Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: 9A39TYgC5XM6zrwflXv5yMEjF5sXWB1d4vyOPcsvEKE=
Subject key identifier: 05:FF:60:DC:84:8E:AB:8F:0C:E3:D8:4C:D5:E6:67:CB:82:02:04:3F
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 01A125B07C628FDCE6E3BC99FE484A59B28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 0960
Signing time: Sat 10 Oct 2026 12:01:25 +0000
Manifest this update: Sat 10 Oct 2026 12:01:25 +0000
Manifest next update: Sun 11 Oct 2026 12:01:25 +0000
Files and hashes: 1: QcGVhryX4x7bfWIgC0U3JlcZMH0.roa (hash: Bat9oEb0UFv1zJKscTa1DuwM+XuSb3SLfJDIXRZHQRs=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: T22S6fwRYOqDCn1Ttk5tzbziK0KrgEO58LHv2G8Km7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:b0:7c:62:8f:dc:e6:e3:bc:99:fe:48:4a:59:b2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Oct 10 12:01:25 2026 GMT
Not After : Oct 11 12:01:25 2026 GMT
Subject: CN=05ff60dc848eab8f0ce3d84cd5e667cb8202043f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:dd:8a:e6:10:88:11:59:cc:96:48:25:be:
62:26:ec:41:76:d2:4a:cd:88:12:e4:d8:b2:aa:0a:
54:6a:15:2e:e2:ad:e8:3e:52:98:bb:02:f1:33:77:
ae:e9:c2:e7:99:bd:c9:a7:f6:48:6f:0a:dd:92:10:
29:9a:b7:32:ce:65:66:4e:8e:03:f0:c6:3e:33:df:
d7:fb:dd:c7:35:92:87:fa:77:fb:04:ec:b1:18:9c:
b2:42:74:bc:b9:1d:b8:4b:ab:54:30:61:d5:00:ea:
3b:3b:6b:90:fd:ae:ad:f6:27:66:2b:f4:bf:bc:72:
3e:09:4a:06:aa:e2:5a:af:ce:dd:97:9b:a8:16:09:
f4:a4:62:5d:19:9a:dd:07:9a:13:f1:50:76:1b:4f:
b8:24:4b:a7:62:7a:c4:a9:08:94:30:ea:84:b3:de:
9a:2d:20:c7:cc:e2:d2:2e:a3:f7:4b:45:c3:c2:53:
9e:35:95:93:93:82:01:43:9c:dc:f6:96:10:0e:52:
35:3d:b2:3e:e8:67:7f:c2:92:d2:4b:dc:17:94:ab:
6a:e2:07:12:61:6a:35:d1:f3:62:63:bd:ce:2c:8b:
14:28:c0:61:cc:39:8d:4e:62:59:d4:0b:71:d3:10:
20:c7:14:54:09:ee:cd:9f:19:f9:f9:54:f1:e8:c8:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FF:60:DC:84:8E:AB:8F:0C:E3:D8:4C:D5:E6:67:CB:82:02:04:3F
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:26:7e:1b:28:cd:a3:06:f1:21:bb:9e:11:e5:c8:90:c1:97:
43:7f:a4:e0:d0:10:39:30:e4:9a:1b:a0:b7:b3:23:a6:62:2d:
f8:98:c6:0a:9f:9a:a7:7e:b1:83:ca:b9:3b:1b:e0:a8:b6:ac:
49:b7:4e:24:13:2d:37:e3:01:eb:03:b1:db:ec:76:52:1d:79:
ab:29:45:02:f5:41:13:bf:af:42:c3:b5:40:f0:01:76:a5:5b:
96:cc:c8:06:5c:b8:66:58:ad:95:7f:3a:72:02:9e:df:2f:6f:
b8:f8:ec:f6:21:8a:c6:1a:ff:f0:09:84:75:91:93:21:c6:5f:
97:73:02:5d:b1:30:b5:be:65:b9:72:eb:c5:2e:69:6b:16:33:
49:39:99:2f:a0:a8:97:8c:c9:84:fe:b1:da:f7:c6:28:9f:8a:
5c:2b:3f:dc:e1:1c:3a:3a:1f:0c:04:2b:2b:8a:0b:68:58:f7:
b2:17:01:ab:28:8f:66:58:65:16:55:2f:eb:4b:5b:49:42:68:
1a:32:79:bc:53:d7:f5:8a:d4:58:fc:17:b7:07:1b:19:74:87:
68:17:e1:59:21:d3:50:25:48:b8:ec:8f:15:68:bb:fa:6d:cc:
82:86:8c:8d:de:17:43:23:9d:5e:ce:07:99:a2:88:aa:86:ff:
bf:d4:83:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:27:32 2026 by rpki-client