Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: 5F8Kk/f+3TMqzeFUj9BtocRbRtqRuOTkpdOVnT5MDGA=
Subject key identifier: 30:35:EA:D3:4D:D9:90:AA:ED:56:94:F1:73:24:D2:B7:7D:71:77:D7
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 01A11A50148514D751214F651CF9512C3101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 07C1
Signing time: Thu 08 Oct 2026 07:00:18 +0000
Manifest this update: Thu 08 Oct 2026 07:00:18 +0000
Manifest next update: Fri 09 Oct 2026 07:00:18 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: nF5Bzxq5gboPby+BS+8wH/TzOwE7gAd5X9vxMrRIh9s=)
2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:14:85:14:d7:51:21:4f:65:1c:f9:51:2c:31:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Oct 8 07:00:18 2026 GMT
Not After : Oct 9 07:00:18 2026 GMT
Subject: CN=3035ead34dd990aaed5694f17324d2b77d7177d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:37:50:ad:f7:1f:8f:02:f3:93:7f:61:25:
e0:36:1b:6d:b6:f9:08:a6:53:4f:45:74:61:a3:7f:
a3:54:25:d1:4b:04:ac:f2:fb:d8:87:45:2e:ba:bd:
82:87:bf:ed:9c:bd:91:d9:35:bb:da:06:3a:03:18:
d1:4c:84:75:a0:e8:1f:a9:c7:d0:16:4e:ee:ad:d1:
93:2b:07:12:6c:3d:9c:44:29:ad:61:3a:ea:d5:ba:
6c:60:68:32:23:e4:8e:82:14:ee:1c:99:83:df:4e:
33:de:31:60:dc:3b:51:5a:1e:10:01:62:7c:21:01:
15:12:32:21:b7:1b:1e:6f:cf:7a:33:e1:83:8f:a6:
39:16:fe:d9:2c:aa:eb:bb:c1:ad:85:39:bb:5f:f6:
17:9d:0a:c6:59:00:be:ba:ff:4a:91:af:bc:69:41:
04:55:f6:ad:54:ef:5e:bb:04:20:e8:09:7b:66:86:
3c:6d:b6:c3:eb:2c:0f:3f:9d:76:d7:09:a0:70:0d:
cb:f5:18:7c:d6:20:ce:d7:5c:64:d9:e7:2d:5c:9e:
07:18:8c:9f:2d:f2:55:f1:d6:50:bf:05:63:37:49:
59:4f:d0:79:e9:48:3c:13:30:8d:60:34:d5:67:d0:
13:d1:e3:45:c9:0e:45:62:4e:60:7e:cd:95:b1:61:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:35:EA:D3:4D:D9:90:AA:ED:56:94:F1:73:24:D2:B7:7D:71:77:D7
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:aa:bc:9c:09:25:9f:28:8c:19:31:7f:92:78:b5:4d:b3:31:
1c:c4:c2:c7:0c:fb:88:b5:9b:f4:32:82:0f:c4:7b:1c:62:e2:
c7:5a:4b:61:27:a7:40:32:66:56:e9:a2:c4:96:05:0a:6d:2c:
28:94:23:94:0f:e0:13:9c:10:9e:8e:13:9e:a2:ae:06:8a:44:
a0:59:00:34:6b:6e:49:2a:70:00:6b:0e:26:4f:49:df:2f:db:
70:32:70:e8:9e:ba:4a:e2:19:48:bc:5d:03:77:9b:cf:71:4a:
d8:42:84:f7:3e:d6:95:8e:d6:d3:ca:2c:7b:f5:89:3b:57:e4:
d0:c0:bb:a0:ed:3c:b9:fc:7b:db:71:0d:d4:28:ca:28:57:a1:
81:68:04:64:71:36:9b:db:3d:4d:df:88:2f:3b:9a:70:98:5b:
33:bb:54:18:25:22:f8:14:73:f5:ea:f8:48:dd:2b:c6:4f:6e:
06:f8:d6:4b:53:49:71:23:26:08:42:c1:9c:e3:53:81:1b:86:
95:39:0b:4b:cd:f4:52:00:0c:3b:77:b1:db:a4:45:5c:08:7e:
ee:7f:02:cb:76:b7:7f:63:95:ed:32:1a:f5:b5:81:4a:db:c8:
75:9d:23:af:cd:02:07:48:e3:50:6a:5f:3f:a9:f7:71:2e:e1:
1c:6d:b8:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEaUBSFFNdRIU9lHPlRLDEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw
MzU0OTIwHhcNMjYxMDA4MDcwMDE4WhcNMjYxMDA5MDcwMDE4WjAzMTEwLwYDVQQD
EygzMDM1ZWFkMzRkZDk5MGFhZWQ1Njk0ZjE3MzI0ZDJiNzdkNzE3N2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00I3UK33H48C85N/YSXgNhtttvkI
plNPRXRho3+jVCXRSwSs8vvYh0Uuur2Ch7/tnL2R2TW72gY6AxjRTIR1oOgfqcfQ
Fk7urdGTKwcSbD2cRCmtYTrq1bpsYGgyI+SOghTuHJmD304z3jFg3DtRWh4QAWJ8
IQEVEjIhtxseb896M+GDj6Y5Fv7ZLKrru8GthTm7X/YXnQrGWQC+uv9Kka+8aUEE
VfatVO9euwQg6Al7ZoY8bbbD6ywPP5121wmgcA3L9Rh81iDO11xk2ectXJ4HGIyf
LfJV8dZQvwVjN0lZT9B56Ug8EzCNYDTVZ9AT0eNFyQ5FYk5gfs2VsWFYTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDA16tNN2ZCq7VaU8XMk0rd9cXfXMB8GA1UdIwQY
MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et
MDYyYzg4ODJiYTcxLzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx
LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6q8nAkl
nyiMGTF/kni1TbMxHMTCxwz7iLWb9DKCD8R7HGLix1pLYSenQDJmVumixJYFCm0s
KJQjlA/gE5wQno4TnqKuBopEoFkANGtuSSpwAGsOJk9J3y/bcDJw6J66SuIZSLxd
A3ebz3FK2EKE9z7WlY7W08ose/WJO1fk0MC7oO08ufx723EN1CjKKFehgWgEZHE2
m9s9Td+ILzuacJhbM7tUGCUi+BRz9er4SN0rxk9uBvjWS1NJcSMmCELBnONTgRuG
lTkLS830UgAMO3ex26RFXAh+7n8Cy3a3f2OV7TIa9bWBStvIdZ0jr80CB0jjUGpf
P6n3cS7hHG24WA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:29:38 2026 by rpki-client