Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: A7JsRMoVjbmkhb1u9IwdX7IFavGQJOHLVR6Ut9nOcj8=
Subject key identifier: A0:10:34:25:78:58:F3:02:E1:69:EE:6B:B6:C0:24:0E:C6:89:78:94
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 01A0C8C6F7AD1325FE8CBFAADC87BA24D622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 060C
Signing time: Tue 22 Sep 2026 11:01:17 +0000
Manifest this update: Tue 22 Sep 2026 11:01:17 +0000
Manifest next update: Wed 23 Sep 2026 11:01:17 +0000
Files and hashes: 1: AEyZjBDd8JRa3C8Qu8Ed1pPfWTA.roa (hash: t/3GieMGxWoGjj/AjR+XfDv+Hv6o+nbcwMgeFZJBMF0=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: 5KfHejfN5ttjLJiUNQhrfZgTf/Wi9313nEX4mL2n2c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:f7:ad:13:25:fe:8c:bf:aa:dc:87:ba:24:d6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Sep 22 11:01:17 2026 GMT
Not After : Sep 23 11:01:17 2026 GMT
Subject: CN=a01034257858f302e169ee6bb6c0240ec6897894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:06:6f:f1:f3:b6:c0:8b:10:e5:1e:3a:9b:54:
20:1e:70:a8:c7:46:24:6f:67:95:b3:a1:bb:6d:f9:
25:de:f8:76:3a:88:11:83:f5:18:9d:d7:3a:23:59:
52:3e:1a:fa:dd:54:14:39:25:86:fc:fc:6e:d0:f3:
df:27:10:fb:62:d4:0a:b4:c2:ac:32:67:46:1e:b8:
92:45:46:d5:a3:84:5b:48:4e:87:30:19:ca:c5:b2:
52:8c:cd:2a:c3:d6:90:95:70:f1:30:4f:c0:48:29:
a8:a9:29:6d:38:a7:cb:c1:17:e1:82:25:2d:e0:31:
54:32:98:24:9d:68:56:32:37:fe:54:5e:6a:b0:75:
dc:00:0e:a1:ea:a3:eb:2c:20:10:5a:39:f9:4b:ca:
c7:03:44:66:8f:87:38:6e:6d:c5:37:fa:83:b6:68:
04:4a:47:19:9b:68:c9:00:4a:78:d9:80:71:2e:14:
ae:74:00:17:b0:d1:e6:43:4e:d3:1f:b9:98:66:ca:
06:f0:10:c3:ec:65:2a:9e:b4:f8:ac:27:4a:8f:43:
29:3d:bb:93:42:78:2b:b6:47:ac:5d:6c:c2:a5:2b:
bc:f0:34:9f:9b:00:ae:40:af:c4:78:2f:ce:0e:30:
68:73:ac:12:d7:d4:93:7e:bc:60:95:d2:29:ec:5d:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:10:34:25:78:58:F3:02:E1:69:EE:6B:B6:C0:24:0E:C6:89:78:94
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:67:21:3f:19:26:2f:20:2c:78:c7:d2:d4:28:8d:c1:6d:7a:
93:13:75:84:a7:61:21:1c:e2:75:f7:18:e7:83:05:74:9e:1a:
48:da:de:56:11:d1:28:86:28:54:1f:7b:8c:97:aa:0f:11:dd:
ef:f1:c1:26:27:d0:9c:0a:02:a0:bb:fa:72:18:ea:e3:1d:e2:
e4:77:4b:e5:6d:c9:70:50:bf:8d:4e:e1:99:f2:d7:83:ef:db:
82:9b:e4:1e:98:f5:f5:fb:0c:f1:71:6f:4e:a1:ee:3c:b9:2a:
2a:23:25:3b:ac:17:d0:be:81:04:32:e9:1b:73:5c:84:ad:7b:
8e:aa:fa:c7:8f:8d:ee:d0:63:98:27:25:ff:64:29:60:80:0d:
54:df:b6:86:ca:fb:10:4b:78:e5:d7:e2:64:c9:54:07:cb:b9:
1a:d2:26:51:6e:71:64:96:56:3a:d8:e5:2e:07:78:3e:d9:16:
ed:9f:e5:0b:88:71:39:f4:01:88:ae:c0:f1:b8:5a:a2:92:f0:
64:f5:16:90:9e:19:f6:c1:fe:b4:7c:15:52:58:8c:9e:6c:f8:
40:94:22:47:ed:d6:6e:dc:51:ab:3f:6d:36:07:7c:97:b1:4a:
4d:11:af:b8:4b:d2:0a:f1:80:76:b7:84:80:c9:bd:35:8c:36:
76:9c:c4:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxvetEyX+jL+q3Ie6JNYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODE0NDBhMzY3YTM0ZDMwNmJjMGY2ODVhZTljZDg2OTUy
ZjdmOTUwHhcNMjYwOTIyMTEwMTE3WhcNMjYwOTIzMTEwMTE3WjAzMTEwLwYDVQQD
EyhhMDEwMzQyNTc4NThmMzAyZTE2OWVlNmJiNmMwMjQwZWM2ODk3ODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gZv8fO2wIsQ5R46m1QgHnCox0Yk
b2eVs6G7bfkl3vh2OogRg/UYndc6I1lSPhr63VQUOSWG/Pxu0PPfJxD7YtQKtMKs
MmdGHriSRUbVo4RbSE6HMBnKxbJSjM0qw9aQlXDxME/ASCmoqSltOKfLwRfhgiUt
4DFUMpgknWhWMjf+VF5qsHXcAA6h6qPrLCAQWjn5S8rHA0Rmj4c4bm3FN/qDtmgE
SkcZm2jJAEp42YBxLhSudAAXsNHmQ07TH7mYZsoG8BDD7GUqnrT4rCdKj0MpPbuT
QngrtkesXWzCpSu88DSfmwCuQK/EeC/ODjBoc6wS19STfrxgldIp7F0M5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAQNCV4WPMC4Wnua7bAJA7GiXiUMB8GA1UdIwQY
MBaAFIGBRAo2ejTTBrwPaFrpzYaVL3+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQt
NTU2OTFhNTY5NzIwLzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQtNTU2OTFhNTY5NzIw
LzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2chPxkm
LyAseMfS1CiNwW16kxN1hKdhIRzidfcY54MFdJ4aSNreVhHRKIYoVB97jJeqDxHd
7/HBJifQnAoCoLv6chjq4x3i5HdL5W3JcFC/jU7hmfLXg+/bgpvkHpj19fsM8XFv
TqHuPLkqKiMlO6wX0L6BBDLpG3NchK17jqr6x4+N7tBjmCcl/2QpYIANVN+2hsr7
EEt45dfiZMlUB8u5GtImUW5xZJZWOtjlLgd4PtkW7Z/lC4hxOfQBiK7A8bhaopLw
ZPUWkJ4Z9sH+tHwVUliMnmz4QJQiR+3WbtxRqz9tNgd8l7FKTRGvuEvSCvGAdreE
gMm9NYw2dpzEAA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:47:39 2026 by rpki-client