Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
File: gh8Shdd1qfWJJD6shErcWridl8k.mft (raw, json)
Hash identifier: OstjP4y78fmBmaB05FBrLOQ4Erv8VjqXfYybic9t7M0=
Subject key identifier: 60:6A:9F:26:86:5E:2C:84:73:85:BD:86:23:49:29:AF:92:B8:DD:AE
Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
Certificate issuer: /CN=821f1285d775a9f589243eac844adc5ab89d97c9
Certificate serial: 01A17B8425A62548745B098F603C653DDD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
Manifest number: 0F69
Signing time: Tue 27 Oct 2026 04:00:20 +0000
Manifest this update: Tue 27 Oct 2026 04:00:20 +0000
Manifest next update: Wed 28 Oct 2026 04:00:20 +0000
Files and hashes: 1: Ken1-UyKUV7K-ivTPRx21HrB1go.roa (hash: SzlYiDowE9Ts27wto98BsM6+plGlLtF6xf2nTMUOAKI=)
2: dGmTMuCLcokZ_dpzsnFglotPhbE.roa (hash: xS9B/n1G06zo3aHFhFfNBhI/mXvOeeGrRH7j7PtD+Q0=)
3: gh8Shdd1qfWJJD6shErcWridl8k.crl (hash: Fumu4AoThfQQijVK7xPcJEM3M8ij19jDgxUe1j/6k8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:25:a6:25:48:74:5b:09:8f:60:3c:65:3d:dd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9
Validity
Not Before: Oct 27 04:00:20 2026 GMT
Not After : Oct 28 04:00:20 2026 GMT
Subject: CN=606a9f26865e2c847385bd86234929af92b8ddae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:af:13:c0:d5:35:5e:cf:ab:46:a9:20:bf:13:
5f:88:35:7e:ea:bf:51:a2:c9:80:ce:6f:4b:4f:53:
54:43:d6:d2:d5:6b:4a:48:44:bc:a1:05:df:cc:c7:
ad:62:4c:50:ff:b0:14:0c:e8:85:ec:a5:82:d9:6a:
88:7b:e4:eb:34:e9:43:5c:23:d3:af:66:a3:fb:3b:
34:3c:aa:f2:b8:8c:53:b8:8b:d7:28:c7:ab:fa:7d:
a6:3e:af:8c:a4:db:3e:cd:7d:cd:a5:41:3d:f9:70:
49:f6:35:a4:26:5d:4c:51:33:c6:a6:83:9a:7a:15:
98:b3:79:3f:03:ee:07:82:b6:da:20:b2:0e:cf:5f:
1e:8b:8c:7c:a1:0b:1a:0f:c4:a0:17:ed:20:a4:42:
75:d4:81:b9:23:bf:5c:53:b0:4f:64:4d:c7:f5:8d:
3e:1e:4c:71:0d:ec:28:7d:19:a5:73:b4:28:03:5d:
5d:51:04:ab:46:c6:50:a1:23:97:51:2a:52:f3:40:
51:2d:88:12:b9:af:a0:ec:49:fd:06:ad:4f:0f:37:
a4:b3:99:f0:9a:3b:b2:7b:f0:cf:56:0b:3d:b3:f9:
95:81:ff:94:e5:c2:5d:3d:01:13:f1:6b:0d:34:d3:
ce:ca:f9:59:7d:6e:12:8a:a9:97:5f:f8:27:e6:17:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6A:9F:26:86:5E:2C:84:73:85:BD:86:23:49:29:AF:92:B8:DD:AE
X509v3 Authority Key Identifier:
keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:03:d7:f2:a8:a2:46:61:86:d6:72:2b:ab:f2:c6:a4:1b:fb:
cf:09:c7:bf:dc:96:dd:76:e6:02:dd:69:7d:13:ca:45:f3:07:
