Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier: eQxtvaSOalac04UGw6tVUsglLV0gpoTZCleSpsH78cA=
Subject key identifier: 86:7F:93:4A:2C:54:B4:80:B0:26:99:10:EB:73:38:BD:F5:64:D8:87
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 01A021312F3EA279B6635C4FE482B6B6B744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number: 1A11
Signing time: Thu 20 Aug 2026 22:01:06 +0000
Manifest this update: Thu 20 Aug 2026 22:01:06 +0000
Manifest next update: Fri 21 Aug 2026 22:01:06 +0000
Files and hashes: 1: Qy5yKoxjLWJA1uRpC0vjfkx5IHQ.roa (hash: y7SNkohtjGeeXJKm5Co5EsY36dtQ+/7kfkwvtYcQU4g=)
2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: xfUI5yyYJRMQFYO/srtPOVXl7b8SfZYU726Nb+iTNM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:31:2f:3e:a2:79:b6:63:5c:4f:e4:82:b6:b6:b7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Aug 20 22:01:06 2026 GMT
Not After : Aug 21 22:01:06 2026 GMT
Subject: CN=867f934a2c54b480b0269910eb7338bdf564d887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:d7:53:dd:f5:60:e1:e6:8e:f8:ed:11:eb:
13:ee:2b:b6:68:47:96:28:65:1b:a8:89:7a:f9:d6:
a5:e5:c9:1c:82:0f:cc:45:2a:e1:76:09:88:98:80:
2b:2b:65:50:33:5a:64:d8:20:b7:35:09:21:7b:fd:
1f:03:e2:62:f3:cd:f5:49:55:85:52:f1:3e:f6:45:
f6:08:a8:1f:60:d1:8a:f5:46:55:e3:50:6c:cd:c1:
da:e9:75:1c:24:2d:05:64:82:40:1a:39:f4:52:1e:
90:43:cc:67:ac:bc:31:a3:7d:2c:f1:c5:2e:c5:e8:
f7:7a:fe:7d:97:38:c4:e1:28:a2:95:9b:b6:1e:80:
8c:79:e8:9f:72:f3:c4:f9:2a:c6:3f:57:2e:d1:5a:
66:81:20:7e:88:70:da:6a:ba:11:35:16:51:09:31:
e7:e5:af:83:df:fb:eb:43:22:af:04:79:c4:6f:9f:
e7:3b:02:17:5a:2c:1a:47:a4:fd:03:43:bf:42:75:
fe:c3:2c:2d:36:ae:9a:1e:a8:d2:03:4c:d5:2b:02:
76:6a:ce:4a:35:bf:06:68:7e:05:95:ff:d4:24:10:
1c:21:e6:b2:54:7c:fa:ce:9a:d9:ac:0b:44:f6:aa:
65:63:4a:e1:4d:1b:2e:f3:81:22:4f:17:16:05:6a:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7F:93:4A:2C:54:B4:80:B0:26:99:10:EB:73:38:BD:F5:64:D8:87
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f5:4f:99:2e:ba:62:78:e2:16:b8:a0:9f:c7:31:3f:a6:d6:
e9:37:b4:b3:91:a5:6e:4d:cc:79:80:b8:7e:d8:4b:06:b5:6c:
e1:db:d7:1f:d6:18:b6:69:7c:0c:12:91:d2:a8:d2:7c:83:8f:
60:e1:07:16:4d:44:20:73:a7:06:5f:14:7a:69:d7:18:e5:f8:
44:25:3a:40:13:2f:ee:f2:b0:44:a3:25:62:7c:99:33:24:17:
ad:6c:28:6f:18:84:4c:3f:9f:0d:98:01:a9:51:7c:27:fb:f8:
71:69:cf:08:76:cd:04:99:a9:bb:bc:f8:4c:eb:31:a9:3e:16:
0f:38:7c:2d:37:58:dd:db:61:5b:8d:3e:2d:90:96:fe:3b:b9:
4f:78:0e:b7:92:d9:d0:f5:42:3d:76:1a:44:e0:a7:e7:38:59:
f3:97:69:e9:3d:73:3d:e9:d8:44:c6:4e:bf:aa:6a:6b:56:fe:
22:df:0d:52:11:26:32:40:d5:56:f6:bf:6b:cc:8e:0c:70:db:
a1:8c:73:e2:f5:df:d7:67:49:d3:2c:6e:fc:86:98:4c:f4:c1:
e6:8f:fc:7b:52:e1:7c:9b:3e:ab:48:53:18:96:8d:51:13:91:
75:7a:5b:7f:4f:1f:88:86:a7:b1:f7:cf:a2:83:28:74:78:b7:
ec:98:77:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAhMS8+onm2Y1xP5IK2trdEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMTI0ZDA0MTFhMjBmZDJiYjU0Njk3MGVhODAxMTZlZjI3
NmRiYWIwHhcNMjYwODIwMjIwMTA2WhcNMjYwODIxMjIwMTA2WjAzMTEwLwYDVQQD
Eyg4NjdmOTM0YTJjNTRiNDgwYjAyNjk5MTBlYjczMzhiZGY1NjRkODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8XXU931YOHmjvjtEesT7iu2aEeW
KGUbqIl6+dal5ckcgg/MRSrhdgmImIArK2VQM1pk2CC3NQkhe/0fA+Ji8831SVWF
UvE+9kX2CKgfYNGK9UZV41BszcHa6XUcJC0FZIJAGjn0Uh6QQ8xnrLwxo30s8cUu
xej3ev59lzjE4SiilZu2HoCMeeifcvPE+SrGP1cu0VpmgSB+iHDaaroRNRZRCTHn
5a+D3/vrQyKvBHnEb5/nOwIXWiwaR6T9A0O/QnX+wywtNq6aHqjSA0zVKwJ2as5K
Nb8GaH4Flf/UJBAcIeayVHz6zprZrAtE9qplY0rhTRsu84EiTxcWBWrQpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZ/k0osVLSAsCaZEOtzOL31ZNiHMB8GA1UdIwQY
MBaAFIMSTQQRog/Su1RpcOqAEW7ydturMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmIt
ZmNmMGYxNTk0ZDJmLzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmItZmNmMGYxNTk0ZDJm
LzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPVPmS66
YnjiFrign8cxP6bW6Te0s5Glbk3MeYC4fthLBrVs4dvXH9YYtml8DBKR0qjSfIOP
YOEHFk1EIHOnBl8UemnXGOX4RCU6QBMv7vKwRKMlYnyZMyQXrWwobxiETD+fDZgB
qVF8J/v4cWnPCHbNBJmpu7z4TOsxqT4WDzh8LTdY3dthW40+LZCW/ju5T3gOt5LZ
0PVCPXYaROCn5zhZ85dp6T1zPenYRMZOv6pqa1b+It8NUhEmMkDVVva/a8yODHDb
oYxz4vXf12dJ0yxu/IaYTPTB5o/8e1LhfJs+q0hTGJaNURORdXpbf08fiIansffP
ooModHi37Jh3gw==
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:35:16 2026 by rpki-client