:AA:EA:CD:87:B4:03:A4:94:8F:D5:40:A9:8D:40:50:04:54
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 01A0E1744D025EE29102BFA7F9FD78B42C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 06:01:30 +0000
Manifest this update: Sun 27 Sep 2026 06:01:30 +0000
Manifest next update: Mon 28 Sep 2026 06:01:30 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: qowdlKzrwcSqgWDWdR/JId5/SbWvE1a7aS2U/DibZ90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:4d:02:5e:e2:91:02:bf:a7:f9:fd:78:b4:2c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Sep 27 06:01:30 2026 GMT
Not After : Sep 28 06:01:30 2026 GMT
Subject: CN=8f6574aaeacd87b403a4948fd540a98d40500454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:30:37:b6:2b:be:15:f0:a6:a6:39:28:53:
bc:ea:64:ec:6a:cf:74:38:42:5a:8a:b2:cb:d0:de:
26:7e:7f:ac:0b:bd:26:0b:35:2c:82:41:ab:26:c9:
30:d4:69:cb:ec:54:ff:4c:9f:e7:7a:80:f2:dd:1d:
32:f6:ea:99:e0:e7:c4:aa:da:e0:45:22:8a:89:9b:
1a:1a:96:17:c4:5d:ea:fe:86:9d:94:5f:90:ef:51:
ae:c2:0e:62:f1:37:61:58:5c:4f:f0:dd:32:2b:ac:
5f:16:2d:d7:fb:0f:66:a9:cc:ca:24:20:1b:71:fd:
b6:a6:bc:c4:11:a5:b8:af:ce:8a:39:a7:e2:6b:2c:
62:e6:7c:e6:b5:7a:fb:59:fa:c5:e2:b4:da:c8:be:
05:ca:93:53:05:22:53:1a:4a:a6:6a:be:24:1d:b0:
de:0b:1f:bb:3f:fd:71:8c:8d:64:e6:65:cf:06:0a:
a8:95:89:2c:67:fd:57:8a:5e:27:29:4b:1f:80:ce:
50:9e:5a:ac:10:40:7a:50:c2:30:88:77:15:21:49:
ad:d1:74:2a:0b:42:c7:d1:b9:4e:2d:1d:21:c4:63:
5f:a4:e6:8f:3d:a6:a9:f0:a7:b5:bb:c5:8a:b2:a0:
39:4b:23:40:13:b7:28:ce:ed:aa:4e:bc:21:7d:bb:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:65:74:AA:EA:CD:87:B4:03:A4:94:8F:D5:40:A9:8D:40:50:04:54
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9f:48:82:eb:15:cf:10:ad:c7:f6:18:30:db:96:95:ef:39:
c7:79:bd:29:d1:fd:06:5d:26:ba:64:cb:d7:fc:43:c4:54:67:
e6:f7:24:27:4e:16:b7:05:1d:27:91:4b:9b:44:6e:92:ae:c7:
b1:39:d4:ea:1a:8f:4a:a0:01:46:d6:c2:44:9b:98:78:05:2b:
90:d2:b5:bc:51:8e:8c:fb:bf:de:60:42:69:15:57:8f:31:1a:
cc:36:d3:18:a2:1a:0e:de:a3:b1:82:35:bf:6f:c8:cc:a3:a7:
b9:92:15:d9:77:6a:74:f8:0e:a3:93:18:66:23:fc:42:7c:f3:
02:8d:51:62:2b:04:7b:25:10:11:a4:50:65:0c:a8:36:b1:95:
0f:26:16:65:7a:b2:e2:83:3d:77:fe:e4:1f:4b:85:5c:4e:f3:
e7:ae:8d:e2:72:cc:30:5c:32:de:5f:d6:70:29:79:67:78:b7:
a5:7b:03:39:dd:db:81:7f:d0:50:86:19:b6:fb:a5:cf:45:b4:
7a:87:7b:36:8d:9e:5c:ba:fc:e0:34:d9:2d:2d:2f:4f:e9:a3:
7d:0d:c5:00:44:22:3c:e0:2c:fe:7a:32:b2:25:34:50:84:5c:
41:b7:61:83:a9:24:46:f9:64:0b:7a:4c:fe:0c:63:0f:ae:12:
6f:f5:01:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdE0CXuKRAr+n+f14tCxeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMDQzZjIzOTM2NjIyODI0MTExZTg4NjVhNTAwMDIwNjdk
OTVhNjIwHhcNMjYwOTI3MDYwMTMwWhcNMjYwOTI4MDYwMTMwWjAzMTEwLwYDVQQD
Eyg4ZjY1NzRhYWVhY2Q4N2I0MDNhNDk0OGZkNTQwYTk4ZDQwNTAwNDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXEwN7YrvhXwpqY5KFO86mTsas90
OEJairLL0N4mfn+sC70mCzUsgkGrJskw1GnL7FT/TJ/neoDy3R0y9uqZ4OfEqtrg
RSKKiZsaGpYXxF3q/oadlF+Q71Guwg5i8TdhWFxP8N0yK6xfFi3X+w9mqczKJCAb
cf22przEEaW4r86KOafiayxi5nzmtXr7WfrF4rTayL4FypNTBSJTGkqmar4kHbDe
Cx+7P/1xjI1k5mXPBgqolYksZ/1Xil4nKUsfgM5QnlqsEEB6UMIwiHcVIUmt0XQq
C0LH0blOLR0hxGNfpOaPPaap8Ke1u8WKsqA5SyNAE7cozu2qTrwhfbsyHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9ldKrqzYe0A6SUj9VAqY1AUARUMB8GA1UdIwQY
MBaAFIAEPyOTZiKCQRHohlpQACBn2VpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zOWYyOGMtOWViOC00Y2FlLThkOTgt
NjhjZGM2OTJhZDA5LzEvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zOWYyOGMtOWViOC00Y2FlLThkOTgtNjhjZGM2OTJhZDA5
LzEvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJ9IgusV
zxCtx/YYMNuWle85x3m9KdH9Bl0mumTL1/xDxFRn5vckJ04WtwUdJ5FLm0Rukq7H
sTnU6hqPSqABRtbCRJuYeAUrkNK1vFGOjPu/3mBCaRVXjzEazDbTGKIaDt6jsYI1
v2/IzKOnuZIV2XdqdPgOo5MYZiP8QnzzAo1RYisEeyUQEaRQZQyoNrGVDyYWZXqy
4oM9d/7kH0uFXE7z566N4nLMMFwy3l/WcCl5Z3i3pXsDOd3bgX/QUIYZtvulz0W0
eod7No2eXLr84DTZLS0vT+mjfQ3FAEQiPOAs/noysiU0UIRcQbdhg6kkRvlkC3pM
/gxjD64Sb/UBrQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 17:16:03 2026 by rpki-client