Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: dHkv/bbx+eUpUXHMrZ1XVvxf6P4fq4jnACZ+O1sOHmE=
Subject key identifier: 5B:E7:C1:1D:DC:5A:BF:B3:85:E3:61:BD:FE:7F:59:23:F2:BA:B4:0C
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 01A14C86CEAEC236452873F0A031AEB8BBF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 1AB0
Signing time: Sun 18 Oct 2026 01:01:05 +0000
Manifest this update: Sun 18 Oct 2026 01:01:05 +0000
Manifest next update: Mon 19 Oct 2026 01:01:05 +0000
Files and hashes: 1: F2IHJrnPyRwbzKo1HP_xqBvLdvQ.roa (hash: FgszxDdrz1FfhJ+T4y5DQNjiDZnx4cEgXP5k1Bjw7eg=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: 24jv4s0cWPUOkttNhPpJsIxPxpt3BYZoBvMUrjalZoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:86:ce:ae:c2:36:45:28:73:f0:a0:31:ae:b8:bb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Oct 18 01:01:05 2026 GMT
Not After : Oct 19 01:01:05 2026 GMT
Subject: CN=5be7c11ddc5abfb385e361bdfe7f5923f2bab40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:52:1d:d3:4f:74:26:1f:0d:df:71:db:ae:
75:b2:01:0e:85:11:b5:a6:73:02:b3:92:64:ad:ea:
ae:4f:b1:88:95:47:98:1e:59:fa:e2:41:47:94:ab:
19:6f:b0:e4:0f:5a:a0:ea:88:b2:00:b2:46:72:c5:
78:7c:85:a1:f0:81:ff:9c:49:09:7e:3e:72:e8:f1:
a2:81:2d:44:38:ae:13:39:9f:17:70:ca:55:a2:8a:
a3:60:31:6e:84:c9:29:7d:16:9f:d8:f3:12:54:4e:
24:2f:29:18:f3:21:49:e9:41:31:63:36:a1:86:c1:
20:95:2f:d1:cd:cb:a3:04:89:a2:0d:c1:fb:48:7a:
5a:a7:90:f8:ff:44:5a:ec:d9:35:40:af:b4:80:00:
67:56:bd:d9:42:9a:37:eb:0c:42:3e:89:a9:59:50:
95:e1:d9:5e:d1:06:ac:8d:0e:ed:86:9e:3e:53:b1:
6b:8a:0e:39:e2:59:f5:1c:f3:cb:1a:5b:e8:d5:34:
4f:d9:ec:56:73:50:4c:ed:45:21:22:6b:1b:38:7d:
a0:b3:1e:d2:2c:73:dd:86:a0:b2:49:24:70:c2:c1:
75:c5:dc:e6:37:68:e4:a0:1e:b1:51:67:90:d1:84:
e1:3e:8c:8c:4b:62:62:6f:ed:92:98:15:47:e2:d4:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E7:C1:1D:DC:5A:BF:B3:85:E3:61:BD:FE:7F:59:23:F2:BA:B4:0C
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:36:20:17:e9:d9:22:89:21:0b:ef:63:e3:65:25:ab:29:b2:
9b:63:30:b3:7a:82:64:83:8e:47:60:1d:6e:92:4e:16:4c:4c:
fd:4e:d9:52:cf:fa:f9:01:54:0d:ec:37:03:00:fa:67:44:b0:
1e:0c:a1:f4:f7:1a:32:36:53:d3:72:c1:b2:da:be:45:a1:94:
63:53:a0:8e:ad:34:76:04:b1:5c:45:76:76:2b:c9:28:79:66:
50:e5:7d:da:5e:8c:13:39:73:bc:e7:b2:78:cb:b7:6a:4f:40:
0b:ce:9b:94:63:b5:e0:cc:7e:6b:01:e0:75:e5:cf:05:02:fb:
a0:24:ed:f3:3d:f8:12:22:61:a1:3e:9e:70:21:3b:2e:a2:32:
6a:48:97:35:3b:53:ff:7b:7f:5d:62:b3:db:4b:86:79:af:d2:
20:34:87:8a:e4:d8:27:c2:0f:c9:7e:16:e0:2e:fd:1d:dd:5d:
2b:68:7f:e0:6f:48:44:29:68:51:33:6a:1b:da:a2:66:58:ef:
5a:29:89:17:a5:1d:8f:51:31:88:3d:8d:8e:21:7f:71:ba:7d:
02:e9:b3:f6:98:4f:bc:b1:64:3d:bf:a9:6f:29:a9:22:4e:31:
52:06:eb:b6:55:62:38:de:f4:43:b8:88:61:52:40:52:ea:d0:
18:b5:b7:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFMhs6uwjZFKHPwoDGuuLv2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDZkOTk0YTEyMTkyNTdhM2NlYzllZDkxY2QxODliYzNk
OTNiMGIwHhcNMjYxMDE4MDEwMTA1WhcNMjYxMDE5MDEwMTA1WjAzMTEwLwYDVQQD
Eyg1YmU3YzExZGRjNWFiZmIzODVlMzYxYmRmZTdmNTkyM2YyYmFiNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpdSHdNPdCYfDd9x2651sgEOhRG1
pnMCs5JkrequT7GIlUeYHln64kFHlKsZb7DkD1qg6oiyALJGcsV4fIWh8IH/nEkJ
fj5y6PGigS1EOK4TOZ8XcMpVooqjYDFuhMkpfRaf2PMSVE4kLykY8yFJ6UExYzah
hsEglS/RzcujBImiDcH7SHpap5D4/0Ra7Nk1QK+0gABnVr3ZQpo36wxCPompWVCV
4dle0QasjQ7thp4+U7Frig454ln1HPPLGlvo1TRP2exWc1BM7UUhImsbOH2gsx7S
LHPdhqCySSRwwsF1xdzmN2jkoB6xUWeQ0YThPoyMS2Jib+2SmBVH4tRXswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvnwR3cWr+zheNhvf5/WSPyurQMMB8GA1UdIwQY
MBaAFIEG2ZShIZJXo87J7ZHNGJvD2TsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEt
YjM1NGI3OGNjOTY5LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEtYjM1NGI3OGNjOTY5
LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzYgF+nZ
IokhC+9j42Ulqymym2Mws3qCZIOOR2AdbpJOFkxM/U7ZUs/6+QFUDew3AwD6Z0Sw
Hgyh9PcaMjZT03LBstq+RaGUY1Ogjq00dgSxXEV2divJKHlmUOV92l6MEzlzvOey
eMu3ak9AC86blGO14Mx+awHgdeXPBQL7oCTt8z34EiJhoT6ecCE7LqIyakiXNTtT
/3t/XWKz20uGea/SIDSHiuTYJ8IPyX4W4C79Hd1dK2h/4G9IRCloUTNqG9qiZljv
WimJF6Udj1ExiD2NjiF/cbp9Aumz9phPvLFkPb+pbympIk4xUgbrtlViON70Q7iI
YVJAUurQGLW3lw==
-----END CERTIFICATE-----
Generated at Sun Oct 18 10:55:50 2026 by rpki-client