Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: DjpjrudjcST+X+/Nts5ns3YLRy1HEUpAZ9EVufLAX5U=
Subject key identifier: FF:89:20:2A:08:25:35:7F:9A:B7:C8:46:BC:F7:C3:9B:2F:C7:D5:45
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 019EC36E5EABBC5CB459010F7EA93CDAD9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 0824
Signing time: Sun 14 Jun 2026 00:00:50 +0000
Manifest this update: Sun 14 Jun 2026 00:00:50 +0000
Manifest next update: Mon 15 Jun 2026 00:00:50 +0000
Files and hashes: 1: QcGVhryX4x7bfWIgC0U3JlcZMH0.roa (hash: Bat9oEb0UFv1zJKscTa1DuwM+XuSb3SLfJDIXRZHQRs=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: MVy+EA0q+YybZPsiKXCRsuLwXQb71batz2zI+iqgbmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:5e:ab:bc:5c:b4:59:01:0f:7e:a9:3c:da:d9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Jun 14 00:00:50 2026 GMT
Not After : Jun 15 00:00:50 2026 GMT
Subject: CN=ff89202a0825357f9ab7c846bcf7c39b2fc7d545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:6a:c2:aa:42:ee:02:fa:f1:0d:ba:66:e6:
d5:03:7f:74:89:4a:fa:be:61:17:00:96:c4:7c:63:
eb:74:46:c1:0e:c9:a3:90:44:3b:4c:fe:74:61:af:
54:36:9c:4e:19:3a:d9:d8:67:e1:58:cd:32:2e:8b:
66:2d:c8:c4:b7:38:29:d1:b6:3d:a2:9b:d3:fd:42:
51:83:03:1d:5e:37:ce:57:2c:12:41:47:c4:cf:7f:
9d:ee:b3:1d:24:f8:a5:06:42:9a:7d:e2:23:d2:38:
72:1b:7e:12:c3:3f:a2:a9:a3:86:c7:8d:ed:48:04:
b1:aa:9d:d1:68:6d:38:c2:32:a5:84:58:8a:5b:49:
a3:4e:c0:6d:fd:b3:a8:84:b2:f8:71:ec:a5:2f:bf:
7f:d5:8b:72:84:4d:f5:a6:c4:86:91:fc:a4:68:e9:
10:ff:69:eb:f2:21:01:14:21:d9:d0:cb:27:12:78:
ba:60:63:76:e2:63:3c:73:fd:a6:9d:fc:46:f6:65:
f3:9c:89:ac:26:cb:5f:4a:6c:67:20:94:0f:18:4d:
c7:28:0b:dc:c1:4b:fb:27:ac:9e:60:a9:52:49:96:
4a:c0:fa:3f:2b:cd:3e:9e:fc:3d:31:d6:c0:ff:78:
07:a9:ba:81:6b:3d:b9:b7:08:77:87:de:4c:44:eb:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:20:2A:08:25:35:7F:9A:B7:C8:46:BC:F7:C3:9B:2F:C7:D5:45
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:41:96:ce:19:c1:8f:27:61:47:9e:c7:08:93:cc:39:86:cd:
28:e4:f7:6e:43:f1:b5:21:65:03:20:79:66:fe:8f:06:2d:44:
70:1c:d3:e1:79:28:dc:bb:92:a1:d5:92:d6:5d:40:fb:88:ca:
ac:b9:db:75:c2:07:99:24:06:d5:9c:bb:d5:d8:3a:ff:f9:b9:
a6:b7:09:d4:9e:87:b0:50:a6:90:49:6e:88:da:52:12:cd:56:
50:17:6c:de:f8:9c:c6:bb:a9:b7:89:b3:9a:9d:41:a4:ed:52:
a1:5c:50:ac:a0:8b:ab:ab:e4:b8:96:c2:80:bc:9b:0a:86:f7:
26:92:fd:04:05:00:a9:c8:59:10:2e:f5:a2:b4:da:82:4e:04:
61:b1:1f:b2:03:a2:8a:26:a9:c6:7c:68:e6:21:2e:54:64:74:
77:88:58:15:22:bb:2b:e9:b8:94:83:3a:97:af:ac:4e:80:e6:
ec:29:88:0a:cc:e0:6b:8b:ee:f0:cf:bd:c4:8b:1d:27:6d:00:
62:82:3b:ef:8a:36:d7:2f:15:b3:87:4f:c8:27:2c:ae:a2:a7:
25:6f:35:29:4b:df:84:cf:32:b1:bb:00:b1:a8:58:d1:06:4f:
c3:04:20:d9:de:bc:cf:bd:3c:ca:0b:1e:83:55:93:41:d1:d0:
dd:9d:ab:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:22 2026 by rpki-client