Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: UIydAe/cluRTn8nwJoSQwjnrIusmZMiom/M7C43MBAM=
Subject key identifier: 44:FB:95:B1:51:EB:0C:EF:02:66:2E:6D:AC:80:08:8A:F1:8B:4D:FA
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 01A002B8BEDE21F5477179F3EE5A61335A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0DBE
Signing time: Sat 15 Aug 2026 00:00:56 +0000
Manifest this update: Sat 15 Aug 2026 00:00:56 +0000
Manifest next update: Sun 16 Aug 2026 00:00:56 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: hRm/eFoAr8dWft0CTtHj3Sbtd4DjijizZbVS6baehSI=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:be:de:21:f5:47:71:79:f3:ee:5a:61:33:5a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Aug 15 00:00:56 2026 GMT
Not After : Aug 16 00:00:56 2026 GMT
Subject: CN=44fb95b151eb0cef02662e6dac80088af18b4dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:77:ee:05:8f:4d:c1:fa:19:ee:8f:fb:1a:
79:8c:6b:5f:b2:1d:bc:9a:61:ab:1c:55:e9:c6:78:
d0:7a:f1:07:f9:df:35:2b:f7:a6:22:ba:1c:45:93:
8e:bc:dd:97:b6:6b:09:fe:80:69:cf:6f:55:cd:dc:
55:c6:a9:3e:da:a3:37:e5:e7:a0:07:f4:35:72:6f:
f9:45:1b:3b:00:09:5b:61:a7:64:5f:69:8a:8c:b8:
89:4b:72:8e:4b:68:d2:2b:23:88:28:f0:b5:f8:8c:
13:1c:1b:1b:16:6c:f7:f3:ad:12:e7:06:97:22:ac:
d2:88:f4:e1:1f:cd:c3:6f:31:a0:92:bb:90:de:c2:
8d:28:a4:be:8a:7b:27:0f:5e:d8:61:b0:6b:84:bb:
3e:d9:a9:85:f1:77:d8:00:a2:e0:57:75:bb:2c:4f:
18:c0:55:a5:4c:24:17:1e:0f:9f:03:43:5f:80:00:
33:68:7c:14:8b:8e:f7:9a:1a:6b:40:58:54:34:a6:
25:82:87:bc:7f:62:e6:e8:0b:7c:ba:91:77:2a:00:
8e:19:aa:f9:09:50:ee:cd:c4:be:35:0b:39:a8:81:
84:07:f9:0d:3e:ba:a5:6b:da:65:ff:f1:c6:5d:6b:
c8:c5:5f:8a:1e:db:64:dc:0c:23:a1:2e:93:ec:63:
7e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FB:95:B1:51:EB:0C:EF:02:66:2E:6D:AC:80:08:8A:F1:8B:4D:FA
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2b:8d:f3:17:1e:bc:69:8f:88:89:a9:26:f9:6f:b5:cc:63:
b1:20:70:2f:61:c0:1d:13:15:ef:d0:a7:32:83:ee:d0:77:96:
0c:36:f9:f9:eb:45:f2:08:a4:91:e6:14:1c:8d:8f:19:b5:5d:
b8:c2:d6:bd:e8:60:03:97:60:75:27:45:2c:fd:33:c9:43:27:
6a:08:ef:02:2c:64:1f:fb:26:92:fb:14:c0:bc:70:74:b5:c5:
e8:22:de:99:61:bc:18:6e:e6:44:bd:69:c7:fc:04:0f:56:14:
8c:ee:42:5d:53:b5:c3:35:54:da:e6:b5:df:03:c0:54:01:a6:
1f:1a:f5:32:c6:73:b8:47:e8:d9:14:34:c3:ba:8b:9d:c7:28:
17:69:4b:5d:74:65:06:64:3b:e7:73:86:56:9d:ca:49:df:9b:
50:fd:09:8d:44:a6:8b:29:57:4e:65:f0:01:62:b5:17:4d:44:
84:1b:45:02:5e:a6:c9:74:d0:1a:fd:b9:a2:0f:74:f2:fd:47:
58:78:94:c2:6c:ca:44:74:1e:d4:5c:38:39:57:91:b6:19:e9:
4b:43:29:0b:76:bf:de:be:44:02:db:46:fa:fb:84:6f:7b:6e:
65:cd:03:5e:cb:43:2d:cb:8c:b0:62:6a:ec:22:88:5b:16:7e:
2a:d5:0f:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuL7eIfVHcXnz7lphM1ouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz
M2IzMDIwHhcNMjYwODE1MDAwMDU2WhcNMjYwODE2MDAwMDU2WjAzMTEwLwYDVQQD
Eyg0NGZiOTViMTUxZWIwY2VmMDI2NjJlNmRhYzgwMDg4YWYxOGI0ZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRp37gWPTcH6Ge6P+xp5jGtfsh28
mmGrHFXpxnjQevEH+d81K/emIrocRZOOvN2XtmsJ/oBpz29VzdxVxqk+2qM35eeg
B/Q1cm/5RRs7AAlbYadkX2mKjLiJS3KOS2jSKyOIKPC1+IwTHBsbFmz3860S5waX
IqzSiPThH83DbzGgkruQ3sKNKKS+insnD17YYbBrhLs+2amF8XfYAKLgV3W7LE8Y
wFWlTCQXHg+fA0NfgAAzaHwUi473mhprQFhUNKYlgoe8f2Lm6At8upF3KgCOGar5
CVDuzcS+NQs5qIGEB/kNPrqla9pl//HGXWvIxV+KHttk3AwjoS6T7GN+4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFET7lbFR6wzvAmYubayACIrxi036MB8GA1UdIwQY
MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct
YjI3ZDg3MzBhMjcwLzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw
LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiuN8xce
vGmPiImpJvlvtcxjsSBwL2HAHRMV79CnMoPu0HeWDDb5+etF8gikkeYUHI2PGbVd
uMLWvehgA5dgdSdFLP0zyUMnagjvAixkH/smkvsUwLxwdLXF6CLemWG8GG7mRL1p
x/wED1YUjO5CXVO1wzVU2ua13wPAVAGmHxr1MsZzuEfo2RQ0w7qLnccoF2lLXXRl
BmQ753OGVp3KSd+bUP0JjUSmiylXTmXwAWK1F01EhBtFAl6myXTQGv25og908v1H
WHiUwmzKRHQe1Fw4OVeRthnpS0MpC3a/3r5EAttG+vuEb3tuZc0DXstDLcuMsGJq
7CKIWxZ+KtUPmg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:35:58 2026 by rpki-client