Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: VqZPx3lb6ZIh0d5OJuKSyxMOkaov4zPYqkfMZFIX2Ms=
Subject key identifier: 27:31:D5:1E:A2:08:73:F5:E3:C0:2D:60:03:E5:0C:94:42:B9:D4:ED
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019D9AABC43AB675556FFDD7D3AEB29874D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0C7F
Signing time: Fri 17 Apr 2026 09:00:41 +0000
Manifest this update: Fri 17 Apr 2026 09:00:41 +0000
Manifest next update: Sat 18 Apr 2026 09:00:41 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: nqvBQgxQWgv1Hif98idyEc1FfZ8lX/CGjq84MsTJoIs=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c4:3a:b6:75:55:6f:fd:d7:d3:ae:b2:98:74:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Apr 17 09:00:41 2026 GMT
Not After : Apr 18 09:00:41 2026 GMT
Subject: CN=2731d51ea20873f5e3c02d6003e50c9442b9d4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:e9:ff:74:90:52:e6:57:c3:48:bb:72:28:
31:34:c7:b2:60:e0:95:ff:fa:91:66:a9:4c:fa:9d:
7f:54:e6:e7:1b:4d:52:11:2b:ca:7d:68:5f:4f:ee:
fc:f1:a9:43:04:9e:bf:66:02:23:dd:8c:e8:58:dc:
8a:8b:f9:6a:19:5c:d4:2a:a4:a0:69:0b:27:7c:ed:
c8:46:71:47:46:29:dd:ed:e7:17:63:04:e0:aa:7f:
37:34:6c:be:7a:83:4d:3b:a0:35:28:ba:42:00:79:
dc:b5:1a:85:9a:63:d3:7f:8d:62:a3:d3:c2:af:c4:
6b:61:a2:de:34:f1:8d:e7:73:70:17:48:e7:a0:a3:
de:73:eb:99:da:5f:a5:9f:4a:db:c6:f6:b2:be:90:
08:7a:fd:bd:cf:9d:8c:d1:32:d4:e9:f6:15:d5:4a:
06:0a:66:c3:17:a7:e5:26:40:1e:2d:b4:ea:cb:84:
4d:3d:ca:2e:4b:c6:d6:b0:ef:33:70:a2:36:0f:38:
93:50:2d:bf:14:c7:50:14:e8:39:00:f9:36:50:c7:
11:8f:4c:1b:12:3e:17:7c:1d:84:c4:a5:42:17:52:
88:d7:f4:bb:bd:b8:b2:ac:d9:80:dd:53:f9:30:cf:
7d:33:da:61:82:85:2d:bd:5a:97:be:49:a9:cd:a3:
9f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:31:D5:1E:A2:08:73:F5:E3:C0:2D:60:03:E5:0C:94:42:B9:D4:ED
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:fe:8d:75:2e:4d:14:7d:bb:ee:a7:72:fe:11:c1:0b:04:56:
31:2c:b3:0c:89:f7:bb:9b:c0:3d:db:dc:40:85:df:3d:b7:89:
0c:04:7a:fa:a4:ef:71:b8:3a:bb:16:51:ec:3e:38:55:2e:24:
c7:54:41:6d:7f:ba:73:da:89:c5:81:73:ef:e7:20:79:9d:5c:
ff:4f:d9:9f:71:eb:ee:fc:c4:16:dc:1e:0a:e0:a2:76:56:9b:
0b:a9:2c:9d:da:96:25:95:61:ad:b3:12:44:e2:5c:7a:df:62:
e6:1c:b9:4b:cd:56:c7:6d:b4:df:08:8e:d3:5a:46:8c:a0:70:
1c:4f:b1:35:99:3c:c1:8f:76:dd:67:a1:b8:b8:d8:7c:05:f3:
ae:5c:9a:be:04:6a:a6:ea:49:67:27:64:8b:27:46:f6:90:0a:
ca:44:19:bd:83:cf:55:3b:4d:85:aa:e8:35:b3:41:3d:65:a5:
f2:b6:55:9c:38:5b:40:e1:63:45:cd:08:20:77:0c:9b:78:01:
4b:8f:22:d4:b3:d1:2f:25:64:89:29:43:fd:2d:a2:a5:77:c3:
f3:95:91:51:f7:b8:45:98:ff:66:2d:4d:a5:87:6d:5a:8c:86:
6d:bc:71:a3:e7:2c:fe:12:bd:cc:68:87:ee:35:97:6b:55:45:
a7:d6:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:37 2026 by rpki-client