Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: Bxm/cFpvb0P7taWlwYuo6eh6CWZW1E3yE8MUD+dWoig=
Subject key identifier: EB:3B:F5:FA:22:28:CA:E7:07:E5:6B:5D:B3:DA:D7:CD:4D:CA:F2:3F
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 01A17ADFE7A1EED45CF5AE9D9E4964EBADFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 04E5
Signing time: Tue 27 Oct 2026 01:00:56 +0000
Manifest this update: Tue 27 Oct 2026 01:00:56 +0000
Manifest next update: Wed 28 Oct 2026 01:00:56 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: TNVLFLAyh4SC5xwt0c6y8DiHVNztZDAsFC13li21dik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:e7:a1:ee:d4:5c:f5:ae:9d:9e:49:64:eb:ad:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Oct 27 01:00:56 2026 GMT
Not After : Oct 28 01:00:56 2026 GMT
Subject: CN=eb3bf5fa2228cae707e56b5db3dad7cd4dcaf23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c9:40:4c:3c:87:04:df:f1:38:af:2e:0d:94:
87:9a:b5:48:43:80:bb:96:c3:d9:b4:4f:ec:a6:85:
05:b1:07:4c:a5:97:16:16:f3:55:86:a2:f7:95:e9:
25:d1:b5:9d:33:f0:91:84:b0:5a:db:91:6b:a7:36:
b3:9c:63:a4:3c:8d:02:fe:f2:7e:78:04:eb:48:0d:
b5:e9:31:63:dc:0f:f4:94:3f:d9:b9:01:71:79:d4:
87:6f:13:e7:e0:b8:b4:1f:3e:30:08:69:0d:84:d9:
ad:23:e5:12:1f:4c:32:db:23:ca:95:cf:6c:56:61:
ff:72:fa:c8:16:0b:94:b5:8a:5a:02:15:7c:ff:95:
4a:3e:58:bd:dd:18:60:0e:54:45:55:90:27:5e:f1:
32:2f:33:64:4a:dd:f7:dc:62:d7:25:36:de:a2:52:
82:49:d3:30:14:6c:e3:52:bc:fd:b8:41:5c:83:9d:
d9:81:04:07:61:62:bb:81:87:31:1d:5c:33:c5:f2:
e1:a3:02:8f:f6:a5:74:6a:8f:bf:d9:6a:98:5f:1a:
7b:20:41:d7:ca:0d:1a:16:19:4d:c7:fd:9f:77:53:
1e:ef:4b:61:ed:6f:d1:dd:4c:fe:b9:4c:b5:67:26:
8f:dd:7e:14:b5:6f:f7:0c:22:af:b1:7d:63:ae:dd:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3B:F5:FA:22:28:CA:E7:07:E5:6B:5D:B3:DA:D7:CD:4D:CA:F2:3F
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:68:7d:f0:0e:f4:45:57:eb:6f:84:01:8c:02:5b:38:18:01:
88:26:70:8e:5f:79:5f:e3:5c:c0:14:60:95:22:00:17:c8:16:
ca:e9:5d:75:08:63:7e:2e:5b:d2:08:41:06:fb:e2:28:21:01:
57:71:07:0a:48:b3:40:ae:5d:b6:34:00:b1:77:8f:b7:c8:15:
f2:d8:7b:2c:24:30:46:ed:37:04:f5:5c:c1:3d:bb:86:77:5c:
b8:a0:1f:01:0e:a4:ab:6e:2c:84:53:95:f7:04:5b:4e:bb:9f:
23:9e:86:75:df:39:e2:94:ed:1e:30:b2:00:ee:ef:fc:e8:c1:
db:a9:83:4e:f4:45:a1:bc:c7:e3:24:c3:49:e1:88:85:c2:42:
06:8f:05:e0:ae:1e:b8:a6:f7:65:80:9e:ea:69:e2:2c:e5:2d:
e2:c9:a5:01:af:01:3b:3c:69:a0:a8:21:8f:dc:71:87:90:37:
12:e8:c3:8b:b5:77:52:b9:41:40:de:a5:68:c2:54:4c:8f:76:
22:d8:ca:c5:83:c3:81:ec:d8:69:98:f7:d4:e9:9a:65:cf:47:
bf:8b:e3:30:97:bc:41:af:44:83:0a:e2:52:ee:bd:8c:53:08:
45:20:ca:3c:0b:c4:cd:50:91:44:11:df:7b:b8:23:23:41:ca:
f0:59:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:14:57 2026 by rpki-client