Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: qSwBgWwCAyIiyagQICArfxA4h2L23VzShTMkWPCq+88=
Subject key identifier: 1D:9D:A0:DD:B9:8E:EE:EE:65:09:3B:33:78:60:AD:5D:34:F2:E4:AF
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 019FAD1A5EBFEEA34247F4046FD1BCC2AE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 089D
Signing time: Wed 29 Jul 2026 09:00:14 +0000
Manifest this update: Wed 29 Jul 2026 09:00:14 +0000
Manifest next update: Thu 30 Jul 2026 09:00:14 +0000
Files and hashes: 1: QcGVhryX4x7bfWIgC0U3JlcZMH0.roa (hash: Bat9oEb0UFv1zJKscTa1DuwM+XuSb3SLfJDIXRZHQRs=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: 8JV1fP2TB5I97o8w8ip930YVblg9h2SODs1kFMJuO2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:5e:bf:ee:a3:42:47:f4:04:6f:d1:bc:c2:ae:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Jul 29 09:00:14 2026 GMT
Not After : Jul 30 09:00:14 2026 GMT
Subject: CN=1d9da0ddb98eeeee65093b337860ad5d34f2e4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:84:89:e7:48:46:f5:09:cd:c0:75:93:20:
fd:ed:f2:9c:62:33:4b:c6:8d:f6:e2:95:17:af:64:
83:47:b4:b3:66:89:73:ad:5c:98:9f:4e:cc:94:55:
b9:d3:a4:d7:e6:55:f3:52:6a:2e:94:8f:00:5d:40:
26:0f:c5:f6:01:52:6d:c1:a8:5a:c7:2c:09:ce:c0:
b8:c1:e3:33:ae:5a:c9:2c:f3:24:70:ae:20:a6:88:
be:a4:cf:77:b1:0e:08:ee:fa:b7:ae:32:56:ea:de:
ab:2d:7f:c6:3e:ed:6a:df:2d:87:65:42:46:57:7c:
19:d7:5f:af:9e:db:fa:16:0c:ac:cd:00:bf:92:65:
61:a1:40:a9:28:9e:26:39:1d:c7:6d:07:58:3c:eb:
84:6c:df:2a:74:16:5b:b9:bf:a5:dd:fa:9b:fe:11:
51:a1:b0:5d:73:95:4e:75:5c:71:05:3a:54:92:c7:
54:d2:6c:d0:89:e9:cb:75:6b:9d:06:87:d5:ee:fa:
36:66:b5:22:03:6f:9a:53:ad:17:e5:3c:03:17:ff:
13:c9:45:72:1f:8b:aa:7b:6c:50:27:52:ae:4d:35:
08:13:0c:ed:c6:5c:01:ec:07:6d:35:6b:e1:28:f1:
0c:ba:63:67:e9:6b:81:2d:06:9a:44:e3:78:eb:96:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9D:A0:DD:B9:8E:EE:EE:65:09:3B:33:78:60:AD:5D:34:F2:E4:AF
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:27:bd:e7:87:de:16:ec:8b:0e:79:2d:9a:08:09:da:77:a8:
af:d6:34:e9:8c:74:1b:1e:9e:11:c4:3a:8c:e0:26:fe:ef:e6:
22:9e:01:a2:ce:e8:53:b5:f6:e8:8e:27:9e:08:19:f7:ea:37:
71:d7:89:2a:07:85:3a:d8:a1:1f:f2:bb:4e:eb:13:9b:59:09:
b5:f3:46:2e:f0:b5:3d:e2:c1:ab:10:6a:d4:e4:61:54:d4:63:
47:04:f7:88:df:c9:e9:6d:dc:2a:88:00:8f:64:17:e1:4f:e5:
94:84:41:28:8e:c6:04:9a:56:8b:95:1c:b6:94:ef:d9:fb:42:
cd:a6:44:cb:2a:66:f3:d4:b9:1e:6f:cc:45:4e:f1:bc:48:34:
46:a6:d9:b4:e3:36:fc:8d:cd:b1:89:7c:a8:dd:76:fa:a9:82:
9f:f5:10:cc:17:77:c4:3d:df:7a:7c:3c:78:ea:41:ba:40:4f:
c2:a0:f6:79:cd:97:3f:f5:61:8d:4b:a9:28:af:b6:81:af:aa:
c6:2e:b7:50:d1:81:9c:78:b1:98:5a:8f:ba:32:71:4a:73:24:
9f:b0:b8:57:e0:fe:77:83:78:d5:c9:04:6e:25:08:e9:c7:b0:
04:3e:95:63:c3:75:9f:da:97:fa:a9:6a:58:54:ef:64:88:aa:
76:72:1c:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGl6/7qNCR/QEb9G8wq4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmU1Njk4YTEyNzk2NGNjMGU0Y2U4ZTNmZGM5ODVlMmEy
NWE2NjMwHhcNMjYwNzI5MDkwMDE0WhcNMjYwNzMwMDkwMDE0WjAzMTEwLwYDVQQD
EygxZDlkYTBkZGI5OGVlZWVlNjUwOTNiMzM3ODYwYWQ1ZDM0ZjJlNGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0aEiedIRvUJzcB1kyD97fKcYjNL
xo324pUXr2SDR7SzZolzrVyYn07MlFW506TX5lXzUmoulI8AXUAmD8X2AVJtwaha
xywJzsC4weMzrlrJLPMkcK4gpoi+pM93sQ4I7vq3rjJW6t6rLX/GPu1q3y2HZUJG
V3wZ11+vntv6FgyszQC/kmVhoUCpKJ4mOR3HbQdYPOuEbN8qdBZbub+l3fqb/hFR
obBdc5VOdVxxBTpUksdU0mzQienLdWudBofV7vo2ZrUiA2+aU60X5TwDF/8TyUVy
H4uqe2xQJ1KuTTUIEwztxlwB7AdtNWvhKPEMumNn6WuBLQaaRON465bNRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2doN25ju7uZQk7M3hgrV008uSvMB8GA1UdIwQY
MBaAFID+VpihJ5ZMwOTOjj/cmF4qJaZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zZjlhZDEtNmJlNS00ZmE0LTllNTYt
ZDcwMWRjNjk4NjNmLzEvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zZjlhZDEtNmJlNS00ZmE0LTllNTYtZDcwMWRjNjk4NjNm
LzEvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSe954fe
FuyLDnktmggJ2neor9Y06Yx0Gx6eEcQ6jOAm/u/mIp4Bos7oU7X26I4nnggZ9+o3
cdeJKgeFOtihH/K7TusTm1kJtfNGLvC1PeLBqxBq1ORhVNRjRwT3iN/J6W3cKogA
j2QX4U/llIRBKI7GBJpWi5UctpTv2ftCzaZEyypm89S5Hm/MRU7xvEg0RqbZtOM2
/I3NsYl8qN12+qmCn/UQzBd3xD3fenw8eOpBukBPwqD2ec2XP/VhjUupKK+2ga+q
xi63UNGBnHixmFqPujJxSnMkn7C4V+D+d4N41ckEbiUI6cewBD6VY8N1n9qX+qlq
WFTvZIiqdnIcBA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:33:48 2026 by rpki-client