Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: LqlC6fNRBXKWeJCQBED880u4Zalszh5Tipn1sFyWwDY=
Subject key identifier: F3:B0:22:3E:43:52:4B:C8:E9:D1:85:64:45:C1:52:B6:3F:CE:A6:A6
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019FABD14022DF2EB2D8BF0DDB125C8CF022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0D91
Signing time: Wed 29 Jul 2026 03:00:45 +0000
Manifest this update: Wed 29 Jul 2026 03:00:45 +0000
Manifest next update: Thu 30 Jul 2026 03:00:45 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: eOCGzgLwwcxePIVgDcHJny3isTRgbnJFgpeDpx5KIKE=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:40:22:df:2e:b2:d8:bf:0d:db:12:5c:8c:f0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Jul 29 03:00:45 2026 GMT
Not After : Jul 30 03:00:45 2026 GMT
Subject: CN=f3b0223e43524bc8e9d1856445c152b63fcea6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:f2:fc:43:64:ba:ed:6e:bf:32:bc:a4:c6:
c1:40:3c:59:1f:8f:69:c5:85:9b:78:68:66:af:7b:
93:3a:a7:98:cb:4c:9d:38:d5:7b:16:1e:80:68:33:
ce:04:ef:2d:33:7c:ac:80:60:67:10:ce:90:d6:56:
f0:94:f8:38:db:8d:a5:3e:0c:1c:c0:e7:0f:4f:23:
a7:68:c2:4b:83:8f:9a:e5:53:e3:7a:75:b2:3a:2d:
99:67:f1:d8:d5:de:0f:1d:37:c2:f5:f1:02:85:3b:
f5:51:b7:6e:c5:4e:a6:4e:b3:58:72:3c:e4:cd:ec:
02:49:e0:12:72:15:a0:80:1d:8d:65:12:c3:81:0d:
51:6c:45:51:9b:b4:e6:67:44:a1:75:f8:54:ae:7c:
f1:70:66:99:0e:22:38:8d:82:df:a0:e8:03:9d:cc:
8c:f8:fc:b8:11:81:0d:f3:34:1b:5a:b9:81:46:af:
ef:5b:56:7b:e9:56:db:54:f6:d8:6f:a2:b8:71:9b:
47:91:84:14:ab:82:92:e3:dd:59:91:e8:2f:47:a0:
61:ad:91:71:b2:c3:21:bc:60:e1:2a:27:ce:9d:c0:
d0:57:29:1e:a0:35:56:3b:06:40:75:5a:53:33:ca:
a6:1e:79:a6:85:86:90:f5:e7:da:12:50:a9:4b:ff:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B0:22:3E:43:52:4B:C8:E9:D1:85:64:45:C1:52:B6:3F:CE:A6:A6
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:62:a8:52:05:58:e9:e4:37:f2:07:34:7c:d3:a7:81:40:39:
01:ba:e3:f1:1b:fe:46:54:5f:18:04:af:ab:06:7f:63:14:1c:
e4:2b:06:4d:8f:b3:67:a6:1a:90:0e:1b:bc:8c:ad:9e:6d:8b:
fd:60:65:0e:99:c5:3e:bd:56:3f:db:19:96:40:cb:05:21:56:
ea:80:2a:fd:69:d7:19:b7:37:7d:60:bc:7b:02:eb:88:c6:5c:
45:70:59:7b:f1:7b:f5:11:4e:4d:bf:52:be:c5:76:08:03:7f:
d4:2f:89:8a:77:26:13:2f:02:75:19:bd:2c:86:8f:3f:0c:e8:
7b:b0:b5:f8:ce:33:11:01:13:84:43:4d:ab:5e:48:fd:9a:1f:
3e:85:96:31:e6:96:30:5b:77:81:41:86:1b:7b:60:d8:ef:cf:
fb:0c:21:f7:ee:2b:11:49:03:96:95:37:91:d2:46:22:e3:1f:
99:61:02:00:42:09:d7:d2:93:b3:b6:7d:5c:72:cd:9e:b6:ec:
3a:30:8a:72:49:ea:42:12:cb:54:25:fd:91:df:83:0a:36:a4:
95:27:cf:1a:81:54:67:f6:db:94:90:26:c8:bc:64:70:d9:76:
6c:0d:33:0a:00:71:08:7b:de:d0:d7:21:60:96:66:81:c3:82:
6a:10:46:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:18:02 2026 by rpki-client