Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft
File: gkLN6DVdU56YUsK1q4siTqmBWms.mft (raw, json)
Hash identifier: B/DHncMW2aBbbfTmLEu3Grjmq7PPIEt91RdHmOBVHKo=
Subject key identifier: D0:17:CD:1D:8D:83:45:35:ED:4C:76:F1:E3:DE:44:D6:AF:AA:56:29
Authority key identifier: 82:42:CD:E8:35:5D:53:9E:98:52:C2:B5:AB:8B:22:4E:A9:81:5A:6B
Certificate issuer: /CN=8242cde8355d539e9852c2b5ab8b224ea9815a6b
Certificate serial: 01A154AEA6AE31D8BCA275B2864D0E7CE921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft
Manifest number: 4A
Signing time: Mon 19 Oct 2026 15:01:34 +0000
Manifest this update: Mon 19 Oct 2026 15:01:34 +0000
Manifest next update: Tue 20 Oct 2026 15:01:34 +0000
Files and hashes: 1: VG1H7KfM4gbbgBNVo0JXMLT5F84.roa (hash: WloXTObsOdhrASI5B+AAtL3e64BFo/Ki1+PoI99EzsA=)
2: gkLN6DVdU56YUsK1q4siTqmBWms.crl (hash: 4lEmJ/j6BjnkU9ej8jeTjcrF3gus1ox5ie+yPo45Alc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:ae:a6:ae:31:d8:bc:a2:75:b2:86:4d:0e:7c:e9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8242cde8355d539e9852c2b5ab8b224ea9815a6b
Validity
Not Before: Oct 19 15:01:34 2026 GMT
Not After : Oct 20 15:01:34 2026 GMT
Subject: CN=d017cd1d8d834535ed4c76f1e3de44d6afaa5629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:54:55:ac:89:33:99:81:bd:22:09:5e:ef:30:
07:66:c9:37:95:11:48:36:ea:fc:83:1d:fd:7a:78:
f8:a7:d6:dd:c8:7b:ee:b7:3f:5a:e2:42:16:22:cb:
b7:e2:d1:78:86:16:d6:d7:99:ee:14:ec:2a:80:0b:
20:91:00:a5:e4:4d:89:4e:79:44:02:5b:2f:11:40:
65:1b:c1:09:3a:af:d0:a9:f1:95:26:49:42:f6:5f:
eb:f3:e5:39:d5:f3:dc:79:d9:dc:bf:ca:29:83:33:
fc:e0:f7:a4:43:12:0b:23:08:9d:c1:11:36:32:c0:
14:d4:9d:82:95:9d:11:d2:f8:db:0e:a2:5a:6e:e3:
1e:7f:9e:20:51:81:d2:39:ae:73:08:93:10:a5:df:
c0:9e:88:10:51:94:32:8e:31:47:df:95:09:86:c0:
11:a6:8f:c6:f6:b1:9a:37:3f:d6:e9:d6:fe:42:4b:
96:1b:32:ab:37:eb:c6:e3:b5:31:d6:7a:81:68:ed:
98:e1:a2:4b:29:22:e7:06:a7:5b:6b:cb:f6:2c:9a:
bf:0b:9a:13:5f:bd:da:7b:0b:d8:8d:a6:cd:7f:21:
6b:9d:3a:ac:59:a6:a4:a7:60:40:1d:bb:51:2f:5f:
d1:e6:fe:4c:73:0f:e0:a0:1d:e8:82:84:95:c8:8c:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:17:CD:1D:8D:83:45:35:ED:4C:76:F1:E3:DE:44:D6:AF:AA:56:29
X509v3 Authority Key Identifier:
keyid:82:42:CD:E8:35:5D:53:9E:98:52:C2:B5:AB:8B:22:4E:A9:81:5A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fa:a8:4e:5e:a7:24:76:75:4b:72:b6:58:22:ff:33:38:85:
