Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
File: gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json)
Hash identifier: wmUHUK456LZ4eL22hTbSpebfqh4jCIrj1PaJYDCExN8=
Subject key identifier: BF:D7:DC:CC:AD:55:7A:43:E6:9A:FD:67:8B:8A:B5:22:55:FF:BE:7C
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Certificate issuer: /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial: 01A1784CA0544A4321BE813444379128B567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
Manifest number: 07C9
Signing time: Mon 26 Oct 2026 13:00:50 +0000
Manifest this update: Mon 26 Oct 2026 13:00:50 +0000
Manifest next update: Tue 27 Oct 2026 13:00:50 +0000
Files and hashes: 1: fZAzCiUywNplLCNiRhDfKrlfG_w.roa (hash: 3BGp9D7RFRPhwzgCFhMEEth9zMM9VYj+/fIdqEAt+6g=)
2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: O2cMoPtQFVEyW4LIPfpg+gIVF6eD9NKV1XPp4ZxICtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:a0:54:4a:43:21:be:81:34:44:37:91:28:b5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Validity
Not Before: Oct 26 13:00:50 2026 GMT
Not After : Oct 27 13:00:50 2026 GMT
Subject: CN=bfd7dcccad557a43e69afd678b8ab52255ffbe7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:88:a3:af:de:46:35:76:9f:10:11:41:7c:c7:
f0:d2:e5:b7:53:fc:fd:aa:40:ee:28:40:a0:c8:93:
e3:0e:93:11:b0:49:6e:7f:00:cc:3b:07:97:0b:56:
03:3f:7b:c3:08:8d:53:54:24:c9:7d:17:45:9a:6b:
49:6d:4a:b9:f3:3c:b2:7d:52:e4:76:f6:43:ad:48:
f1:96:21:b9:e9:0d:91:65:31:e2:22:74:9b:30:03:
09:4b:dd:48:6f:30:30:2b:cd:20:52:5a:c0:a8:64:
a9:26:ff:07:3c:ef:77:5a:89:a5:c8:df:05:c4:fd:
a1:bf:90:f1:44:f8:ff:e4:4a:fd:90:cd:6e:c3:f6:
8f:bc:9f:d1:ea:e9:19:6a:a2:6a:18:d0:6d:50:00:
41:75:83:4d:24:7b:8d:99:1f:c0:4c:eb:0e:f1:15:
b9:ee:ab:8f:d7:24:37:c7:7f:33:1b:72:c2:28:0d:
84:21:83:10:52:06:04:d7:9f:93:39:cd:e0:8e:14:
db:b9:16:a4:26:37:d5:8b:87:46:c6:ea:0c:3e:c0:
0c:3a:42:85:5d:b1:fc:c8:16:81:6c:97:b5:98:7e:
4c:98:0c:f3:de:60:f5:5f:2b:dd:e0:6b:74:5a:36:
76:82:fc:69:a7:ad:98:5c:5a:50:62:8a:20:88:11:
36:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D7:DC:CC:AD:55:7A:43:E6:9A:FD:67:8B:8A:B5:22:55:FF:BE:7C
X509v3 Authority Key Identifier:
keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0b:cd:7c:00:28:49:67:ee:80:63:a0:c1:91:55:bf:14:ad:
6b:fb:9c:1f:b0:34:6d:36:d5:3d:89:33:e5:b2:ad:cc:ad:a8:
a3:15:bf:5a:f3:2a:42:53:6a:2f:3a:8c:07:7c:99:af:71:03:
40:ea:b2:1a:b9:cb:53:bb:4a:bc:d0:fe:56:2d:96:06:77:98:
dd:ca:3f:81:34:89:d7:1c:f4:3f:7f:b9:cd:cd:9c:79:6d:6b:
c5:f5:18:e0:89:6e:32:48:f9:0f:ed:e9:25:9f:11:f2:e2:e1:
aa:df:ff:fa:72:52:52:06:29:75:3c:59:2e:ab:a6:cf:4f:a7:
cf:f8:37:ac:59:e4:2b:ec:93:fa:34:57:5e:f0:df:b8:98:85:
1d:c0:46:9c:03:4c:6e:56:52:e9:45:89:7e:91:32:62:2a:f0:
f4:c8:1f:c2:a9:bd:c2:e6:04:4b:2a:b5:0c:ad:3a:68:b7:52:
a0:59:b9:74:17:ba:a1:6e:a5:3c:95:c3:72:1f:d9:80:7a:5d:
84:1c:f5:3a:2d:cf:bc:0b:06:06:58:08:af:0b:3c:05:96:dc:
bb:a2:3c:28:ee:14:18:3f:f6:06:72:a9:2b:5f:84:8f:31:a8:
34:e6:9e:65:79:81:a7:52:46:f3:63:3a:0e:4b:14:e4:b4:08:
dc:fa:6b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:05:19 2026 by rpki-client