Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier: fsfYKXJQKALC4RUk8z44fyY/GM8tNAL5vdMTU7QzKFY=
Subject key identifier: 20:D0:CF:D0:E5:3F:A9:1F:7D:F3:08:C4:5C:5D:F1:07:20:FC:9F:11
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 01A0CDB57B2370E1BB1695474E70AB3163AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number: 0FD5
Signing time: Wed 23 Sep 2026 10:00:17 +0000
Manifest this update: Wed 23 Sep 2026 10:00:17 +0000
Manifest next update: Thu 24 Sep 2026 10:00:17 +0000
Files and hashes: 1: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: CA4btklDZ/CCkPdGIoulqAzqQAgqExHvlbsBEjLM0gE=)
2: hQ9NotylFYMkqo3bbUqE9OBXr30.roa (hash: DDGD0ACVZ8p80B8GH1cwIOOojO6HokidqY08m4jPrFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:7b:23:70:e1:bb:16:95:47:4e:70:ab:31:63:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Sep 23 10:00:17 2026 GMT
Not After : Sep 24 10:00:17 2026 GMT
Subject: CN=20d0cfd0e53fa91f7df308c45c5df10720fc9f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:c3:31:55:d5:15:2f:2a:df:cc:56:9c:af:
7b:0d:b0:9c:6f:04:2e:c5:5e:03:ce:62:e1:23:11:
5d:88:84:49:19:8f:81:a4:a3:85:5a:58:11:9c:1f:
25:99:b5:59:67:d6:ba:3d:12:27:f7:83:55:fc:a4:
ab:1c:ed:d5:45:86:7a:e7:b6:aa:ad:4d:59:2a:e5:
48:8c:c5:7e:94:e0:65:3b:c9:c8:16:a9:85:21:12:
9b:c6:e8:0b:31:45:97:23:45:3b:f7:14:1f:16:1a:
b9:d4:9a:3f:d5:94:7b:ea:69:cf:9c:1e:20:89:00:
de:24:ef:cf:c4:4e:6d:1b:a6:76:54:a8:62:52:2b:
c5:3b:84:fa:fd:67:64:5a:55:00:d6:46:bf:24:61:
5d:91:f9:e9:9f:74:c2:d0:37:55:ab:8c:c0:65:8d:
bc:6c:dc:d1:24:fb:1c:e4:b1:d1:df:44:5a:83:48:
0e:f4:ed:8c:64:2e:9b:96:b2:f2:bb:4e:2e:8d:4e:
80:40:9f:9f:7a:96:1e:58:8a:85:f4:fa:48:03:f6:
58:6c:25:1d:37:b0:2d:e9:cc:a1:6c:50:db:10:e3:
ff:21:1e:d6:07:4e:00:16:b5:cd:4c:7d:b7:e4:6b:
ae:1a:21:8f:a8:6a:e9:2e:c9:fc:59:9f:a1:f3:b4:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D0:CF:D0:E5:3F:A9:1F:7D:F3:08:C4:5C:5D:F1:07:20:FC:9F:11
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:43:14:76:34:50:ef:52:ab:0a:0f:da:95:6d:14:19:57:28:
42:e7:e3:a7:4c:50:4a:4d:07:52:36:40:27:54:fc:db:8a:7a:
82:eb:1a:03:a5:cc:cf:10:f9:04:9a:bd:eb:8b:d8:ae:42:dc:
4d:0e:a5:b7:00:e5:3e:cf:24:a9:e3:3c:c7:10:4a:7d:3b:87:
5b:64:d3:f8:1b:5f:7e:7c:1b:2e:3e:be:24:97:03:7a:82:88:
7c:e6:f3:af:d8:53:8e:7b:80:d2:69:58:a2:3f:8b:dc:a0:83:
aa:98:b2:cc:2b:a5:01:73:f0:25:3c:9e:78:70:df:78:f4:3b:
8f:f6:77:7f:c9:a0:43:da:00:27:92:88:b4:cd:5e:82:7a:59:
4a:18:3d:3c:18:25:e1:cd:b7:3f:a2:f4:6a:e3:89:99:39:1d:
2a:1a:fb:bf:25:32:85:00:7f:4d:61:a4:a1:fa:83:23:ef:76:
5c:41:6f:d2:fc:86:51:f4:8c:8b:32:fe:3e:49:1f:93:82:4d:
5c:8a:e2:4a:f0:6a:61:72:0e:79:57:b0:ee:81:b2:6d:5e:75:
2c:21:1c:6c:ec:08:55:8c:32:4e:3b:ad:36:7f:7d:84:e3:7d:
dc:22:05:48:ee:2b:be:e5:d7:a3:34:a0:eb:24:52:d6:db:44:
90:ec:14:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNtXsjcOG7FpVHTnCrMWOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMzEyNDBiZGFhN2MxMmU4MTBhMTczOGJjZGY3NWE3NDY1
MzBiYzEwHhcNMjYwOTIzMTAwMDE3WhcNMjYwOTI0MTAwMDE3WjAzMTEwLwYDVQQD
EygyMGQwY2ZkMGU1M2ZhOTFmN2RmMzA4YzQ1YzVkZjEwNzIwZmM5ZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunXDMVXVFS8q38xWnK97DbCcbwQu
xV4DzmLhIxFdiIRJGY+BpKOFWlgRnB8lmbVZZ9a6PRIn94NV/KSrHO3VRYZ657aq
rU1ZKuVIjMV+lOBlO8nIFqmFIRKbxugLMUWXI0U79xQfFhq51Jo/1ZR76mnPnB4g
iQDeJO/PxE5tG6Z2VKhiUivFO4T6/WdkWlUA1ka/JGFdkfnpn3TC0DdVq4zAZY28
bNzRJPsc5LHR30Rag0gO9O2MZC6blrLyu04ujU6AQJ+fepYeWIqF9PpIA/ZYbCUd
N7At6cyhbFDbEOP/IR7WB04AFrXNTH235GuuGiGPqGrpLsn8WZ+h87RXIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDQz9DlP6kfffMIxFxd8Qcg/J8RMB8GA1UdIwQY
MBaAFIExJAvap8EugQoXOLzfdadGUwvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUt
ZTllMDIzNjA5YzdmLzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUtZTllMDIzNjA5Yzdm
LzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEMUdjRQ
71KrCg/alW0UGVcoQufjp0xQSk0HUjZAJ1T824p6gusaA6XMzxD5BJq964vYrkLc
TQ6ltwDlPs8kqeM8xxBKfTuHW2TT+BtffnwbLj6+JJcDeoKIfObzr9hTjnuA0mlY
oj+L3KCDqpiyzCulAXPwJTyeeHDfePQ7j/Z3f8mgQ9oAJ5KItM1egnpZShg9PBgl
4c23P6L0auOJmTkdKhr7vyUyhQB/TWGkofqDI+92XEFv0vyGUfSMizL+Pkkfk4JN
XIriSvBqYXIOeVew7oGybV51LCEcbOwIVYwyTjutNn99hON93CIFSO4rvuXXozSg
6yRS1ttEkOwU/A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:10:33 2026 by rpki-client