Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: 4D/Dlcu/0WoFFKcXFreNnp0QjOkcnKLIcmX5hO1ph4I=
Subject key identifier: 9C:86:73:AC:AD:F1:E2:1F:B1:0F:CC:54:4A:43:FC:B8:70:7F:76:81
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 01A03782127CEAC383BBAE531ADB42BC10FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0E35
Signing time: Tue 25 Aug 2026 06:01:06 +0000
Manifest this update: Tue 25 Aug 2026 06:01:06 +0000
Manifest next update: Wed 26 Aug 2026 06:01:06 +0000
Files and hashes: 1: TtXo5-QRvXwKIgknKnZ4_4t2vL8.roa (hash: mXHeMxujxsacK8/QlflktbO+DxAXX0UCko2MtIwDM0I=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: bzJX+w0CGZzdLP6BvBcKncbQtvA1/UW6oG/d0Jt1JEs=)
3: pbTK5peLIyvXvbiyDRGHdQgVdNA.asa (hash: Wtfdhvq2K7gS1UXNM4URBttcFhHoJO+q7bKyWG4w/Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:82:12:7c:ea:c3:83:bb:ae:53:1a:db:42:bc:10:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Aug 25 06:01:06 2026 GMT
Not After : Aug 26 06:01:06 2026 GMT
Subject: CN=9c8673acadf1e21fb10fcc544a43fcb8707f7681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:38:a6:09:ce:2b:67:16:87:11:a1:b8:42:
e2:94:1c:73:17:b7:f2:49:11:a2:07:0a:80:3a:83:
3c:3b:02:78:21:45:fe:84:3c:cd:eb:bc:15:4b:0c:
1d:bd:4f:16:48:fe:ca:eb:f3:e9:c0:8b:e3:b6:0c:
09:02:c7:4b:60:96:b2:bb:15:b5:92:e5:10:6d:b0:
3f:93:a6:f9:8a:24:61:98:c3:9d:3b:bf:a6:e3:56:
96:d9:63:a2:ac:bd:98:cd:07:4f:80:3f:a9:8d:97:
48:c3:a1:ac:1b:25:6d:5e:64:68:7a:1a:6f:61:60:
b5:0b:5e:a8:eb:56:b4:1b:e6:ff:a0:55:1a:23:1e:
b6:2f:81:0e:1d:fd:25:b5:67:ad:0d:a1:ff:bf:4a:
e8:43:60:34:f7:9a:c0:79:73:d1:e5:1b:f7:63:66:
56:34:ed:88:4d:9f:55:2f:6a:55:44:73:b3:16:02:
33:2f:12:ae:21:5a:bd:7c:ac:f7:c0:6c:b9:6f:65:
7a:27:12:6c:8c:90:57:26:85:37:94:a3:95:58:41:
a7:1c:ca:87:c3:f8:e4:f5:5c:2d:f5:67:30:88:ff:
c4:d8:0b:ef:4d:c1:59:e4:b1:66:d4:c3:8c:c8:dd:
c3:b5:c0:ca:7f:82:f9:bd:33:ac:1b:c7:19:bf:ee:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:86:73:AC:AD:F1:E2:1F:B1:0F:CC:54:4A:43:FC:B8:70:7F:76:81
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:39:a2:08:56:bd:63:ea:a2:05:f7:64:2f:35:a1:9a:4e:f5:
63:4d:36:b8:a9:a0:bc:60:d0:aa:70:cf:34:ac:be:43:5b:67:
06:ef:88:09:fd:3d:e0:28:d4:5c:f7:57:f5:d7:0c:7e:30:11:
40:27:86:ce:6a:60:b2:af:62:e3:12:93:74:74:0f:9a:a8:75:
dd:1f:2e:67:b7:93:f0:89:51:b7:31:f6:5f:91:e7:3a:df:87:
c3:81:ee:89:b7:1e:e7:8a:54:c7:2a:96:b6:c4:da:bf:de:5e:
fc:e2:f4:f5:2c:5b:ad:ce:ee:54:b5:b3:eb:9c:5d:d2:28:c9:
1f:bc:86:61:a4:b6:8e:60:90:5c:3b:38:12:64:0e:3e:20:d0:
4f:ea:0c:7e:c3:0e:0a:46:ef:bf:7c:f8:d7:e4:64:00:9f:71:
d0:af:35:95:02:e3:f2:8a:b9:fc:85:22:d6:22:eb:5c:7a:cc:
90:d2:79:ba:d8:87:9e:5c:25:2e:17:e5:9b:86:27:02:78:61:
5e:7e:7e:d7:0c:a0:54:fc:16:d9:8a:b5:89:3f:53:65:63:4b:
d3:a1:22:0f:40:b2:d8:ab:d1:ba:df:22:c9:53:ec:c6:a8:af:
e4:47:d8:da:22:69:77:7d:8f:b9:26:42:e0:b3:5a:33:66:9c:
ae:25:12:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:20:06 2026 by rpki-client