14:26:20:99:f6:62:25:e5:77:99:3b:6c:f8:6f:f1:bf:b7:17:
57:39:f6:c3:d0:3c:3c:1e:39:27:33:e8:2e:1a:9b:20:91:ba:
ba:c1:b4:33:4a:c4:bc:ed:02:d3:ca:94:46:a4:8b:74:1e:32:
ea:3b:df:ad:0f:cd:5d:54:05:99:4b:53:e2:a1:40:e8:bc:1d:
f1:eb:dc:d4:25:70:99:44:fc:09:9a:21:39:91:79:7b:6f:2c:
21:f9:a8:1f:32:1a:be:1b:a7:cc:2f:d3:75:cd:01:5d:fe:36:
b3:cf:6b:6f:04:ed:26:36:6b:ef:f8:af:b7:18:07:d8:05:b8:
20:95:83:cf:42:ce:51:f7:30:6c:ac:75:a6:a9:23:e7:55:b8:
c2:71:5c:11:b4:a1:4d:9e:3b:0b:37:51:69:0b:03:a5:a0:4c:
8d:6e:b1:a7:e4:b6:ea:aa:8d:8b:3c:51:c3:ce:08:ad:66:30:
9f:ab:fa:54:66:e8:a4:b2:c5:3e:8e:fa:22:2a:58:33:40:93:
c0:1a:3d:de:5a:c7:4b:b8:49:20:71:e6:89:f3:5a:cb:7f:ed:
fa:98:b2:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7hCWmJUh0WwmPYDxlPd1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWYxMjg1ZDc3NWE5ZjU4OTI0M2VhYzg0NGFkYzVhYjg5
ZDk3YzkwHhcNMjYxMDI3MDQwMDIwWhcNMjYxMDI4MDQwMDIwWjAzMTEwLwYDVQQD
Eyg2MDZhOWYyNjg2NWUyYzg0NzM4NWJkODYyMzQ5MjlhZjkyYjhkZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q8TwNU1Xs+rRqkgvxNfiDV+6r9R
osmAzm9LT1NUQ9bS1WtKSES8oQXfzMetYkxQ/7AUDOiF7KWC2WqIe+TrNOlDXCPT
r2aj+zs0PKryuIxTuIvXKMer+n2mPq+MpNs+zX3NpUE9+XBJ9jWkJl1MUTPGpoOa
ehWYs3k/A+4HgrbaILIOz18ei4x8oQsaD8SgF+0gpEJ11IG5I79cU7BPZE3H9Y0+
HkxxDewofRmlc7QoA11dUQSrRsZQoSOXUSpS80BRLYgSua+g7En9Bq1PDzeks5nw
mjuye/DPVgs9s/mVgf+U5cJdPQET8WsNNNPOyvlZfW4SiqmXX/gn5hfaIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBqnyaGXiyEc4W9hiNJKa+SuN2uMB8GA1UdIwQY
MBaAFIIfEoXXdan1iSQ+rIRK3Fq4nZfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2g4U2hkZDFxZldKSkQ2c2hFcmNXcmlkbDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xN2Q4MWQtMTczZC00NDg2LTk1NWQt
NDhlZWE4ZDVmZWYxLzEvZ2g4U2hkZDFxZldKSkQ2c2hFcmNXcmlkbDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xN2Q4MWQtMTczZC00NDg2LTk1NWQtNDhlZWE4ZDVmZWYx
LzEvZ2g4U2hkZDFxZldKSkQ2c2hFcmNXcmlkbDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgPX8qii
RmGG1nIrq/LGpBv7zwnHv9yW3XbmAt1pfRPKRfMHFCYgmfZiJeV3mTts+G/xv7cX
Vzn2w9A8PB45JzPoLhqbIJG6usG0M0rEvO0C08qURqSLdB4y6jvfrQ/NXVQFmUtT
4qFA6Lwd8evc1CVwmUT8CZohOZF5e28sIfmoHzIavhunzC/Tdc0BXf42s89rbwTt
JjZr7/ivtxgH2AW4IJWDz0LOUfcwbKx1pqkj51W4wnFcEbShTZ47CzdRaQsDpaBM
jW6xp+S26qqNizxRw84IrWYwn6v6VGbopLLFPo76IipYM0CTwBo93lrHS7hJIHHm
ifNay3/t+piyXQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:15:32 2026 by rpki-client