56:16:ee:d3:c7:d8:9b:0a:88:d5:ba:81:8a:98:5a:ac:a0:36:
2e:54:33:ae:4f:b0:2d:81:99:c2:c6:dd:86:13:c5:15:01:7a:
34:8c:ef:24:f6:3a:4f:bd:0b:f7:05:6d:cf:58:92:61:da:79:
80:bf:9e:ba:c1:92:8b:db:5a:bd:1f:3f:d1:58:13:24:5c:59:
f6:0c:df:af:e0:ad:84:ef:b7:9a:0c:36:cd:eb:76:4a:7f:e5:
97:c6:cd:1e:7d:1e:8e:b3:18:6e:01:a7:ea:12:46:a4:7e:54:
e7:46:6e:b8:74:6c:ca:00:65:7d:4c:e8:d8:59:70:bd:a8:9c:
01:fa:03:f5:44:56:91:d3:68:ca:48:b5:82:50:79:f3:09:f7:
be:da:fa:b3:21:1e:15:ef:01:8f:25:27:a1:44:f0:2d:31:41:
dc:4d:31:69:2d:03:63:e7:c8:81:ff:d8:9e:2a:56:a9:89:57:
0e:c5:80:50:fe:ef:1f:d1:3a:9b:c8:0e:d5:d4:ff:5a:89:4a:
9d:56:d2:86:7c:9c:2a:79:e6:6e:3d:7b:6a:ac:37:e5:c3:58:
b0:a8:47:c3:ce:f2:0c:f6:41:f6:28:08:16:f1:c8:2e:08:e7:
ae:11:2f:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFUrqauMdi8onWyhk0OfOkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNDJjZGU4MzU1ZDUzOWU5ODUyYzJiNWFiOGIyMjRlYTk4
MTVhNmIwHhcNMjYxMDE5MTUwMTM0WhcNMjYxMDIwMTUwMTM0WjAzMTEwLwYDVQQD
EyhkMDE3Y2QxZDhkODM0NTM1ZWQ0Yzc2ZjFlM2RlNDRkNmFmYWE1NjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFRVrIkzmYG9Igle7zAHZsk3lRFI
Nur8gx39enj4p9bdyHvutz9a4kIWIsu34tF4hhbW15nuFOwqgAsgkQCl5E2JTnlE
AlsvEUBlG8EJOq/QqfGVJklC9l/r8+U51fPcedncv8opgzP84PekQxILIwidwRE2
MsAU1J2ClZ0R0vjbDqJabuMef54gUYHSOa5zCJMQpd/AnogQUZQyjjFH35UJhsAR
po/G9rGaNz/W6db+QkuWGzKrN+vG47Ux1nqBaO2Y4aJLKSLnBqdba8v2LJq/C5oT
X73aewvYjabNfyFrnTqsWaakp2BAHbtRL1/R5v5Mcw/goB3ogoSVyIxXZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAXzR2Ng0U17Ux28ePeRNavqlYpMB8GA1UdIwQY
MBaAFIJCzeg1XVOemFLCtauLIk6pgVprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2tMTjZEVmRVNTZZVXNLMXE0c2lUcW1CV21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8yZDU5ZmMtNDM1My00YjcyLThmYTIt
NWQxM2QxNGJjM2FjLzEvZ2tMTjZEVmRVNTZZVXNLMXE0c2lUcW1CV21zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8yZDU5ZmMtNDM1My00YjcyLThmYTItNWQxM2QxNGJjM2Fj
LzEvZ2tMTjZEVmRVNTZZVXNLMXE0c2lUcW1CV21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvqoTl6n
JHZ1S3K2WCL/MziFVhbu08fYmwqI1bqBipharKA2LlQzrk+wLYGZwsbdhhPFFQF6
NIzvJPY6T70L9wVtz1iSYdp5gL+eusGSi9tavR8/0VgTJFxZ9gzfr+CthO+3mgw2
zet2Sn/ll8bNHn0ejrMYbgGn6hJGpH5U50ZuuHRsygBlfUzo2FlwvaicAfoD9URW
kdNoyki1glB58wn3vtr6syEeFe8BjyUnoUTwLTFB3E0xaS0DY+fIgf/YnipWqYlX
DsWAUP7vH9E6m8gO1dT/WolKnVbShnycKnnmbj17aqw35cNYsKhHw87yDPZB9igI
FvHILgjnrhEvfw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:39:55 2026 by rpki-client