Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: PPzGcsm63eKz73fVtFnjSeg0OeIxNBHCe8G5MlpZmeE=
Subject key identifier: 1B:55:C1:3D:D5:B1:F8:6F:A4:7D:D0:CD:CF:8C:B1:B7:23:AA:EB:D0
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 01A120898CC489D5101761DE5493C68FEAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0E52
Signing time: Fri 09 Oct 2026 12:00:47 +0000
Manifest this update: Fri 09 Oct 2026 12:00:47 +0000
Manifest next update: Sat 10 Oct 2026 12:00:47 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: 9S4DRqZXXNt7nfNigg5oDmEvErFBREN4BZGB4jLydKs=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:89:8c:c4:89:d5:10:17:61:de:54:93:c6:8f:ea:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Oct 9 12:00:47 2026 GMT
Not After : Oct 10 12:00:47 2026 GMT
Subject: CN=1b55c13dd5b1f86fa47dd0cdcf8cb1b723aaebd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:12:93:17:ca:c7:c9:9a:13:82:02:59:9d:
4f:95:49:1a:17:61:c4:9d:2c:e3:25:40:ca:fb:94:
1e:9a:3e:c0:c0:4b:68:40:c8:6d:b9:06:0a:46:67:
a2:06:68:89:1d:3f:7f:5e:bb:e7:df:4d:84:2b:0b:
72:a8:ed:4e:14:c3:3d:9a:7c:29:96:6d:8e:64:ad:
fb:27:4d:d3:39:b2:e9:72:83:4e:b4:f8:d6:71:1a:
ce:bf:7c:8c:95:f7:ba:e5:c8:c3:c4:17:4e:b9:c6:
9b:4d:47:c5:40:d8:05:95:46:9f:2d:f6:86:30:31:
a3:3c:bd:1c:ff:ed:ae:27:79:38:5d:c7:16:38:7b:
e9:a8:10:d2:34:67:9c:11:3b:48:bf:0a:51:17:79:
e6:f0:fe:3b:f9:aa:5a:b8:b1:ef:67:5f:d9:77:72:
88:90:be:36:43:4e:3a:d6:90:e3:26:87:1b:2f:dd:
29:d8:2b:03:ac:2a:2e:2e:e8:f6:32:5c:52:95:4c:
d6:71:ac:66:ae:6d:6f:c8:0c:a0:f2:82:0a:cc:ea:
91:2e:4d:53:7c:1a:a9:fb:0e:5f:2d:d7:0e:df:fc:
0e:70:21:5d:be:86:6b:b9:55:55:4a:e6:a5:ca:51:
86:24:70:0c:4e:82:1c:e2:06:cc:96:48:37:28:86:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:55:C1:3D:D5:B1:F8:6F:A4:7D:D0:CD:CF:8C:B1:B7:23:AA:EB:D0
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0b:59:59:6a:70:6a:80:80:6e:1b:2a:96:1b:3a:78:34:0b:
95:41:de:cf:c1:f2:20:ed:4d:3d:c9:1e:22:46:96:d5:2d:81:
f7:eb:d1:0c:79:c5:0d:86:29:2f:fc:23:89:87:7f:01:e7:3c:
be:5f:8a:b0:bf:a5:25:6f:ab:39:f1:c6:03:e9:fc:51:8a:02:
ab:4e:59:37:9b:61:9f:1d:47:b6:60:57:70:c0:d0:d9:e5:8c:
58:9c:a7:12:4f:1f:c8:d9:70:6a:07:57:11:84:92:2c:ec:07:
2b:02:3c:b9:45:51:5d:c5:b8:bd:b2:3a:7d:14:87:56:be:a0:
72:e3:56:46:c9:88:05:c5:64:f2:76:2d:17:dd:24:06:f9:1f:
fc:f1:7f:71:fe:54:bd:e6:23:6e:a2:a7:a3:e6:ce:71:2e:a2:
ef:95:f1:ad:9a:b1:8d:35:7c:69:87:14:57:01:f2:1a:e9:aa:
46:b9:17:f3:bc:2d:2e:67:c3:0f:4f:24:9c:be:37:9a:7f:96:
7c:89:ce:e3:41:a4:d0:e1:eb:ad:76:c4:e6:0d:b1:62:51:7b:
f4:ed:84:2e:21:5c:ef:b4:ec:8f:07:c7:42:54:83:1e:06:ba:
88:37:49:d0:e2:d9:d9:83:cb:30:e3:2c:ed:8a:c8:78:5f:9e:
3a:41:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:42:00 2026 by rpki-client