Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: ghSZcuxXV3ieiuAzNmOSyjDK0Nl93N9tVAC/Xm5fCHA=
Subject key identifier: 29:BA:D4:3E:16:F2:90:58:7D:E8:53:53:42:03:DC:92:E2:B1:54:B7
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 01A0024B468CB16B421734824B16E0B6D17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 22:01:22 +0000
Manifest this update: Fri 14 Aug 2026 22:01:22 +0000
Manifest next update: Sat 15 Aug 2026 22:01:22 +0000
Files and hashes: 1: F2IHJrnPyRwbzKo1HP_xqBvLdvQ.roa (hash: FgszxDdrz1FfhJ+T4y5DQNjiDZnx4cEgXP5k1Bjw7eg=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: JMaeai6i/6Y5Pi9peAbL9OVBiRP1kObcoftqoT+9vc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:46:8c:b1:6b:42:17:34:82:4b:16:e0:b6:d1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Aug 14 22:01:22 2026 GMT
Not After : Aug 15 22:01:22 2026 GMT
Subject: CN=29bad43e16f290587de853534203dc92e2b154b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:eb:d2:34:c9:c8:be:d5:33:70:87:de:18:
73:89:07:a7:53:d5:7e:ad:2c:75:e7:f5:0f:a1:cc:
d2:b3:d6:4c:9b:99:77:57:21:c9:6d:98:67:b9:9f:
fc:c3:5d:b7:ea:2f:de:da:93:39:39:2d:5e:0b:f6:
19:99:db:40:a8:25:ea:8f:78:a5:8d:b6:90:f8:2d:
13:b6:33:44:f5:99:0b:ce:b4:7f:a0:5f:8d:c2:83:
a7:ea:71:fa:36:92:cf:90:21:89:f1:c5:1c:8a:29:
22:87:79:14:30:f1:a8:9f:6c:3a:96:46:b9:27:64:
b7:c6:5b:8c:94:03:72:e1:e8:7f:91:b3:16:ea:3c:
b8:a2:8a:be:87:55:e6:df:c4:1b:1c:2a:23:b4:a3:
8b:18:a6:74:d8:4c:70:fb:96:71:66:5c:4b:fe:64:
45:75:a2:f7:5b:9a:9a:75:d1:ae:fa:2b:2a:08:6a:
50:21:a8:1d:6d:d2:5a:ff:6a:25:3e:51:99:52:38:
80:80:84:fe:8c:c2:1a:87:d5:4f:f4:27:cd:1a:a4:
4b:11:41:84:a5:86:56:65:c5:b5:99:7b:20:a7:ef:
83:84:31:51:04:85:09:ab:04:d4:86:c9:35:53:bb:
38:ef:8c:d9:8a:19:b9:c8:cd:27:53:41:d2:da:c8:
80:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:D4:3E:16:F2:90:58:7D:E8:53:53:42:03:DC:92:E2:B1:54:B7
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:82:81:b7:1f:2b:06:56:9f:35:2c:69:a9:b0:b4:29:32:c3:
c3:3c:91:3d:fb:0e:4d:3b:88:dd:39:d4:b9:b7:40:8e:16:44:
d7:ec:5a:05:1a:b9:50:06:a7:f3:6a:32:e0:a3:00:13:be:00:
fc:32:39:59:d7:5a:28:ce:e4:bc:ae:1d:9b:83:18:aa:c4:f9:
f6:53:33:ec:78:ce:8d:f3:a7:6c:57:17:44:bb:c8:09:fa:ec:
64:b9:95:f4:da:7c:92:ba:82:42:b0:8b:05:5d:7b:e1:3d:26:
b2:5f:4b:24:db:a3:09:8f:f7:66:fd:4a:5a:01:73:ea:81:10:
1d:ea:79:00:da:aa:f2:10:40:41:77:44:2d:f8:97:d9:5d:14:
50:6b:5a:08:7d:af:e0:53:69:fb:19:80:a8:22:58:00:49:65:
c2:a8:c1:fe:f3:a3:65:36:cc:2b:d0:61:65:70:ca:f2:9d:91:
ee:47:eb:40:3c:5c:ba:90:fa:f4:78:9c:a3:61:0b:10:8a:04:
55:7f:11:d1:a1:62:1e:14:77:07:94:f3:47:5a:6f:21:19:96:
ea:aa:9d:f2:b0:38:b1:ab:68:54:ee:2f:0e:49:68:dd:cb:4e:
ea:ac:90:41:5c:28:50:95:20:ef:45:65:4a:60:c0:7c:c2:47:
14:72:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:18 2026 by rpki-client