Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: Uy72wP6G6Ch7y2nn9zIstqZTQ4AzJcIeXmkjYXn8lyM=
Subject key identifier: 95:A6:26:01:9F:31:E1:AE:75:90:92:21:E5:C6:E1:EF:DE:61:6C:09
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 01A1250B72FF1704ED3E116A725E2DA2C0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 09:01:09 +0000
Manifest this update: Sat 10 Oct 2026 09:01:09 +0000
Manifest next update: Sun 11 Oct 2026 09:01:09 +0000
Files and hashes: 1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: oOQNlQ7uf9iqEUYXPS71AjUJzCaNUkmFXmzqrSM8LaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:72:ff:17:04:ed:3e:11:6a:72:5e:2d:a2:c0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Oct 10 09:01:09 2026 GMT
Not After : Oct 11 09:01:09 2026 GMT
Subject: CN=95a626019f31e1ae75909221e5c6e1efde616c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:f1:e0:a8:43:33:8a:25:08:21:e1:37:35:
aa:5e:29:f4:22:fc:35:2b:bb:44:03:cb:a5:e5:22:
1b:73:27:08:34:a8:a7:4b:7d:1d:0a:b6:3d:64:ee:
78:cd:bf:62:e0:f7:75:5c:06:54:1e:3f:e6:7e:98:
28:3e:42:8e:8e:b1:1c:36:a2:11:f4:36:ec:c9:18:
c2:c5:1f:ff:51:df:88:32:b6:60:cb:a9:79:0e:59:
a1:83:54:72:5a:f3:04:bc:23:a9:4d:f7:ff:0c:c9:
bc:80:67:31:0a:a4:93:22:88:d4:db:78:6a:df:11:
c5:8d:72:61:3b:5f:f2:5d:11:86:ea:38:c7:c6:77:
35:20:8b:f0:34:34:e7:a0:37:06:80:72:ac:ab:7e:
7a:4e:2a:5b:df:dd:5d:bc:bb:04:cb:43:81:7a:3f:
ab:f4:ee:dc:2f:09:2f:19:d1:ed:94:51:3e:00:f7:
6d:11:78:19:57:56:ba:bf:7a:25:e7:2b:8d:34:dc:
12:bc:71:a3:c9:1c:7a:19:62:8d:98:32:c1:ff:23:
24:e8:4b:99:14:24:f7:35:5e:41:19:85:85:c6:92:
bd:9f:25:09:4c:2f:e5:b3:8c:98:c5:6e:b4:b2:a5:
47:99:2c:8f:58:ef:ad:6b:34:83:06:6b:4e:33:20:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A6:26:01:9F:31:E1:AE:75:90:92:21:E5:C6:E1:EF:DE:61:6C:09
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:02:ae:78:de:60:49:4f:f8:f5:f5:b3:d6:f5:4e:14:f8:c7:
10:10:d5:fe:66:5b:b6:d1:f1:80:e7:84:27:46:d6:1c:6d:cd:
e7:e6:a6:74:5c:a0:ec:c4:1f:a4:7f:fa:71:95:6c:1c:16:8b:
71:3b:49:f2:19:e9:65:4c:36:2b:47:00:64:89:cc:90:4e:2c:
9e:37:4a:cb:22:2f:94:35:08:30:de:11:5a:0c:50:47:45:1c:
f7:08:e6:5d:23:7b:63:a2:0b:58:b5:14:5c:23:7c:53:9e:99:
3a:d9:a8:cf:1a:99:7c:4b:0d:e6:1f:f5:9f:00:f4:e9:be:6f:
e9:65:8f:ef:27:dd:31:5c:d9:ef:39:52:99:f6:fa:0a:96:f8:
c9:1c:04:39:a8:13:ec:9c:a0:c7:3d:9f:61:a8:40:b5:16:86:
e6:24:11:49:70:a0:b8:e1:a4:19:d0:94:ef:c2:54:67:dc:e4:
59:2c:54:51:70:c7:04:4e:7a:ef:73:d9:d9:b6:d1:03:99:20:
fc:47:91:54:ad:da:e3:de:51:18:8c:0f:99:40:d3:8f:0a:3b:
3c:b2:b2:ea:4b:98:04:98:f6:d6:da:3c:0b:65:09:30:04:f3:
e8:8c:4b:13:72:41:a7:fb:9b:f7:39:2a:95:75:ad:74:f5:b8:
52:ef:a8:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElC3L/FwTtPhFqcl4tosCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDYwOGExNDExOGIxYThkY2RkZWJiYjQwZjk2ZWNkNDhm
ODVjNzEwHhcNMjYxMDEwMDkwMTA5WhcNMjYxMDExMDkwMTA5WjAzMTEwLwYDVQQD
Eyg5NWE2MjYwMTlmMzFlMWFlNzU5MDkyMjFlNWM2ZTFlZmRlNjE2YzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Jrx4KhDM4olCCHhNzWqXin0Ivw1
K7tEA8ul5SIbcycINKinS30dCrY9ZO54zb9i4Pd1XAZUHj/mfpgoPkKOjrEcNqIR
9DbsyRjCxR//Ud+IMrZgy6l5Dlmhg1RyWvMEvCOpTff/DMm8gGcxCqSTIojU23hq
3xHFjXJhO1/yXRGG6jjHxnc1IIvwNDTnoDcGgHKsq356Tipb391dvLsEy0OBej+r
9O7cLwkvGdHtlFE+APdtEXgZV1a6v3ol5yuNNNwSvHGjyRx6GWKNmDLB/yMk6EuZ
FCT3NV5BGYWFxpK9nyUJTC/ls4yYxW60sqVHmSyPWO+tazSDBmtOMyCHhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWmJgGfMeGudZCSIeXG4e/eYWwJMB8GA1UdIwQY
MBaAFIDWCKFBGLGo3N3ru0D5bs1I+FxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEt
OTkyOGRkM2YyZjgyLzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEtOTkyOGRkM2YyZjgy
LzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwKueN5g
SU/49fWz1vVOFPjHEBDV/mZbttHxgOeEJ0bWHG3N5+amdFyg7MQfpH/6cZVsHBaL
cTtJ8hnpZUw2K0cAZInMkE4snjdKyyIvlDUIMN4RWgxQR0Uc9wjmXSN7Y6ILWLUU
XCN8U56ZOtmozxqZfEsN5h/1nwD06b5v6WWP7yfdMVzZ7zlSmfb6Cpb4yRwEOagT
7Jygxz2fYahAtRaG5iQRSXCguOGkGdCU78JUZ9zkWSxUUXDHBE5673PZ2bbRA5kg
/EeRVK3a495RGIwPmUDTjwo7PLKy6kuYBJj21to8C2UJMATz6IxLE3JBp/ub9zkq
lXWtdPW4Uu+o6Q==
-----END CERTIFICATE-----
Generated at Sat Oct 10 21:24:05 2026 by rpki-client