Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: PGkMQeo/BdmtpsPPka/LpB7gcFiec9JJOvhJY4z4t0U=
Subject key identifier: E0:B6:B7:10:3C:C2:EF:75:01:1B:B0:53:DF:52:07:B1:5B:37:4A:2C
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 01A1803D28E5D704FAED3CDAFB5939FC9CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 02:00:53 +0000
Manifest this update: Wed 28 Oct 2026 02:00:53 +0000
Manifest next update: Thu 29 Oct 2026 02:00:53 +0000
Files and hashes: 1: 1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa (hash: riRb4iPkDBtyw2U0WQzBeSsFtt3y8g90iqUigaVwK4I=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: C0c/rzoH/3YGihNFQ19KI8EIRNmE++A3naqIbdLZGJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:28:e5:d7:04:fa:ed:3c:da:fb:59:39:fc:9c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Oct 28 02:00:53 2026 GMT
Not After : Oct 29 02:00:53 2026 GMT
Subject: CN=e0b6b7103cc2ef75011bb053df5207b15b374a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:08:93:e2:ed:f8:a3:89:31:c8:6a:5b:d7:
fc:34:93:f8:81:ff:e7:69:32:87:e2:4a:50:39:c1:
23:fe:dd:db:59:4a:1a:4b:c7:ae:e0:ab:8a:31:65:
27:d6:d7:d2:d2:a2:76:14:cb:66:eb:79:37:1f:ea:
a4:6a:4e:b9:4d:a5:53:ce:40:2d:23:89:f4:b7:b5:
c8:6b:5b:4c:ce:35:89:9f:9c:00:a7:02:ad:73:58:
25:7c:86:f0:2c:1f:ad:e1:89:ff:3a:72:1c:3a:b9:
2e:30:69:21:9b:ec:ab:46:3e:3f:e8:f5:ce:c8:96:
a2:b7:65:40:f7:1a:ba:ad:30:b1:34:00:4e:f4:a5:
56:a4:6b:6c:b5:7a:a1:79:51:b5:39:1b:64:6f:b6:
11:40:a2:df:6c:0c:a9:df:16:1c:bc:35:b5:c1:5c:
2d:a7:63:ef:7d:d7:48:ea:2d:52:c5:10:7f:19:8c:
bf:af:09:5a:7e:c6:84:f1:8c:0f:0b:37:ed:89:0a:
bc:14:44:c9:af:05:83:ee:1d:16:38:72:58:6e:f0:
ca:50:66:80:19:db:7a:86:61:03:4b:01:9a:84:53:
c6:48:ea:b0:45:c4:5b:5e:36:bf:90:53:3e:5e:c2:
45:71:e7:65:59:48:2e:90:5c:13:d4:6a:50:34:e4:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B6:B7:10:3C:C2:EF:75:01:1B:B0:53:DF:52:07:B1:5B:37:4A:2C
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:89:b8:4d:b2:db:e6:76:d1:08:11:01:08:6d:d0:4a:29:c9:
f0:72:5d:88:8e:d3:bd:26:e3:fa:bc:53:22:0a:3d:98:ce:85:
0c:d6:51:5e:c4:89:3e:35:d0:44:ab:1b:40:bd:1d:09:fc:07:
e9:94:e9:f6:e7:85:ae:20:04:7f:24:4b:35:76:07:ab:96:53:
98:16:c3:ae:ba:96:78:b1:69:1e:92:d0:86:44:9e:91:68:ba:
fe:9b:70:12:35:36:29:3c:cf:ca:fb:ab:31:36:91:9b:25:7f:
31:a9:dd:a3:a2:df:f6:61:ae:8d:1a:6c:69:45:45:eb:74:aa:
dc:2f:d6:eb:4c:e5:ac:a3:4f:75:e1:29:98:85:41:7a:a8:a2:
b9:cf:a2:c9:45:77:c0:90:dc:f8:c1:4b:62:e4:ec:27:3f:3c:
3e:f0:8e:f8:3e:5e:cd:26:a6:1f:a3:e8:7d:e8:be:64:84:f9:
93:a6:cc:68:d1:df:71:46:1f:ce:e6:be:0f:5e:0b:c7:c7:e4:
17:bf:69:26:2b:65:d6:7c:d3:1e:6f:ab:24:8d:30:80:7b:e5:
3f:38:03:cf:3c:16:dd:a0:ee:d8:b2:a2:f8:29:bd:6a:a2:c3:
03:94:c8:65:01:4d:62:d2:2c:93:7f:65:b0:db:7e:a0:a9:cf:
11:cc:c1:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAPSjl1wT67Tza+1k5/JzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNWMwYzlmMjM3NjNjMDM3YmQ2ODg0NzQ1Y2Y4NDY0ZDJk
YjY2M2UwHhcNMjYxMDI4MDIwMDUzWhcNMjYxMDI5MDIwMDUzWjAzMTEwLwYDVQQD
EyhlMGI2YjcxMDNjYzJlZjc1MDExYmIwNTNkZjUyMDdiMTViMzc0YTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8YIk+Lt+KOJMchqW9f8NJP4gf/n
aTKH4kpQOcEj/t3bWUoaS8eu4KuKMWUn1tfS0qJ2FMtm63k3H+qkak65TaVTzkAt
I4n0t7XIa1tMzjWJn5wApwKtc1glfIbwLB+t4Yn/OnIcOrkuMGkhm+yrRj4/6PXO
yJait2VA9xq6rTCxNABO9KVWpGtstXqheVG1ORtkb7YRQKLfbAyp3xYcvDW1wVwt
p2PvfddI6i1SxRB/GYy/rwlafsaE8YwPCzftiQq8FETJrwWD7h0WOHJYbvDKUGaA
Gdt6hmEDSwGahFPGSOqwRcRbXja/kFM+XsJFcedlWUgukFwT1GpQNORwkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC2txA8wu91ARuwU99SB7FbN0osMB8GA1UdIwQY
MBaAFIBcDJ8jdjwDe9aIR0XPhGTS22Y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQt
ODJlMWUyMDA1MDRlLzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQtODJlMWUyMDA1MDRl
LzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4m4TbLb
5nbRCBEBCG3QSinJ8HJdiI7TvSbj+rxTIgo9mM6FDNZRXsSJPjXQRKsbQL0dCfwH
6ZTp9ueFriAEfyRLNXYHq5ZTmBbDrrqWeLFpHpLQhkSekWi6/ptwEjU2KTzPyvur
MTaRmyV/Mando6Lf9mGujRpsaUVF63Sq3C/W60zlrKNPdeEpmIVBeqiiuc+iyUV3
wJDc+MFLYuTsJz88PvCO+D5ezSamH6Pofei+ZIT5k6bMaNHfcUYfzua+D14Lx8fk
F79pJitl1nzTHm+rJI0wgHvlPzgDzzwW3aDu2LKi+Cm9aqLDA5TIZQFNYtIsk39l
sNt+oKnPEczBKw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:16:36 2026 by rpki-client