Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: O+zrNYjskRMIneSp01c95Si6F+sABTTL9XdLB4kt1pc=
Subject key identifier: CA:D4:AF:8A:0B:87:25:47:C3:B3:A3:66:C1:81:01:55:61:63:71:EA
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 01A08B318B359511DDAC05FC6041D6503778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 12:01:14 +0000
Manifest this update: Thu 10 Sep 2026 12:01:14 +0000
Manifest next update: Fri 11 Sep 2026 12:01:14 +0000
Files and hashes: 1: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: JcITahDKUqoVGc8i9r51C2WMNQd2geM2PKFsGXD+xMI=)
2: iuITZHgDGqsS4DJrT4QfGRfLmXE.roa (hash: fVRfv2or89WX0xzZk/shtCx6ccH1MSfEUDt1qC4R8eo=)
3: xXSGrl92krsM_urkQdlEmjIAToI.roa (hash: wQLg7nZor+SidlIxB4lToP07634dxcVXfhFUBua4qFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:8b:35:95:11:dd:ac:05:fc:60:41:d6:50:37:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Sep 10 12:01:14 2026 GMT
Not After : Sep 11 12:01:14 2026 GMT
Subject: CN=cad4af8a0b872547c3b3a366c1810155616371ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:9f:ac:7c:59:c4:98:8a:2e:50:85:f4:e0:
52:aa:b8:90:e6:59:4d:38:26:b1:73:1b:6f:ad:cd:
67:17:04:af:65:ae:02:bd:90:17:70:1c:32:49:62:
d0:c6:b6:9e:b9:ae:7c:6c:50:cf:8f:71:f6:04:6c:
cf:23:36:38:2e:20:5f:66:d2:f2:b9:5d:35:33:cc:
ff:1f:97:8b:57:d0:09:bd:aa:86:0a:bf:cf:35:3a:
c8:08:b2:e6:bf:ab:fa:08:1d:e1:aa:c7:5c:13:c0:
be:62:02:2f:75:cb:87:35:1f:a8:3f:5f:99:c9:46:
3f:bd:b3:07:23:41:b9:bd:80:b0:8d:e4:fd:14:df:
18:5a:7e:8b:1e:5b:0e:a7:e0:34:4e:bd:b0:b4:5d:
2b:13:d5:19:6e:16:c3:aa:34:a0:8f:17:49:1d:fb:
cf:e6:b6:f0:45:3c:f5:e1:3e:92:3a:aa:62:a4:b4:
7b:d3:fe:a9:95:05:06:7e:f9:18:fb:25:8f:13:c0:
56:e1:c0:1a:15:9b:12:ad:e1:04:d4:fb:a9:e5:ca:
80:bd:51:32:7e:35:be:ad:17:06:89:92:ea:ad:a1:
51:a2:ea:9e:10:99:22:20:49:35:40:54:32:1b:46:
e5:d8:d5:c6:c8:8b:f8:10:87:06:b1:bd:77:3a:cb:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D4:AF:8A:0B:87:25:47:C3:B3:A3:66:C1:81:01:55:61:63:71:EA
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:63:6b:63:88:58:76:96:ab:3c:d1:64:17:bf:2a:1a:ad:11:
88:53:cc:e8:ec:97:ee:d4:66:76:d3:8f:a3:1c:ac:76:75:78:
46:68:6f:64:87:84:33:b2:4e:1f:42:9b:0f:99:32:a6:04:aa:
29:d5:b3:44:85:4d:58:40:e7:70:6a:ac:75:32:89:68:4c:e2:
48:b5:ed:76:04:6e:6e:f2:bb:af:f8:31:b2:e7:b9:ca:a1:43:
1a:16:b6:8e:48:9b:0d:00:4c:8d:94:ec:11:28:cb:52:82:bf:
cb:5e:ec:cc:19:2d:b9:95:78:42:ed:02:19:25:8a:d1:f0:69:
ea:82:8e:07:cc:10:d4:3c:5a:9b:1b:4f:85:14:7f:93:ae:50:
7a:79:73:6d:36:eb:65:82:b5:b1:00:90:8f:28:5f:41:a4:ac:
fe:d9:05:cf:10:cb:21:26:04:ba:17:10:4d:c9:44:ac:d7:50:
d2:0f:12:94:f1:66:d5:f4:fc:49:2c:c5:88:0b:07:f8:3b:98:
ee:b5:d2:2f:13:53:e8:92:cd:34:99:67:1d:87:95:4c:ec:f3:
30:e3:8a:b1:ed:ac:42:5c:56:07:43:27:79:be:b4:40:9d:42:
56:06:eb:ca:3e:0c:5b:85:41:7a:8a:ae:ff:1c:59:de:2e:75:
bc:e4:00:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMYs1lRHdrAX8YEHWUDd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYzcyZWFlYmMyMDQ2MWMzMWNmOTQyZTRlMTU1ZjA3Yjhh
MDNjN2MwHhcNMjYwOTEwMTIwMTE0WhcNMjYwOTExMTIwMTE0WjAzMTEwLwYDVQQD
EyhjYWQ0YWY4YTBiODcyNTQ3YzNiM2EzNjZjMTgxMDE1NTYxNjM3MWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15afrHxZxJiKLlCF9OBSqriQ5llN
OCaxcxtvrc1nFwSvZa4CvZAXcBwySWLQxraeua58bFDPj3H2BGzPIzY4LiBfZtLy
uV01M8z/H5eLV9AJvaqGCr/PNTrICLLmv6v6CB3hqsdcE8C+YgIvdcuHNR+oP1+Z
yUY/vbMHI0G5vYCwjeT9FN8YWn6LHlsOp+A0Tr2wtF0rE9UZbhbDqjSgjxdJHfvP
5rbwRTz14T6SOqpipLR70/6plQUGfvkY+yWPE8BW4cAaFZsSreEE1Pup5cqAvVEy
fjW+rRcGiZLqraFRouqeEJkiIEk1QFQyG0bl2NXGyIv4EIcGsb13OsuDEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrUr4oLhyVHw7OjZsGBAVVhY3HqMB8GA1UdIwQY
MBaAFIDHLq68IEYcMc+ULk4VXwe4oDx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNGIxYTEtZmU4OC00NDUwLWJkMzIt
ZDBjODNiZTQwMTg1LzEvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mNGIxYTEtZmU4OC00NDUwLWJkMzItZDBjODNiZTQwMTg1
LzEvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2NrY4hY
dparPNFkF78qGq0RiFPM6OyX7tRmdtOPoxysdnV4RmhvZIeEM7JOH0KbD5kypgSq
KdWzRIVNWEDncGqsdTKJaEziSLXtdgRubvK7r/gxsue5yqFDGha2jkibDQBMjZTs
ESjLUoK/y17szBktuZV4Qu0CGSWK0fBp6oKOB8wQ1DxamxtPhRR/k65QenlzbTbr
ZYK1sQCQjyhfQaSs/tkFzxDLISYEuhcQTclErNdQ0g8SlPFm1fT8SSzFiAsH+DuY
7rXSLxNT6JLNNJlnHYeVTOzzMOOKse2sQlxWB0Mneb60QJ1CVgbryj4MW4VBeoqu
/xxZ3i51vOQAhQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:57 2026 by rpki-client