Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
File: gIsAIvj93I8kiP-d-eE6xOLO1xA.mft (raw, json)
Hash identifier: 21ebF8+0tac1I/tw+MxicvkHju3yqd+1mdDQ7zrCE1E=
Subject key identifier: A0:70:1F:96:47:0A:5A:3B:23:0F:0E:C2:5F:83:2C:87:93:1A:E6:D4
Authority key identifier: 80:8B:00:22:F8:FD:DC:8F:24:88:FF:9D:F9:E1:3A:C4:E2:CE:D7:10
Certificate issuer: /CN=808b0022f8fddc8f2488ff9df9e13ac4e2ced710
Certificate serial: 01A17BF2EBAB062AA2D508891FDEF93FDEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:01:19 +0000
Manifest this update: Tue 27 Oct 2026 06:01:19 +0000
Manifest next update: Wed 28 Oct 2026 06:01:19 +0000
Files and hashes: 1: EJdtqQdc0UeFz8mnfKqKtvtPGnk.roa (hash: va4uWHoCe/BbcgVjzuzuEu6jfJbdipgHv67I7KVhA7I=)
2: gIsAIvj93I8kiP-d-eE6xOLO1xA.crl (hash: 0qADss9m5fWua9e5sh/yqOvV0lI6hMKon525W7iy2OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:eb:ab:06:2a:a2:d5:08:89:1f:de:f9:3f:de:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808b0022f8fddc8f2488ff9df9e13ac4e2ced710
Validity
Not Before: Oct 27 06:01:19 2026 GMT
Not After : Oct 28 06:01:19 2026 GMT
Subject: CN=a0701f96470a5a3b230f0ec25f832c87931ae6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:49:6a:51:29:39:42:fa:15:6a:a9:cb:b5:
33:18:09:59:18:4a:d4:ab:07:dd:c3:e8:cb:1c:74:
cd:1b:07:0e:ea:dd:24:85:fe:11:19:20:e7:90:4f:
23:d5:8d:08:db:13:f3:2d:b3:fd:a7:8f:5b:2b:d1:
d2:28:d3:68:dc:72:f0:e3:71:a5:80:d6:bb:b5:75:
77:5a:0c:36:b7:59:dc:fa:b2:da:7a:3f:0a:0a:9d:
af:a7:b7:25:b2:be:e5:06:09:2b:68:c7:d0:27:17:
ba:58:b3:93:3f:1d:21:49:4a:68:7f:d0:27:46:ab:
17:c2:ae:79:6d:26:3c:7d:ef:1d:9c:09:45:5b:1a:
f3:af:40:01:ed:b1:42:3b:96:86:4e:2e:b4:13:43:
8f:da:2e:07:e0:86:54:51:81:16:69:6a:85:1e:91:
50:7d:af:90:e1:18:20:15:a5:9b:e0:19:04:10:b1:
3d:70:45:f1:1c:9b:ed:77:f5:a1:5c:06:72:e3:01:
70:1d:6f:c8:e2:71:89:19:de:e2:19:11:5f:8b:0d:
11:d6:6a:c4:ad:8f:72:ed:b8:e9:fe:a8:74:22:88:
d3:13:84:b1:bc:54:b1:da:d3:6d:dd:fd:81:af:96:
b3:70:b6:75:3f:d2:64:1e:41:12:14:2a:0b:85:e2:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:70:1F:96:47:0A:5A:3B:23:0F:0E:C2:5F:83:2C:87:93:1A:E6:D4
X509v3 Authority Key Identifier:
keyid:80:8B:00:22:F8:FD:DC:8F:24:88:FF:9D:F9:E1:3A:C4:E2:CE:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9d:9a:31:20:f5:f2:ed:d7:74:63:1f:b4:13:f1:43:37:45:
67:e3:9f:5d:90:86:19:a4:93:a9:c1:23:e2:71:11:0c:22:6f:
e7:78:35:77:2c:12:47:86:6a:58:3a:b6:cf:a6:69:a3:68:df:
32:ca:71:59:a0:2e:4b:86:9a:bd:0b:a1:72:3b:94:cc:07:e3:
ff:0c:7b:cd:68:3c:19:ea:09:1a:cb:1f:26:c2:8b:e3:f6:9a:
99:e3:14:b6:2c:10:43:95:3b:91:54:e6:75:cb:3a:28:5f:ac:
c3:f1:93:c6:0b:cd:8e:9c:86:9a:2c:68:e7:cf:61:5b:87:e2:
6d:79:12:f2:fe:c1:b6:cf:ca:55:48:31:03:e7:05:65:79:67:
0a:3d:f3:90:34:40:74:e4:f6:e4:e9:b4:33:67:0d:32:1e:a9:
77:84:2c:f6:2b:5c:c1:4b:c4:c2:31:37:9a:c0:6d:f0:16:17:
c1:5b:a1:01:8d:f7:c8:94:cf:cc:a3:2e:3a:a3:09:04:36:99:
c3:c5:2d:01:32:11:3a:90:86:a8:eb:0b:58:72:78:6b:65:21:
b3:90:b0:e1:1b:9f:27:e6:22:68:6b:2f:cf:4d:31:10:1a:fa:
15:37:64:2a:25:34:9a:3f:e8:42:4f:56:26:be:3d:9f:1b:53:
31:2a:1c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:34 2026 by rpki-client