Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier: vFsPO29+HxF0cKDH0iBLu5TNhnWoyy7aH9zMjqL+CSc=
Subject key identifier: A2:E8:90:E4:0B:A0:5A:2E:C7:2A:13:0F:FB:61:66:ED:DD:78:C5:71
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial: 01A1AAF095DA8F9C1DC0A1A2AFD421C1BBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number: 1ADE
Signing time: Thu 05 Nov 2026 09:00:56 +0000
Manifest this update: Thu 05 Nov 2026 09:00:56 +0000
Manifest next update: Fri 06 Nov 2026 09:00:56 +0000
Files and hashes: 1: O3TgIYfAHWe9Lkw62SIONG49OPw.roa (hash: smitBFjOFy5lk8KDnUJs0cJsQZAkU4O65hjTxT88iY0=)
2: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: rmbbTecYlxW2GqgmgD03qF44YSfCVWOiZhuIaVhnT6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:f0:95:da:8f:9c:1d:c0:a1:a2:af:d4:21:c1:bb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Validity
Not Before: Nov 5 09:00:56 2026 GMT
Not After : Nov 6 09:00:56 2026 GMT
Subject: CN=a2e890e40ba05a2ec72a130ffb6166eddd78c571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:0c:4a:0b:96:92:f9:98:6c:c2:73:e9:71:
06:11:d3:83:e6:d2:04:ca:78:99:c1:0c:3d:4f:2e:
e6:ab:9d:28:73:3a:83:e5:26:31:2d:26:42:06:cb:
5d:97:d9:38:e7:6b:48:09:db:21:be:13:b2:dc:6c:
9b:12:d9:ff:63:aa:45:72:1b:d9:b6:cf:ad:3e:ec:
69:98:33:8d:4d:d1:35:9e:8a:10:d9:fa:fa:00:00:
53:ef:b7:59:f2:c1:e5:fe:bc:44:e2:dd:7a:34:b4:
73:f7:5a:ce:f5:f1:2e:f8:79:e0:ab:1a:dd:4c:ee:
6e:de:4d:21:de:e5:0c:ed:74:f3:a3:37:52:fe:c0:
35:c1:7b:b3:ed:fe:4b:bd:98:34:5c:b0:87:3a:a0:
07:26:50:42:da:fc:74:40:c9:2c:61:12:7f:1c:65:
6c:ec:6a:73:ab:dd:1e:04:5f:b3:96:99:c8:d5:37:
31:75:c3:bd:16:2b:1e:fe:ed:e6:b8:84:a6:68:a8:
69:b8:0c:f6:0b:89:6b:93:64:57:da:e0:b5:ca:c5:
05:72:35:0c:44:c3:85:10:dd:26:fc:43:a3:b4:6a:
c6:0a:c1:5c:5e:f0:02:58:a7:bc:82:28:d0:01:75:
18:e0:b9:1a:5e:44:82:06:41:a8:8f:09:2b:3c:c0:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E8:90:E4:0B:A0:5A:2E:C7:2A:13:0F:FB:61:66:ED:DD:78:C5:71
X509v3 Authority Key Identifier:
keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:68:6a:63:58:0d:2f:14:40:bd:f8:0e:a4:a0:fc:01:19:96:
be:13:e6:8d:69:0b:03:ac:f8:e6:a3:c4:35:ba:e3:f3:c5:10:
a2:09:0b:c3:0f:1a:e9:e2:66:92:65:54:37:5c:9c:40:d5:41:
89:cc:c7:37:f7:29:0d:96:f4:ca:4a:02:f8:23:d5:6e:eb:ba:
9e:3b:d0:f8:21:88:4f:99:60:54:30:04:e9:a7:04:5e:35:f1:
9c:d6:b4:4f:3f:da:82:bc:2b:e8:0c:e4:43:da:4d:75:72:47:
5e:47:03:74:4c:2d:2c:4f:5a:4a:ee:0e:11:b4:90:ec:25:ab:
ae:7c:8c:04:ed:ed:bb:d5:17:51:fb:d5:4d:70:91:32:d4:e4:
46:02:42:b1:41:fe:b7:83:7e:31:a1:80:6b:51:f1:95:82:f8:
4a:8b:6f:3a:ed:78:b6:80:9d:d9:65:4d:a5:82:a7:fe:e9:05:
d4:30:4c:c8:19:59:28:26:6f:1a:89:b1:3c:40:c4:bf:25:ed:
56:fb:c5:da:e2:66:7c:14:8d:cd:8a:2b:73:66:d9:c0:07:81:
56:c4:d4:78:94:e3:ce:d0:69:31:f5:76:82:1c:0e:b5:ac:81:
b2:70:53:15:c8:48:13:1d:28:95:2f:41:ab:9d:50:0d:21:fd:
f0:74:77:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGq8JXaj5wdwKGir9QhwbvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDhkYTdjYmU4Y2E0MTg2NWJkYTFhMDgyZTAwY2I1YzI1
ODg3YWYwHhcNMjYxMTA1MDkwMDU2WhcNMjYxMTA2MDkwMDU2WjAzMTEwLwYDVQQD
EyhhMmU4OTBlNDBiYTA1YTJlYzcyYTEzMGZmYjYxNjZlZGRkNzhjNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszwMSguWkvmYbMJz6XEGEdOD5tIE
yniZwQw9Ty7mq50oczqD5SYxLSZCBstdl9k452tICdshvhOy3GybEtn/Y6pFchvZ
ts+tPuxpmDONTdE1nooQ2fr6AABT77dZ8sHl/rxE4t16NLRz91rO9fEu+Hngqxrd
TO5u3k0h3uUM7XTzozdS/sA1wXuz7f5LvZg0XLCHOqAHJlBC2vx0QMksYRJ/HGVs
7Gpzq90eBF+zlpnI1TcxdcO9Fise/u3muISmaKhpuAz2C4lrk2RX2uC1ysUFcjUM
RMOFEN0m/EOjtGrGCsFcXvACWKe8gijQAXUY4LkaXkSCBkGojwkrPMBkPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLokOQLoFouxyoTD/thZu3deMVxMB8GA1UdIwQY
MBaAFINI2ny+jKQYZb2hoILgDLXCWIevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBqYWZMNk1wQmhsdmFHZ2d1QU10Y0pZaDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85M2RhM2EtODdkNS00NDMzLTlmMzgt
YTI5NjA5MmJlMTUzLzEvZzBqYWZMNk1wQmhsdmFHZ2d1QU10Y0pZaDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85M2RhM2EtODdkNS00NDMzLTlmMzgtYTI5NjA5MmJlMTUz
LzEvZzBqYWZMNk1wQmhsdmFHZ2d1QU10Y0pZaDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWhqY1gN
LxRAvfgOpKD8ARmWvhPmjWkLA6z45qPENbrj88UQogkLww8a6eJmkmVUN1ycQNVB
iczHN/cpDZb0ykoC+CPVbuu6njvQ+CGIT5lgVDAE6acEXjXxnNa0Tz/agrwr6Azk
Q9pNdXJHXkcDdEwtLE9aSu4OEbSQ7CWrrnyMBO3tu9UXUfvVTXCRMtTkRgJCsUH+
t4N+MaGAa1HxlYL4SotvOu14toCd2WVNpYKn/ukF1DBMyBlZKCZvGomxPEDEvyXt
VvvF2uJmfBSNzYorc2bZwAeBVsTUeJTjztBpMfV2ghwOtayBsnBTFchIEx0olS9B
q51QDSH98HR3Hw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:47:56 2026 by rpki-client