Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
File: gh8Shdd1qfWJJD6shErcWridl8k.mft (raw, json)
Hash identifier: kYFN14owyJDV1a4X2jvfVBMAtOHZr10MTiHGGDNPSMk=
Subject key identifier: A0:58:30:29:64:0D:19:31:DA:7F:6D:4B:08:2C:99:52:6F:28:A3:47
Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
Certificate issuer: /CN=821f1285d775a9f589243eac844adc5ab89d97c9
Certificate serial: 01A08A1F5C821D131CFDE1F03CA2156B6E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
Manifest number: 0EEC
Signing time: Thu 10 Sep 2026 07:01:45 +0000
Manifest this update: Thu 10 Sep 2026 07:01:45 +0000
Manifest next update: Fri 11 Sep 2026 07:01:45 +0000
Files and hashes: 1: Ken1-UyKUV7K-ivTPRx21HrB1go.roa (hash: SzlYiDowE9Ts27wto98BsM6+plGlLtF6xf2nTMUOAKI=)
2: dGmTMuCLcokZ_dpzsnFglotPhbE.roa (hash: xS9B/n1G06zo3aHFhFfNBhI/mXvOeeGrRH7j7PtD+Q0=)
3: gh8Shdd1qfWJJD6shErcWridl8k.crl (hash: UE2R5LPWUOL37F47Jt/SpJEHGzjq8uAPRcxFHmd1y8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:5c:82:1d:13:1c:fd:e1:f0:3c:a2:15:6b:6e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9
Validity
Not Before: Sep 10 07:01:45 2026 GMT
Not After : Sep 11 07:01:45 2026 GMT
Subject: CN=a0583029640d1931da7f6d4b082c99526f28a347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:43:2f:19:52:b5:67:64:53:b4:2b:ee:ce:
47:a1:72:bf:c3:c5:36:fe:3d:78:61:9b:64:ed:ee:
a3:ba:10:2e:23:3d:60:af:20:b6:5f:20:e8:bd:92:
6e:3c:31:67:4e:00:81:bc:b1:1a:51:61:d3:30:7f:
20:82:22:52:f6:3d:f4:8c:e9:73:88:01:05:7e:52:
4a:9f:22:42:47:9a:ee:29:a9:ba:e1:2c:40:b7:2d:
02:83:fa:ff:7a:83:77:6c:d8:2f:dc:ec:92:e8:99:
6f:fa:c2:55:cf:70:8f:1f:9b:8c:58:a1:91:00:5a:
f5:46:a7:aa:ed:46:e7:cd:e9:2a:71:21:60:d4:41:
aa:b4:29:d2:f4:eb:2a:a3:78:e3:2d:42:7c:70:85:
f5:e2:d0:a2:da:5a:46:22:d2:10:49:a7:eb:10:66:
4c:01:0a:0d:57:20:8f:51:00:a2:8b:99:f3:78:89:
90:e0:8f:8e:cc:e5:bc:74:ac:32:09:b7:f3:0e:58:
06:d6:a4:a0:b8:b4:7f:e9:69:c0:57:89:37:4a:6a:
09:b4:70:df:2d:08:aa:ef:be:b7:af:dd:ba:f1:96:
93:ee:f5:4a:f1:03:42:ff:ac:fa:09:c9:25:a4:c4:
08:f6:7f:a1:7d:a1:b4:15:09:3f:97:6c:0f:c1:f1:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:58:30:29:64:0D:19:31:DA:7F:6D:4B:08:2C:99:52:6F:28:A3:47
X509v3 Authority Key Identifier:
keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0d:25:12:6d:86:24:be:e0:72:62:12:c2:c3:db:41:14:0f:
1e:e0:ea:96:7b:a2:b3:85:cf:2f:50:e1:66:15:d3:7f:5e:f9:
