Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
File: ghv243Q6As8royrxDfvt8a_UOqI.mft (raw, json)
Hash identifier: GsB9D1YwCLRD+TcQIDy5hQ44zjBgzgZlpME4xmNUZsM=
Subject key identifier: 35:3B:74:7F:D5:08:33:31:3F:34:3C:DC:AC:50:94:95:AF:C6:21:EB
Authority key identifier: 82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
Certificate issuer: /CN=821bf6e3743a02cf2ba32af10dfbedf1afd43aa2
Certificate serial: 01A15B1EF2F05A303C909BBF88097C29A883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
Manifest number: 012D
Signing time: Tue 20 Oct 2026 21:01:57 +0000
Manifest this update: Tue 20 Oct 2026 21:01:57 +0000
Manifest next update: Wed 21 Oct 2026 21:01:57 +0000
Files and hashes: 1: 9MFXK73OiqcN6LapwMg5Z8b38i0.roa (hash: WqIbxz6dWrFwqJH0l2f/YrBWMsIoujMuumNHpVLbnyk=)
2: ghv243Q6As8royrxDfvt8a_UOqI.crl (hash: LhEYUV0yosls+5r+hDSQ3uBpO7YL53mqo45PKZodyDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 21:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:1e:f2:f0:5a:30:3c:90:9b:bf:88:09:7c:29:a8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821bf6e3743a02cf2ba32af10dfbedf1afd43aa2
Validity
Not Before: Oct 20 21:01:57 2026 GMT
Not After : Oct 21 21:01:57 2026 GMT
Subject: CN=353b747fd50833313f343cdcac509495afc621eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:2d:62:a3:de:7a:a2:8d:c0:fc:f4:99:b8:
f3:ae:0a:cb:ac:82:f6:4e:e3:09:4c:ad:0e:4d:f2:
0d:74:27:08:6b:ae:3e:e3:25:69:11:d9:6d:37:5e:
d7:e2:2d:49:7e:55:31:09:1a:e6:ee:45:90:d6:e0:
c1:1a:cf:b8:b5:88:71:af:e5:d1:9f:78:fb:8e:b3:
6b:9b:8a:ef:78:d7:a3:02:57:88:11:d1:d0:79:3b:
a9:b5:1a:ba:d9:e9:86:2d:ba:df:a7:02:87:2a:29:
0b:df:ca:e8:23:ce:67:fd:d5:8f:5a:b1:a1:d6:55:
1c:ed:51:23:76:10:9b:6d:fc:c7:65:00:e3:17:ce:
fc:46:c1:e0:37:b4:05:3e:dc:2e:e3:91:b7:ec:40:
15:31:10:72:b3:25:ac:af:d2:53:89:f3:e6:c4:52:
c7:05:d5:0a:9c:fc:d5:56:d1:8d:e4:16:72:80:fd:
c8:85:bd:a1:c7:7b:0d:97:a2:c8:29:2c:77:f9:04:
5f:e7:a0:8b:f9:15:70:b7:31:ee:27:3e:ac:2e:36:
85:55:f3:d2:69:72:d2:83:33:7e:e2:f0:02:70:de:
76:72:c5:6c:e7:48:ae:d7:e2:f9:c3:7f:cc:c8:73:
47:4c:a6:22:c1:42:df:20:af:9c:7a:98:b5:d3:60:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3B:74:7F:D5:08:33:31:3F:34:3C:DC:AC:50:94:95:AF:C6:21:EB
X509v3 Authority Key Identifier:
keyid:82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:65:8c:ab:01:a0:3f:0f:1f:90:7c:95:d1:22:52:85:c8:4a:
