Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: uBiLwVzcRh3L24X0iqhje+INJXEkbDtVhCxGYbteXAs=
Subject key identifier: B7:30:43:A8:DF:FA:82:63:5B:22:9D:12:E8:A6:BD:05:3F:24:14:4D
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 01A1626A1EE987D764C1E4CBD1141D2E5485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0FE0
Signing time: Thu 22 Oct 2026 07:01:24 +0000
Manifest this update: Thu 22 Oct 2026 07:01:24 +0000
Manifest next update: Fri 23 Oct 2026 07:01:24 +0000
Files and hashes: 1: fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa (hash: LXNlsf10QtsQkHE8Tm9n4uZsh/ON6f1nhNppQ718O5s=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: HBBIp5DxKeQMmp+YaWPqmXZpT+xY16QoNcY28AcTjLc=)
3: xG0VUDOknHsZasT5TDaZxzA4pvE.roa (hash: Xzghi2lIosJPiXM8pVY4mOf1fz9gQv7/1SCn9lu4mdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:6a:1e:e9:87:d7:64:c1:e4:cb:d1:14:1d:2e:54:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Oct 22 07:01:24 2026 GMT
Not After : Oct 23 07:01:24 2026 GMT
Subject: CN=b73043a8dffa82635b229d12e8a6bd053f24144d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:44:0b:53:a0:f0:d1:b8:f9:bf:08:53:49:
46:9c:11:ab:b6:65:7b:27:6d:6b:a1:93:56:77:86:
86:71:7c:04:93:2a:54:00:17:17:56:83:b9:de:04:
8e:67:e8:94:af:f3:73:51:e9:cb:93:dc:53:c1:cf:
7b:15:1c:2e:a4:cc:b5:70:07:71:56:83:57:5c:b6:
8a:36:fd:06:35:98:32:68:f9:d8:ff:d5:d6:2b:d1:
13:62:1d:11:f5:96:2a:3f:80:27:d5:43:39:4e:fc:
84:25:7b:d1:de:f6:80:22:ce:f3:89:97:95:7d:8c:
8f:f2:84:4a:ed:02:89:aa:54:a9:ac:ad:39:ea:93:
b5:59:9f:cb:b3:39:1f:5f:18:b2:7b:97:15:72:39:
f6:26:28:2b:4b:fc:c0:0d:dc:1d:17:f0:80:da:1d:
df:ce:76:63:2b:d7:53:2e:83:a4:9d:4a:e0:9e:2c:
e3:92:0c:66:71:0d:8a:b5:31:90:93:9f:6a:4c:7d:
ce:cd:7a:66:f1:e1:df:4d:03:f4:fc:4f:80:75:d0:
92:46:17:8c:de:96:cd:72:b2:98:67:6f:75:e0:69:
83:ff:35:86:86:25:06:e9:26:5e:cb:98:56:4c:3b:
8f:27:f5:33:2c:d6:d3:86:94:f7:db:7a:88:9d:0e:
b8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:30:43:A8:DF:FA:82:63:5B:22:9D:12:E8:A6:BD:05:3F:24:14:4D
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:75:9e:84:85:12:d3:d0:78:11:86:16:0c:aa:26:f4:a8:6b:
f9:03:df:8e:4e:f2:32:67:5c:04:68:20:a8:ff:7d:2c:5a:d6:
f1:8b:bb:40:46:94:94:fd:d0:8c:a9:82:ac:31:78:8f:02:10:
c2:02:82:b6:cc:31:d3:d1:0a:ef:de:06:4a:39:43:2a:19:ca:
6b:f6:8a:29:6f:cf:36:b1:68:77:ec:c5:63:20:c9:73:bc:8d:
24:21:3b:3f:b3:e5:60:c3:c5:fe:e7:38:18:bc:00:0e:34:0e:
e2:c2:e5:01:bf:37:b3:8c:78:ee:3d:7c:85:bf:85:4d:9c:9f:
36:85:1a:54:eb:ba:30:1d:1f:cc:6f:79:45:af:22:bd:f4:ca:
77:93:3d:ab:f9:ee:44:52:20:cb:0e:47:b1:30:45:33:34:3f:
8a:0d:a6:28:b1:16:d0:77:6e:e5:0a:3f:30:04:ca:5c:00:a7:
9f:51:17:25:c9:61:42:2a:95:89:17:c8:de:d5:37:5a:c4:17:
29:54:07:25:e9:8b:9c:eb:f6:c0:dc:ea:a9:f2:93:fb:08:ef:
7b:f4:d3:b4:e8:ee:20:c5:c5:ce:1b:78:4a:c4:b9:df:34:45:
39:dd:ea:68:3f:a0:4f:6d:b4:0d:b0:77:36:ef:87:cb:35:e3:
f9:02:52:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:32:50 2026 by rpki-client