c6:af:3e:c9:61:34:82:94:2d:38:b4:ba:87:c2:7e:4e:8c:d5:
78:f3:95:51:74:20:76:a0:51:2e:11:db:21:e4:ab:8c:aa:fe:
8f:6f:e7:ba:3f:b3:f8:55:88:f2:02:d3:3c:10:7c:05:95:26:
23:49:ef:b4:41:6e:9a:28:e5:cc:25:48:16:04:d0:89:47:d1:
11:96:42:4f:01:40:39:cd:dc:76:53:15:a0:42:37:75:18:d1:
a9:68:f3:c1:75:25:6f:76:27:38:01:67:4f:2f:b5:99:25:fc:
8d:de:f2:63:9a:06:98:a8:dd:f5:a3:3f:fd:06:34:de:08:fd:
8e:6b:eb:52:05:e6:eb:20:2b:fd:8e:e9:f1:b5:e8:bd:09:bc:
f4:ff:ab:47:7e:b4:01:aa:3d:4d:eb:1a:e1:c0:16:96:f6:ce:
c2:3c:07:25:5c:4b:48:9a:59:da:7a:47:15:cf:a7:e2:67:87:
4f:6c:5b:d8:d9:84:cc:f1:66:db:e5:c2:4b:a7:e8:f3:eb:7e:
69:6e:3f:98:13:c8:6d:24:a7:2d:c6:a7:b8:a3:7e:0c:35:68:
5c:5b:73:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKH1yCHRMc/eHwPKIVa24yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWYxMjg1ZDc3NWE5ZjU4OTI0M2VhYzg0NGFkYzVhYjg5
ZDk3YzkwHhcNMjYwOTEwMDcwMTQ1WhcNMjYwOTExMDcwMTQ1WjAzMTEwLwYDVQQD
EyhhMDU4MzAyOTY0MGQxOTMxZGE3ZjZkNGIwODJjOTk1MjZmMjhhMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhZDLxlStWdkU7Qr7s5HoXK/w8U2
/j14YZtk7e6juhAuIz1gryC2XyDovZJuPDFnTgCBvLEaUWHTMH8ggiJS9j30jOlz
iAEFflJKnyJCR5ruKam64SxAty0Cg/r/eoN3bNgv3OyS6Jlv+sJVz3CPH5uMWKGR
AFr1Rqeq7UbnzekqcSFg1EGqtCnS9Osqo3jjLUJ8cIX14tCi2lpGItIQSafrEGZM
AQoNVyCPUQCii5nzeImQ4I+OzOW8dKwyCbfzDlgG1qSguLR/6WnAV4k3SmoJtHDf
LQiq7763r9268ZaT7vVK8QNC/6z6CcklpMQI9n+hfaG0FQk/l2wPwfE55QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBYMClkDRkx2n9tSwgsmVJvKKNHMB8GA1UdIwQY
MBaAFIIfEoXXdan1iSQ+rIRK3Fq4nZfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2g4U2hkZDFxZldKSkQ2c2hFcmNXcmlkbDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xN2Q4MWQtMTczZC00NDg2LTk1NWQt
NDhlZWE4ZDVmZWYxLzEvZ2g4U2hkZDFxZldKSkQ2c2hFcmNXcmlkbDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xN2Q4MWQtMTczZC00NDg2LTk1NWQtNDhlZWE4ZDVmZWYx
LzEvZ2g4U2hkZDFxZldKSkQ2c2hFcmNXcmlkbDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABA0lEm2G
JL7gcmISwsPbQRQPHuDqlnuis4XPL1DhZhXTf175xq8+yWE0gpQtOLS6h8J+TozV
ePOVUXQgdqBRLhHbIeSrjKr+j2/nuj+z+FWI8gLTPBB8BZUmI0nvtEFumijlzCVI
FgTQiUfREZZCTwFAOc3cdlMVoEI3dRjRqWjzwXUlb3YnOAFnTy+1mSX8jd7yY5oG
mKjd9aM//QY03gj9jmvrUgXm6yAr/Y7p8bXovQm89P+rR360Aao9Tesa4cAWlvbO
wjwHJVxLSJpZ2npHFc+n4meHT2xb2NmEzPFm2+XCS6fo8+t+aW4/mBPIbSSnLcan
uKN+DDVoXFtzAw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:01:58 2026 by rpki-client