Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.mft
File: gmQMpNTLIsMeI1_vCESqfnHQxls.mft (raw, json)
Hash identifier: TRtrZDcEj/U2AKlxz0us02C19ClXDPpsFQuBE3wwHa4=
Subject key identifier: 44:B1:30:A7:A3:57:EF:DF:C9:C2:B6:0A:C2:60:6E:38:8D:DE:29:B4
Authority key identifier: 82:64:0C:A4:D4:CB:22:C3:1E:23:5F:EF:08:44:AA:7E:71:D0:C6:5B
Certificate issuer: /CN=82640ca4d4cb22c31e235fef0844aa7e71d0c65b
Certificate serial: 01A17BF23520BF66B3A35CEDF83BCBD71514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmQMpNTLIsMeI1_vCESqfnHQxls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:00:33 +0000
Manifest this update: Tue 27 Oct 2026 06:00:33 +0000
Manifest next update: Wed 28 Oct 2026 06:00:33 +0000
Files and hashes: 1: MEy4hPf1PScygUdvHtNXZU1Xk7c.asa (hash: m0Ub60UIvjMWUZombv8JTaQ47c/Z3i+DBkap5riV34g=)
2: gmQMpNTLIsMeI1_vCESqfnHQxls.crl (hash: toQwDPXu11yVYWjKVs/iZnJNBFjF+AjNQHEZjiFK88I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmQMpNTLIsMeI1_vCESqfnHQxls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:35:20:bf:66:b3:a3:5c:ed:f8:3b:cb:d7:15:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82640ca4d4cb22c31e235fef0844aa7e71d0c65b
Validity
Not Before: Oct 27 06:00:33 2026 GMT
Not After : Oct 28 06:00:33 2026 GMT
Subject: CN=44b130a7a357efdfc9c2b60ac2606e388dde29b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:d7:fc:5f:b4:67:a4:b8:6b:41:0b:87:f4:
96:f5:58:5f:55:a2:bf:e5:25:17:4b:37:91:fb:cf:
f0:3c:ab:9e:d8:60:f6:6e:f7:38:f4:82:2b:5a:5b:
85:f0:c6:89:1f:50:b7:ae:17:a0:dc:d6:7b:6d:bc:
c0:43:cf:d6:ed:eb:ca:de:75:a7:55:64:7c:57:28:
2d:37:4b:23:b7:64:d4:ba:e2:1c:b9:b8:18:87:4a:
be:4e:61:f9:d9:26:74:44:bc:db:d3:cd:75:a6:0e:
23:59:14:70:f7:68:97:62:a4:2d:77:81:2c:4d:2a:
00:99:02:f7:56:76:6e:05:de:b0:36:b2:d7:1d:01:
9a:34:8f:6d:21:16:a1:10:c4:6e:54:cb:41:87:14:
f0:dc:a7:63:52:b6:40:88:6e:10:75:90:86:92:c0:
38:61:b1:2a:11:86:33:91:3e:41:c4:a4:27:12:78:
41:81:47:90:71:84:b9:5f:d6:82:d4:1c:74:9b:2e:
39:fd:25:77:1f:b4:c8:5f:c2:43:b8:6b:1c:f6:4c:
e2:5d:02:88:e3:57:e1:9e:9d:7d:9a:4d:75:20:4d:
60:56:28:95:b8:63:67:d3:54:92:71:80:c3:90:da:
24:7f:ff:13:5c:e0:f2:7c:fc:96:29:f1:48:fb:f2:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B1:30:A7:A3:57:EF:DF:C9:C2:B6:0A:C2:60:6E:38:8D:DE:29:B4
X509v3 Authority Key Identifier:
keyid:82:64:0C:A4:D4:CB:22:C3:1E:23:5F:EF:08:44:AA:7E:71:D0:C6:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmQMpNTLIsMeI1_vCESqfnHQxls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a5:1d:ac:f1:d5:68:8e:70:77:f4:e2:32:ea:1e:45:0a:37:
b7:e1:f1:ee:5c:02:ee:5c:f1:e0:90:a4:41:b5:cc:a7:d5:a6:
aa:3c:b6:31:a9:e8:80:fa:83:89:df:fa:ed:4a:48:c2:cc:59:
0b:83:4c:d9:2a:57:92:6f:71:5e:b3:23:3b:2f:88:eb:41:34:
54:20:94:a0:31:fd:07:07:2c:1f:c7:40:17:3a:20:8a:8b:10:
9d:36:fa:e6:d4:8c:c9:ee:f1:44:6c:7d:bf:5c:d9:14:c4:46:
04:3e:71:21:44:a2:86:0e:1f:4e:8a:bf:ed:01:9d:1a:75:f9:
f5:d9:68:cc:fc:0a:71:35:a7:26:94:37:38:91:6f:da:cc:f9:
01:d1:cd:e6:dc:9b:73:c4:68:cf:00:48:5f:24:36:ef:bf:1d:
cd:f2:ea:83:86:fc:7b:4a:05:f7:63:5a:9a:88:9f:34:db:55:
dd:63:d6:f7:93:12:e3:13:3c:88:10:fe:63:71:a8:06:88:60:
f8:ea:00:d6:49:f4:1a:11:c2:3f:51:51:3c:ba:ec:8e:52:2b:
1a:e2:90:85:61:b5:28:d9:ef:3c:f5:03:fa:f7:7d:66:5b:b8:
9d:9f:6f:05:98:ad:8e:16:3d:35:48:ee:7c:7a:b4:09:86:9c:
e7:53:44:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78jUgv2azo1zt+DvL1xUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjQwY2E0ZDRjYjIyYzMxZTIzNWZlZjA4NDRhYTdlNzFk
MGM2NWIwHhcNMjYxMDI3MDYwMDMzWhcNMjYxMDI4MDYwMDMzWjAzMTEwLwYDVQQD
Eyg0NGIxMzBhN2EzNTdlZmRmYzljMmI2MGFjMjYwNmUzODhkZGUyOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4TX/F+0Z6S4a0ELh/SW9VhfVaK/
5SUXSzeR+8/wPKue2GD2bvc49IIrWluF8MaJH1C3rheg3NZ7bbzAQ8/W7evK3nWn
VWR8VygtN0sjt2TUuuIcubgYh0q+TmH52SZ0RLzb0811pg4jWRRw92iXYqQtd4Es
TSoAmQL3VnZuBd6wNrLXHQGaNI9tIRahEMRuVMtBhxTw3KdjUrZAiG4QdZCGksA4
YbEqEYYzkT5BxKQnEnhBgUeQcYS5X9aC1Bx0my45/SV3H7TIX8JDuGsc9kziXQKI
41fhnp19mk11IE1gViiVuGNn01SScYDDkNokf/8TXODyfPyWKfFI+/J/CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESxMKejV+/fycK2CsJgbjiN3im0MB8GA1UdIwQY
MBaAFIJkDKTUyyLDHiNf7whEqn5x0MZbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21RTXBOVExJc01lSTFfdkNFU3FmbkhReGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iNWU5YzYtZWU1NC00OTJhLWFlNzgt
ZDQ1M2ZiYjhiZmViLzEvZ21RTXBOVExJc01lSTFfdkNFU3FmbkhReGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9iNWU5YzYtZWU1NC00OTJhLWFlNzgtZDQ1M2ZiYjhiZmVi
LzEvZ21RTXBOVExJc01lSTFfdkNFU3FmbkhReGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaUdrPHV
aI5wd/TiMuoeRQo3t+Hx7lwC7lzx4JCkQbXMp9Wmqjy2ManogPqDid/67UpIwsxZ
C4NM2SpXkm9xXrMjOy+I60E0VCCUoDH9BwcsH8dAFzogiosQnTb65tSMye7xRGx9
v1zZFMRGBD5xIUSihg4fToq/7QGdGnX59dlozPwKcTWnJpQ3OJFv2sz5AdHN5tyb
c8RozwBIXyQ2778dzfLqg4b8e0oF92NamoifNNtV3WPW95MS4xM8iBD+Y3GoBohg
+OoA1kn0GhHCP1FRPLrsjlIrGuKQhWG1KNnvPPUD+vd9Zlu4nZ9vBZitjhY9NUju
fHq0CYac51NEyQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 12:47:38 2026 by rpki-client