Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: rl9mh0tgat8z7dT62XJN+SYed1s23AgGe3f+QkB9MIk=
Subject key identifier: E3:0D:5E:F7:29:A8:1A:7E:9C:5C:F5:52:62:EF:75:06:42:55:5E:9B
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 019F1B31B0CB6D560233244987BB00EBF6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0EB2
Signing time: Wed 01 Jul 2026 01:01:09 +0000
Manifest this update: Wed 01 Jul 2026 01:01:09 +0000
Manifest next update: Thu 02 Jul 2026 01:01:09 +0000
Files and hashes: 1: fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa (hash: LXNlsf10QtsQkHE8Tm9n4uZsh/ON6f1nhNppQ718O5s=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: M4nz8A1r8V8aVSJd3kjYBz0TdEMckEo3RKHPVfxbo5M=)
3: xG0VUDOknHsZasT5TDaZxzA4pvE.roa (hash: Xzghi2lIosJPiXM8pVY4mOf1fz9gQv7/1SCn9lu4mdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:31:b0:cb:6d:56:02:33:24:49:87:bb:00:eb:f6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Jul 1 01:01:09 2026 GMT
Not After : Jul 2 01:01:09 2026 GMT
Subject: CN=e30d5ef729a81a7e9c5cf55262ef750642555e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:24:fb:00:50:14:e9:57:ab:49:44:6b:3b:
09:66:dc:73:c4:45:95:37:36:89:b8:61:4f:f5:52:
2a:77:f0:05:04:ae:4e:1c:67:55:48:72:65:74:6b:
ff:03:76:34:0e:bc:43:8d:55:8d:d8:0b:27:f1:b1:
a3:7c:57:60:e1:13:15:5d:d5:b2:26:d9:10:4f:20:
e1:f1:1f:52:c3:95:28:cd:db:2e:8a:c0:0e:1f:c4:
55:fe:97:9c:61:ea:61:4c:95:b4:d5:34:36:8b:3e:
95:a7:a5:0f:e9:92:63:41:60:0d:77:8b:f9:fe:53:
3e:b4:ec:7e:b8:f4:f4:92:9d:2b:63:c5:fd:47:0f:
cc:02:ee:c9:5a:8c:d4:4a:87:95:40:5e:c6:08:5a:
3e:04:d9:71:27:d4:90:1e:09:01:a7:ec:dd:dc:f4:
2b:8d:cd:f8:c2:10:65:f4:05:7e:02:60:5f:ef:9f:
17:64:39:2d:c6:c7:3d:44:5e:5c:ba:b2:6a:f8:5e:
ee:02:6a:b0:5d:96:f4:72:e4:ee:b1:31:f2:70:06:
41:46:8c:34:f9:63:f8:ae:61:16:b9:62:bb:08:8a:
a3:f5:83:5b:b5:c0:86:4b:13:eb:2a:a7:34:75:22:
7e:4d:99:3b:33:f4:e3:67:ab:a9:e7:3c:5b:30:ed:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0D:5E:F7:29:A8:1A:7E:9C:5C:F5:52:62:EF:75:06:42:55:5E:9B
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:af:d8:4e:4d:a2:4b:e3:3e:24:a2:42:4f:7d:6d:bc:02:7b:
ca:55:82:6b:39:2b:16:64:d6:47:4d:28:b2:28:9a:01:22:be:
12:04:0e:ec:01:a1:c6:00:f7:46:ea:0f:cd:b6:79:21:76:de:
c3:a0:09:36:29:ec:91:5d:02:54:24:af:aa:23:bf:3c:45:f1:
82:ff:dc:e3:0b:12:b7:4e:89:2a:a0:cb:f0:e4:93:ad:b2:ac:
d3:71:ab:06:d3:a3:ce:08:f5:18:23:1a:30:45:7b:4f:9e:83:
57:db:05:7a:5e:d7:1f:57:37:83:28:9b:59:dc:e9:ea:ef:ad:
f9:32:2d:e2:b8:ac:78:de:3c:01:2a:6b:34:e2:75:a1:9d:88:
32:56:b1:cc:32:57:f4:e7:39:13:2a:1c:3c:01:4f:eb:48:24:
91:c8:58:6b:36:08:74:f5:f7:5b:0d:b9:a5:f5:9c:d5:3c:06:
41:77:cf:97:8c:00:8f:7c:85:17:22:07:29:3c:6e:c6:d9:fa:
b5:44:c0:08:f3:f3:f1:90:a0:b4:fa:b2:df:ab:d6:83:ce:a4:
2f:a4:18:a9:db:c5:27:0f:dc:7d:2c:22:b7:3a:98:99:b2:e1:
d2:a8:38:50:a0:50:ca:46:7d:58:42:14:b5:22:85:90:68:b8:
d5:ad:3c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:40:16 2026 by rpki-client