Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: V3yD8jzVnrVNbp1S08EmTY7MOWXLjs4L58/WiR4i9u8=
Subject key identifier: BB:FC:71:5C:CB:A7:95:60:72:A6:1B:ED:09:AB:7E:76:22:59:C7:42
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 01A002F0177076EDF671FAA2E1F95E32534E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0F2A
Signing time: Sat 15 Aug 2026 01:01:24 +0000
Manifest this update: Sat 15 Aug 2026 01:01:24 +0000
Manifest next update: Sun 16 Aug 2026 01:01:24 +0000
Files and hashes: 1: fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa (hash: LXNlsf10QtsQkHE8Tm9n4uZsh/ON6f1nhNppQ718O5s=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: oZB7l/sfc380XNJ2DIAbD5Xqls5GjXf6x0B8HpXCiJI=)
3: xG0VUDOknHsZasT5TDaZxzA4pvE.roa (hash: Xzghi2lIosJPiXM8pVY4mOf1fz9gQv7/1SCn9lu4mdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:f0:17:70:76:ed:f6:71:fa:a2:e1:f9:5e:32:53:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Aug 15 01:01:24 2026 GMT
Not After : Aug 16 01:01:24 2026 GMT
Subject: CN=bbfc715ccba7956072a61bed09ab7e762259c742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:ab:8c:cb:6f:8f:fb:a6:82:49:91:62:e6:
6d:ee:c9:f4:53:5d:51:9e:34:74:db:da:d6:4a:c1:
c5:e3:76:60:41:3a:fe:3c:f6:f5:a1:64:8d:55:f4:
88:60:de:fd:ab:00:9a:eb:d6:59:bd:9c:37:af:87:
7c:c5:6e:cc:7b:10:0a:f1:aa:b7:d0:e8:b1:2f:b4:
17:d8:ab:2b:47:8e:28:5f:94:73:c4:f3:26:d1:3f:
fc:4f:23:90:23:24:9b:15:f7:a1:bd:0d:5c:69:b1:
1e:4d:d8:ef:91:6e:b2:e4:f9:ea:f3:cf:34:f4:da:
52:f4:82:43:66:d9:11:ca:a8:19:0f:6e:5b:83:43:
67:35:bd:d0:3a:7a:cf:40:ce:7c:ee:83:09:c5:dd:
ef:a0:4d:c8:e9:e4:9a:41:56:63:db:e8:48:8d:65:
ba:18:cd:c2:9e:7a:af:09:71:34:32:28:f0:af:8d:
fb:0d:1e:e8:3d:8b:39:83:cf:9a:ef:b1:7a:49:fd:
d6:7e:c3:fe:d4:9f:3a:f2:7d:eb:1b:25:f8:14:a1:
a3:a6:3c:98:95:f6:2c:ba:8d:31:a7:f0:8d:ff:97:
a5:4b:84:2c:cd:63:ba:f5:f8:c9:b6:ef:c4:a5:c1:
92:fc:e4:33:0a:42:d5:3e:f7:83:87:29:82:61:8d:
52:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:71:5C:CB:A7:95:60:72:A6:1B:ED:09:AB:7E:76:22:59:C7:42
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:47:d5:7f:ea:db:ed:8f:26:98:49:72:f9:0d:06:e5:20:b2:
1a:13:4c:29:6c:05:d6:8a:15:97:99:9f:4f:15:ab:9d:5b:93:
97:6d:cb:fe:a6:1a:f4:9d:70:d6:06:a2:af:a2:6e:df:3e:d5:
62:b0:7b:cb:e5:f0:ba:e7:c8:8c:37:06:3c:8f:c8:86:ca:79:
af:3e:d0:1d:7f:d4:11:1d:bd:cb:51:b9:a9:d4:d9:ac:9d:14:
a0:0e:cc:0d:98:99:e2:2e:bf:0e:58:78:44:50:9c:28:52:c1:
9e:58:b9:5a:a2:48:4d:0d:ea:41:ba:5d:6b:77:7f:44:5f:c7:
e5:74:2f:4b:e8:6e:7d:8b:49:1b:bf:b7:e2:a1:7a:42:f4:d0:
20:53:d1:cb:a9:6c:73:23:1a:a0:4f:ad:4b:09:48:d7:1e:87:
7b:d8:45:d8:f6:e9:29:21:bc:d4:76:14:c7:fa:76:63:c1:d3:
3f:a3:83:25:dd:13:e4:a5:9e:d5:70:31:65:e7:64:68:ed:ef:
42:5f:ee:a1:23:40:2f:d6:24:b8:41:2f:d5:30:4c:3f:85:4c:
cf:c4:4e:23:31:a3:0f:b3:d9:c0:9b:bd:f2:11:3d:93:e2:db:
21:c0:4b:73:30:fa:74:1a:70:87:74:00:7a:82:41:c8:a5:de:
38:10:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:46:43 2026 by rpki-client