Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: hmkouECAZsw6VLSc4bnhKnk5ES/1EvBtQvU9Ajmxd8w=
Subject key identifier: F8:85:DA:FD:45:48:CD:3A:88:11:D4:5C:BC:1E:6B:AC:C6:A8:13:71
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019CAD22EA3B2C4D88F302583761A53DB1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0C04
Signing time: Mon 02 Mar 2026 06:01:12 +0000
Manifest this update: Mon 02 Mar 2026 06:01:12 +0000
Manifest next update: Tue 03 Mar 2026 06:01:12 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: B9Ui+rCbyoVSbJvWkMekgpLKLxDUYH7i+s2FcMyIzT4=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ea:3b:2c:4d:88:f3:02:58:37:61:a5:3d:b1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Mar 2 06:01:12 2026 GMT
Not After : Mar 3 06:01:12 2026 GMT
Subject: CN=f885dafd4548cd3a8811d45cbc1e6bacc6a81371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:d1:0c:9d:e9:91:ba:c0:87:0d:91:91:1b:
8e:d5:fd:37:1d:bd:f7:1c:26:27:ce:21:3b:33:6c:
db:c8:6a:a2:26:ff:9a:f5:31:94:52:cc:6d:4b:52:
07:00:81:41:28:fe:ff:95:5f:17:37:3c:31:10:dd:
d8:af:db:d1:e4:3f:1c:e8:a7:b1:4d:fe:ca:58:9b:
83:40:d1:99:8f:aa:c3:5a:2f:01:e9:90:06:cb:2c:
b3:87:2b:f7:cb:f8:64:94:8e:52:0a:0c:2a:83:ac:
cc:ef:88:af:b0:52:84:5b:ea:89:54:65:8a:0b:f6:
19:d0:fe:57:9c:30:17:87:37:e8:df:29:33:3f:79:
a7:27:f9:00:43:f7:5e:41:e3:02:93:52:d1:22:d7:
45:07:ed:c9:42:31:d9:f1:2b:f2:eb:b9:31:66:80:
8a:c3:56:bb:a5:84:27:00:49:7e:40:2f:27:5e:29:
3c:9a:8e:49:37:8c:f0:af:9f:ee:b7:26:73:ee:c6:
3d:2c:63:43:0d:08:b0:49:e3:84:4c:eb:3b:8c:76:
3a:68:10:3a:09:92:23:95:df:d0:ba:d5:93:31:2d:
9a:ed:f7:bc:fa:36:27:4a:6b:b7:fc:23:74:05:4b:
e5:d7:00:87:57:f7:16:16:20:e0:43:fa:fe:c1:b1:
dc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:85:DA:FD:45:48:CD:3A:88:11:D4:5C:BC:1E:6B:AC:C6:A8:13:71
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:53:78:3b:70:4b:99:ca:81:8d:2c:44:43:d7:00:69:5a:94:
9f:30:ac:e0:40:45:cf:55:fc:55:5b:fa:dc:13:29:0d:68:19:
cf:7a:f3:aa:ce:41:30:00:82:d0:50:b1:a4:50:43:4d:45:e5:
98:f7:7c:ed:3e:a3:13:a7:f1:82:66:db:56:c8:74:c7:94:d6:
63:64:f6:d9:cb:fa:e0:b7:da:b7:00:26:cb:1e:9c:70:d5:60:
98:fe:a2:f6:3c:cf:ba:a8:f7:86:e8:44:c8:56:22:84:e3:72:
40:3a:de:db:35:72:ce:3e:1c:f3:9b:12:b1:8f:5c:9f:45:73:
38:0a:5e:53:3e:b9:d2:7f:5f:06:ed:91:cf:9c:5f:58:ce:5e:
5a:44:12:23:30:5e:62:86:c2:7b:af:29:9f:96:b6:1b:c6:89:
28:b8:1d:85:0a:b4:58:a7:ec:84:a6:6a:33:f8:9f:50:9d:e1:
5c:ba:ac:37:a5:3e:d8:b6:d2:64:10:0b:bb:93:2a:71:6e:33:
2a:9d:9d:01:a7:ba:8a:c8:c4:d6:0a:8e:07:c5:9c:53:57:95:
1f:b5:0d:08:f4:a7:a6:22:08:6e:7c:ac:ba:28:e9:d3:fd:51:
39:e4:ae:ea:bf:f1:3f:24:0d:ff:8c:9a:27:a4:1d:f2:21:f0:
71:8f:f6:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIuo7LE2I8wJYN2GlPbHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz
M2IzMDIwHhcNMjYwMzAyMDYwMTEyWhcNMjYwMzAzMDYwMTEyWjAzMTEwLwYDVQQD
EyhmODg1ZGFmZDQ1NDhjZDNhODgxMWQ0NWNiYzFlNmJhY2M2YTgxMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9zRDJ3pkbrAhw2RkRuO1f03Hb33
HCYnziE7M2zbyGqiJv+a9TGUUsxtS1IHAIFBKP7/lV8XNzwxEN3Yr9vR5D8c6Kex
Tf7KWJuDQNGZj6rDWi8B6ZAGyyyzhyv3y/hklI5SCgwqg6zM74ivsFKEW+qJVGWK
C/YZ0P5XnDAXhzfo3ykzP3mnJ/kAQ/deQeMCk1LRItdFB+3JQjHZ8Svy67kxZoCK
w1a7pYQnAEl+QC8nXik8mo5JN4zwr5/utyZz7sY9LGNDDQiwSeOETOs7jHY6aBA6
CZIjld/QutWTMS2a7fe8+jYnSmu3/CN0BUvl1wCHV/cWFiDgQ/r+wbHcyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiF2v1FSM06iBHUXLwea6zGqBNxMB8GA1UdIwQY
MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct
YjI3ZDg3MzBhMjcwLzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw
LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7FN4O3BL
mcqBjSxEQ9cAaVqUnzCs4EBFz1X8VVv63BMpDWgZz3rzqs5BMACC0FCxpFBDTUXl
mPd87T6jE6fxgmbbVsh0x5TWY2T22cv64LfatwAmyx6ccNVgmP6i9jzPuqj3huhE
yFYihONyQDre2zVyzj4c85sSsY9cn0VzOApeUz650n9fBu2Rz5xfWM5eWkQSIzBe
YobCe68pn5a2G8aJKLgdhQq0WKfshKZqM/ifUJ3hXLqsN6U+2LbSZBALu5MqcW4z
Kp2dAae6isjE1gqOB8WcU1eVH7UNCPSnpiIIbnysuijp0/1ROeSu6r/xPyQN/4ya
J6Qd8iHwcY/25w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:01 2026 by rpki-client