Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: FWgq9gpIStozFs7sMj4TGHLjZ3on62ZUWhg7JfV7Etk=
Subject key identifier: F4:9A:0E:1F:1F:B9:CF:F5:07:E8:D7:13:6A:3A:89:7C:3C:F2:D8:DC
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 01A135FED734338D1C63DC6428ED78AC94A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 18B8
Signing time: Tue 13 Oct 2026 16:00:55 +0000
Manifest this update: Tue 13 Oct 2026 16:00:55 +0000
Manifest next update: Wed 14 Oct 2026 16:00:55 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: VjzBbh+DpyRw/6agm+pSZ9CnzHPDbyUDUpmuj+P1NkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:fe:d7:34:33:8d:1c:63:dc:64:28:ed:78:ac:94:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Oct 13 16:00:55 2026 GMT
Not After : Oct 14 16:00:55 2026 GMT
Subject: CN=f49a0e1f1fb9cff507e8d7136a3a897c3cf2d8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:80:d9:97:ac:a0:33:d0:38:3f:e7:a6:b4:
1b:54:ee:0a:96:bd:9d:3c:a1:d2:87:92:81:6b:dd:
16:6a:67:fb:14:c7:65:af:b7:65:1d:23:41:64:ea:
99:ce:90:4c:3d:d9:c3:0b:a5:4b:b0:31:f3:d5:12:
4d:10:bc:fd:fd:d9:9f:af:bf:22:6f:84:3e:61:d2:
bd:01:09:a7:a0:cc:92:75:38:39:42:7a:d1:a5:90:
cc:1f:e3:d2:51:40:6e:52:6a:94:eb:aa:bd:0c:15:
0d:08:57:c3:be:7e:4b:96:8c:11:3b:32:42:f8:db:
f7:52:12:24:c0:5e:23:7c:5f:61:d5:17:5c:0f:62:
8e:66:a8:f9:96:d0:81:7a:43:68:f7:50:ce:b4:f2:
66:09:e7:bb:2e:cf:6e:01:29:76:81:2a:06:2a:9e:
c5:3c:dd:08:45:49:5e:e0:5f:84:96:54:18:e9:e5:
40:df:ce:61:60:a6:6b:89:09:d4:db:56:c4:79:d0:
54:45:80:65:64:47:4b:e2:91:bc:06:d1:7a:39:5c:
c9:b1:24:5a:58:65:1d:8e:e2:03:33:ee:4d:dd:f0:
a0:0d:d0:36:96:d3:1f:49:6d:20:6d:28:09:f0:3a:
21:c0:c0:b1:d4:78:57:5e:e4:91:36:2a:83:60:eb:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9A:0E:1F:1F:B9:CF:F5:07:E8:D7:13:6A:3A:89:7C:3C:F2:D8:DC
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a3:0c:9b:52:17:01:87:37:9e:33:c1:32:34:e2:96:54:9f:
86:43:d0:04:83:fb:1f:24:ed:e9:17:78:2e:84:ce:b9:73:58:
73:d7:2e:fb:38:3b:83:20:f6:af:74:8e:74:14:06:7f:4f:aa:
a5:44:66:8f:d1:6d:31:76:cd:b5:31:31:97:0e:71:a4:77:d6:
1d:b7:02:34:4b:c8:80:cf:31:a4:89:e4:00:4c:e0:90:51:5e:
62:06:e7:2c:8b:07:bd:70:63:d1:21:a1:06:2f:47:eb:d4:fe:
bf:10:52:bf:f3:1c:3b:15:67:15:12:95:0c:47:24:c5:10:75:
a1:c3:62:b9:16:db:2b:b5:cb:7d:27:da:ca:b0:42:c7:4a:b1:
71:b7:50:1c:31:7f:8f:fc:7e:a4:27:a6:cd:f0:02:07:fd:45:
aa:bb:27:5e:4b:52:16:a3:45:27:1f:70:88:67:d7:e7:d4:35:
60:a1:c4:ee:c7:19:56:87:8a:2f:c7:10:39:3a:d5:bc:4b:2e:
dd:b8:e8:2d:73:bd:ad:6b:89:b7:bd:13:1e:a1:5b:64:83:66:
96:51:e0:f2:b7:66:e6:f1:d3:96:c6:00:8d:42:2e:db:92:1a:
0d:52:9f:b4:b7:f9:66:1d:53:e9:5e:72:34:e8:48:1f:fe:21:
3b:d3:bc:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1/tc0M40cY9xkKO14rJSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjNiOTczMWIxOTZiMWFjYmM4MjlmNWIyOGIzMjVmZDlk
M2UzZDQwHhcNMjYxMDEzMTYwMDU1WhcNMjYxMDE0MTYwMDU1WjAzMTEwLwYDVQQD
EyhmNDlhMGUxZjFmYjljZmY1MDdlOGQ3MTM2YTNhODk3YzNjZjJkOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAyA2ZesoDPQOD/nprQbVO4Klr2d
PKHSh5KBa90Wamf7FMdlr7dlHSNBZOqZzpBMPdnDC6VLsDHz1RJNELz9/dmfr78i
b4Q+YdK9AQmnoMySdTg5QnrRpZDMH+PSUUBuUmqU66q9DBUNCFfDvn5LlowROzJC
+Nv3UhIkwF4jfF9h1RdcD2KOZqj5ltCBekNo91DOtPJmCee7Ls9uASl2gSoGKp7F
PN0IRUle4F+EllQY6eVA385hYKZriQnU21bEedBURYBlZEdL4pG8BtF6OVzJsSRa
WGUdjuIDM+5N3fCgDdA2ltMfSW0gbSgJ8DohwMCx1HhXXuSRNiqDYOuSVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSaDh8fuc/1B+jXE2o6iXw88tjcMB8GA1UdIwQY
MBaAFIMjuXMbGWsay8gp9bKLMl/Z0+PUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2Yt
Y2ExZTVmMDgxOTUwLzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2YtY2ExZTVmMDgxOTUw
LzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKMMm1IX
AYc3njPBMjTillSfhkPQBIP7HyTt6Rd4LoTOuXNYc9cu+zg7gyD2r3SOdBQGf0+q
pURmj9FtMXbNtTExlw5xpHfWHbcCNEvIgM8xpInkAEzgkFFeYgbnLIsHvXBj0SGh
Bi9H69T+vxBSv/McOxVnFRKVDEckxRB1ocNiuRbbK7XLfSfayrBCx0qxcbdQHDF/
j/x+pCemzfACB/1FqrsnXktSFqNFJx9wiGfX59Q1YKHE7scZVoeKL8cQOTrVvEsu
3bjoLXO9rWuJt70THqFbZINmllHg8rdm5vHTlsYAjUIu25IaDVKftLf5Zh1T6V5y
NOhIH/4hO9O8bQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 20:49:15 2026 by rpki-client