4f:a1:97:f2:63:53:fb:37:de:4e:66:e6:a5:7a:c4:10:5d:92:
af:f1:d2:ce:12:9e:b7:e2:bf:5a:13:e3:54:47:f1:11:8f:55:
29:7b:44:f4:b3:10:72:9f:eb:70:46:24:88:d2:bc:1a:c4:fa:
f9:ea:d3:26:eb:49:71:b2:eb:67:9c:62:d9:39:68:5f:b7:69:
f4:1a:09:7a:4a:c2:97:dd:be:d9:7d:df:fc:bd:44:62:6e:b2:
0e:f1:99:38:5c:d4:55:bd:f3:31:8e:ea:80:61:d2:8e:f1:23:
73:55:93:d0:c9:9b:a9:05:69:fb:25:83:1a:1d:09:71:8a:47:
6c:e1:a1:ee:27:b3:a5:41:dd:d9:0e:b8:6e:9e:83:6d:2e:12:
29:fa:d6:9a:17:c6:43:9c:0b:b5:a2:c4:12:b0:45:b6:e0:88:
23:e0:3a:e0:2b:71:d9:ac:2d:f3:6e:99:d5:ca:2b:3c:14:31:
22:dd:5f:bf:dc:eb:31:dc:84:78:d0:ee:a6:85:8a:74:fc:b4:
af:7e:2e:c8:0d:51:0f:a7:d6:5b:1a:d9:20:ef:ba:5a:96:f8:
9f:01:8b:89:1f:4f:bb:63:69:82:04:5d:68:3e:4e:16:99:4d:
5f:8f:bc:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFbHvLwWjA8kJu/iAl8KaiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWJmNmUzNzQzYTAyY2YyYmEzMmFmMTBkZmJlZGYxYWZk
NDNhYTIwHhcNMjYxMDIwMjEwMTU3WhcNMjYxMDIxMjEwMTU3WjAzMTEwLwYDVQQD
EygzNTNiNzQ3ZmQ1MDgzMzMxM2YzNDNjZGNhYzUwOTQ5NWFmYzYyMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTItYqPeeqKNwPz0mbjzrgrLrIL2
TuMJTK0OTfINdCcIa64+4yVpEdltN17X4i1JflUxCRrm7kWQ1uDBGs+4tYhxr+XR
n3j7jrNrm4rveNejAleIEdHQeTuptRq62emGLbrfpwKHKikL38roI85n/dWPWrGh
1lUc7VEjdhCbbfzHZQDjF878RsHgN7QFPtwu45G37EAVMRBysyWsr9JTifPmxFLH
BdUKnPzVVtGN5BZygP3Ihb2hx3sNl6LIKSx3+QRf56CL+RVwtzHuJz6sLjaFVfPS
aXLSgzN+4vACcN52csVs50iu1+L5w3/MyHNHTKYiwULfIK+cepi102Be7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDU7dH/VCDMxPzQ83KxQlJWvxiHrMB8GA1UdIwQY
MBaAFIIb9uN0OgLPK6Mq8Q377fGv1DqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2h2MjQzUTZBczhyb3lyeERmdnQ4YV9VT3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEt
OGQ0OWViY2FlOWIzLzEvZ2h2MjQzUTZBczhyb3lyeERmdnQ4YV9VT3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEtOGQ0OWViY2FlOWIz
LzEvZ2h2MjQzUTZBczhyb3lyeERmdnQ4YV9VT3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2WMqwGg
Pw8fkHyV0SJShchKT6GX8mNT+zfeTmbmpXrEEF2Sr/HSzhKet+K/WhPjVEfxEY9V
KXtE9LMQcp/rcEYkiNK8GsT6+erTJutJcbLrZ5xi2TloX7dp9BoJekrCl92+2X3f
/L1EYm6yDvGZOFzUVb3zMY7qgGHSjvEjc1WT0MmbqQVp+yWDGh0JcYpHbOGh7iez
pUHd2Q64bp6DbS4SKfrWmhfGQ5wLtaLEErBFtuCII+A64Ctx2awt826Z1corPBQx
It1fv9zrMdyEeNDupoWKdPy0r34uyA1RD6fWWxrZIO+6Wpb4nwGLiR9Pu2NpggRd
aD5OFplNX4+84A==
-----END CERTIFICATE-----
Generated at Wed Oct 21 07:18:42 2026 by rpki-client