Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
File: gIsAIvj93I8kiP-d-eE6xOLO1xA.mft (raw, json)
Hash identifier: H5D4CoP5PKIFjds0zlrTUhoL2DdLF688ydFCHmYQkOI=
Subject key identifier: E8:D8:97:12:E8:62:68:6C:DC:08:E0:DA:C0:AE:82:8C:37:C2:F7:E9
Authority key identifier: 80:8B:00:22:F8:FD:DC:8F:24:88:FF:9D:F9:E1:3A:C4:E2:CE:D7:10
Certificate issuer: /CN=808b0022f8fddc8f2488ff9df9e13ac4e2ced710
Certificate serial: 01A08A8D07BA96B3E385942ACA20FD49BCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:33 +0000
Manifest this update: Thu 10 Sep 2026 09:01:33 +0000
Manifest next update: Fri 11 Sep 2026 09:01:33 +0000
Files and hashes: 1: EJdtqQdc0UeFz8mnfKqKtvtPGnk.roa (hash: va4uWHoCe/BbcgVjzuzuEu6jfJbdipgHv67I7KVhA7I=)
2: gIsAIvj93I8kiP-d-eE6xOLO1xA.crl (hash: qGleX2Yh7iEM4nWJ/PmUazjQtXShSksPnyyOhNGrUQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:07:ba:96:b3:e3:85:94:2a:ca:20:fd:49:bc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808b0022f8fddc8f2488ff9df9e13ac4e2ced710
Validity
Not Before: Sep 10 09:01:33 2026 GMT
Not After : Sep 11 09:01:33 2026 GMT
Subject: CN=e8d89712e862686cdc08e0dac0ae828c37c2f7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:ca:3b:a0:45:fd:d5:b2:02:13:61:35:30:
8f:a3:f7:d7:65:3e:0c:32:95:10:a2:7c:4a:a1:e7:
8e:f0:09:18:b5:28:77:9c:8e:a9:fa:0e:49:6e:99:
b0:e6:c8:cb:1a:8c:70:1d:50:ba:ff:b7:09:bc:4f:
98:e6:29:9f:a5:07:15:05:82:02:d2:bb:25:c2:44:
3d:19:95:be:19:a2:c1:a0:c1:1d:cb:e4:23:bc:09:
ee:49:da:fe:5e:0e:55:5e:91:88:52:3f:10:9d:bc:
66:97:89:a6:ce:19:ef:68:e8:9e:0c:dc:dd:11:9a:
7e:3e:a8:48:4f:bf:72:97:d0:db:b2:e0:7d:1e:c7:
0c:05:90:de:88:f7:ad:62:1e:74:23:57:fe:7c:4f:
dc:5d:e3:ab:30:2c:cb:08:97:d4:53:d1:2d:43:b5:
e8:9b:a9:8e:99:c6:55:d0:8c:07:62:c0:88:7d:94:
a0:a5:b8:f8:c9:d6:34:b7:63:c5:9f:4a:45:7e:7b:
4e:65:e3:40:04:5e:4d:4a:3b:cc:45:34:e6:2b:1a:
64:62:c7:25:c5:c3:9d:15:d6:79:6a:65:c6:6e:0d:
76:d5:c6:0e:54:fc:d5:10:d8:18:db:7d:4b:f1:3d:
b3:c3:9d:b0:08:94:24:75:d9:a8:dd:08:76:e5:df:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D8:97:12:E8:62:68:6C:DC:08:E0:DA:C0:AE:82:8C:37:C2:F7:E9
X509v3 Authority Key Identifier:
keyid:80:8B:00:22:F8:FD:DC:8F:24:88:FF:9D:F9:E1:3A:C4:E2:CE:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:13:6a:af:75:e5:88:66:63:ce:1a:b4:c8:54:42:7a:eb:03:
68:2b:2d:e7:c7:c4:59:f9:9f:2d:4a:21:61:70:94:e5:ca:ae:
42:64:a9:59:b5:49:24:c4:69:87:29:1f:52:7f:81:8c:16:35:
47:38:b3:89:a4:2d:81:d1:ad:76:a4:9e:37:fa:80:01:f5:93:
34:03:27:8c:8a:12:bc:cf:6f:bb:7d:12:f9:a7:6a:5a:db:55:
d7:c1:0f:d5:fc:dc:d2:a8:31:31:17:05:ac:1a:d0:bf:25:04:
c6:46:aa:6a:6e:4b:74:11:cf:ee:cd:b9:37:ef:9a:ad:33:af:
5d:87:7d:9e:60:09:33:5d:57:31:f4:ab:cf:27:f5:e0:56:4e:
40:4c:d1:82:9f:ff:46:0f:23:dc:b9:62:c9:72:1d:52:d0:56:
1d:b7:c8:90:c5:70:58:f4:30:6f:1d:e3:bc:b7:74:79:d2:f3:
d0:45:72:0e:0d:dc:15:3c:97:b2:5a:af:c7:cc:be:d1:57:9f:
3b:d1:6d:75:a1:db:23:7e:73:3e:7c:0f:7d:46:7f:e2:4a:cc:
41:d9:92:36:53:59:14:27:f8:72:e8:b0:4a:f8:89:9e:a5:54:
2b:99:8f:b3:93:ea:ba:44:6a:88:f9:bc:ca:da:3c:c1:59:38:
e7:81:ee:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:17:09 2026 by rpki-client