Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: /709r3EMLPgOgPvj3Lu9uARZqX83G6S9ZGiw6BpJPcE=
Subject key identifier: AA:1D:DC:19:31:EC:83:3E:16:A2:D5:1D:A6:35:66:6C:5D:1B:D5:9A
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 019FA1BBEF32F01973E1B89BF5035B923A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 03F0
Signing time: Mon 27 Jul 2026 04:01:15 +0000
Manifest this update: Mon 27 Jul 2026 04:01:15 +0000
Manifest next update: Tue 28 Jul 2026 04:01:15 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: iTckMswYKksUvxXelIkSBCKO/36Hemguh9c47WbIRQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:ef:32:f0:19:73:e1:b8:9b:f5:03:5b:92:3a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Jul 27 04:01:15 2026 GMT
Not After : Jul 28 04:01:15 2026 GMT
Subject: CN=aa1ddc1931ec833e16a2d51da635666c5d1bd59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:89:e9:a0:a3:76:e1:87:8e:c2:d6:f3:ed:
6b:bf:22:20:8f:cd:b0:ed:ce:8e:0e:b4:d5:87:ce:
05:2d:2b:19:28:8f:58:de:79:9e:ed:0d:b2:9d:4a:
df:6b:c8:b2:d1:f6:52:7a:32:e1:5b:10:50:67:45:
c9:41:c9:75:f6:fa:c8:71:25:51:35:85:d8:c2:7b:
d8:3c:03:24:75:d0:1a:ef:2c:37:af:be:e4:f7:f0:
5f:37:39:fb:82:2f:f4:04:b5:c1:50:c0:8c:c2:7b:
af:01:1b:57:84:20:91:10:b0:38:39:23:63:07:36:
6d:47:11:ec:b4:43:89:01:ae:b9:6e:01:fc:10:25:
f6:09:d0:56:c0:e9:09:0f:76:7b:37:ee:76:a9:15:
77:c4:d7:c3:40:ad:68:f7:ea:c9:3b:ea:cd:54:c3:
ee:91:f3:a5:ff:4f:e5:18:a2:99:27:08:6d:ef:9a:
a0:c4:46:46:0e:a3:b4:60:76:3c:fd:13:a4:0a:17:
3e:c3:31:79:d0:5b:90:71:a5:7e:4b:42:23:9e:2c:
63:0c:6e:4d:42:6d:89:6d:97:47:a2:01:47:8a:6c:
fc:61:2b:47:32:05:06:9b:f5:3d:a8:4c:08:16:6d:
cc:35:74:db:a6:fa:5d:2b:af:e5:06:cd:33:49:c5:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1D:DC:19:31:EC:83:3E:16:A2:D5:1D:A6:35:66:6C:5D:1B:D5:9A
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:db:43:fe:af:ea:8c:74:fb:b1:ad:fd:47:33:9b:20:a8:8a:
32:e6:f2:fe:1c:94:4a:bc:65:4d:5d:2d:87:f3:79:69:1e:7c:
b7:7f:d0:20:c7:60:1e:05:57:4c:7c:30:d7:f7:af:ec:9e:1e:
fc:6e:b5:b6:84:be:97:40:08:c9:bf:32:9e:89:7f:ec:52:68:
d9:c2:f5:14:a4:aa:05:c3:90:6a:5e:2d:59:9c:7d:52:00:e2:
83:73:96:cf:2c:a2:52:45:84:1e:0b:37:3e:80:57:9d:dd:9f:
89:35:22:ae:dc:97:94:96:3c:19:07:b8:f6:37:41:96:30:2d:
a0:f2:18:27:85:5a:37:06:c1:78:53:89:a7:a1:37:31:0b:64:
32:9b:3b:f3:d5:bb:cc:12:00:f5:02:f6:9e:8e:4b:26:11:f7:
98:ce:ea:f5:66:18:6f:0a:6f:6e:58:9b:7b:6f:89:b3:bb:9b:
88:83:e8:98:a0:97:47:22:05:78:57:33:17:04:db:cf:4f:84:
0e:40:07:73:7a:a5:9d:22:be:08:34:2f:01:7b:63:7a:c3:48:
a4:3e:e6:db:d6:5c:54:74:93:22:e8:0c:25:96:fb:95:87:3f:
7c:2c:78:e8:37:f2:7d:e9:84:3c:a7:de:2b:37:cb:b7:70:ce:
6c:70:89:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hu+8y8Blz4bib9QNbkjpyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYWZhNzA4ZTA5OGU1Njk0MmIxNjJmMzRlNDYzMzQ5N2Yz
YWUyZDkwHhcNMjYwNzI3MDQwMTE1WhcNMjYwNzI4MDQwMTE1WjAzMTEwLwYDVQQD
EyhhYTFkZGMxOTMxZWM4MzNlMTZhMmQ1MWRhNjM1NjY2YzVkMWJkNTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34+J6aCjduGHjsLW8+1rvyIgj82w
7c6ODrTVh84FLSsZKI9Y3nme7Q2ynUrfa8iy0fZSejLhWxBQZ0XJQcl19vrIcSVR
NYXYwnvYPAMkddAa7yw3r77k9/BfNzn7gi/0BLXBUMCMwnuvARtXhCCRELA4OSNj
BzZtRxHstEOJAa65bgH8ECX2CdBWwOkJD3Z7N+52qRV3xNfDQK1o9+rJO+rNVMPu
kfOl/0/lGKKZJwht75qgxEZGDqO0YHY8/ROkChc+wzF50FuQcaV+S0IjnixjDG5N
Qm2JbZdHogFHimz8YStHMgUGm/U9qEwIFm3MNXTbpvpdK6/lBs0zScX56QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKod3Bkx7IM+FqLVHaY1ZmxdG9WaMB8GA1UdIwQY
MBaAFICvpwjgmOVpQrFi805GM0l/OuLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zNmU0YjgtNGJlYi00M2ZiLWE2OGUt
MmE4YTIyNTNmZTBhLzEvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8zNmU0YjgtNGJlYi00M2ZiLWE2OGUtMmE4YTIyNTNmZTBh
LzEvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNtD/q/q
jHT7sa39RzObIKiKMuby/hyUSrxlTV0th/N5aR58t3/QIMdgHgVXTHww1/ev7J4e
/G61toS+l0AIyb8ynol/7FJo2cL1FKSqBcOQal4tWZx9UgDig3OWzyyiUkWEHgs3
PoBXnd2fiTUirtyXlJY8GQe49jdBljAtoPIYJ4VaNwbBeFOJp6E3MQtkMps789W7
zBIA9QL2no5LJhH3mM7q9WYYbwpvblibe2+Js7ubiIPomKCXRyIFeFczFwTbz0+E
DkAHc3qlnSK+CDQvAXtjesNIpD7m29ZcVHSTIugMJZb7lYc/fCx46DfyfemEPKfe
KzfLt3DObHCJIg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 06:50:38 2026 by rpki-client