Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: rcpBAV+CaokrAI0AFS0oZ8yriO85SLcwNSx5e0WNcrE=
Subject key identifier: 5C:7E:C6:BA:ED:74:07:E7:F1:07:2E:81:43:86:1C:37:1B:40:8A:5C
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 01A128E860B69DC6286021C3AC80421936FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 03:01:20 +0000
Manifest this update: Sun 11 Oct 2026 03:01:20 +0000
Manifest next update: Mon 12 Oct 2026 03:01:20 +0000
Files and hashes: 1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: InyMocmShYKoXUdg0EXlPtNew8QSZALu8GVFE1+gQJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:60:b6:9d:c6:28:60:21:c3:ac:80:42:19:36:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Oct 11 03:01:20 2026 GMT
Not After : Oct 12 03:01:20 2026 GMT
Subject: CN=5c7ec6baed7407e7f1072e8143861c371b408a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bf:c1:5f:1e:37:d7:fc:b1:3c:3b:01:77:ac:
22:57:2a:18:0d:98:d9:f3:bf:50:e9:53:4f:6e:1a:
2e:cd:e7:b8:22:3d:a4:c1:3b:25:96:d0:7e:b4:03:
8a:dd:54:d8:01:c6:7e:4d:36:83:e6:45:5d:c7:cf:
78:34:69:59:6f:c5:83:19:a2:cb:ba:0d:ee:76:0b:
f3:e7:78:0b:fe:8d:37:94:8e:a8:b6:22:be:c1:86:
29:cc:e7:b4:4d:79:18:ff:04:f2:05:80:68:c7:d0:
ce:28:58:4d:96:08:6c:88:88:63:34:25:4d:42:43:
4f:7f:2d:6b:cf:6f:5a:08:8c:89:01:9b:f2:79:8d:
f8:54:25:8b:04:d4:69:a8:92:a6:58:aa:8a:ee:29:
88:5a:b4:12:a3:f8:ae:f5:1d:fe:34:29:f3:86:e9:
e0:7c:c1:1c:3d:3a:0c:af:d4:5d:6b:8d:47:3a:2f:
e1:5c:d4:47:96:cf:07:2e:4c:cf:c0:a7:cb:0b:e6:
45:fd:7c:09:f8:4e:0c:b8:e6:ae:63:00:03:38:fd:
3d:e7:18:d8:a4:99:4f:d0:66:92:9e:f2:e6:5f:9b:
b9:a2:7b:98:c5:a5:0d:c0:23:19:d0:bb:82:a4:87:
17:fc:2f:9c:9f:57:4e:4a:d3:98:da:a6:03:1d:1a:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7E:C6:BA:ED:74:07:E7:F1:07:2E:81:43:86:1C:37:1B:40:8A:5C
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b0:2a:df:b5:26:81:83:56:37:26:fd:ab:6e:00:fd:1c:68:
4b:42:c6:4f:e8:ba:cc:55:f3:a2:4b:f1:17:b0:5a:0f:b0:72:
43:7d:c8:92:db:df:8c:15:22:40:f8:4a:d5:f0:be:e3:a2:1a:
07:75:2f:29:85:fd:77:fb:ce:fe:a8:0a:c7:30:b2:bf:82:ac:
c8:4a:2c:7d:0e:99:7c:61:14:45:a3:c9:b1:86:7d:b7:84:d6:
a9:fa:e1:a4:3d:17:cf:39:d3:1d:67:b0:29:39:16:59:33:7f:
f4:8b:bf:23:ce:70:b3:be:07:08:9b:fb:8e:0e:66:08:27:4c:
a6:1f:2e:c7:55:39:1a:20:84:5b:07:85:38:9e:a9:22:09:3d:
a8:6d:ec:37:a1:76:33:93:eb:b4:3d:bb:97:d5:b7:e0:b0:dc:
d2:96:a8:f4:21:b0:ae:50:5d:28:76:2c:dc:fd:eb:d1:9f:6a:
66:9d:82:66:ea:59:b1:8f:1c:1a:fc:0d:68:de:d8:13:d4:7e:
d5:9d:fa:67:9f:ba:eb:71:b6:5b:2a:5b:e9:26:f8:3d:f9:86:
7a:15:3c:ba:39:9e:a3:b5:89:f0:11:13:26:6a:53:76:0f:c2:
93:0c:51:21:e4:b2:ea:9f:54:19:a1:a5:8c:38:db:ac:11:55:
84:33:ac:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:18:28 2026 by rpki-client