Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: 7YbuEO+Ehbrx19HS1tRGMcDOhSxc/UtBKaTUs3U93k0=
Subject key identifier: 5B:CF:DD:0F:9B:0F:8D:0D:F2:04:B9:DE:26:30:E4:87:EC:15:05:FC
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019F134172720552C9A2FBA601D3F2BBDA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0D42
Signing time: Mon 29 Jun 2026 12:01:23 +0000
Manifest this update: Mon 29 Jun 2026 12:01:23 +0000
Manifest next update: Tue 30 Jun 2026 12:01:23 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: vaXXgDLi691sDQxXDmWaidOmqUzbG+kl0vzWzkJbnSY=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:41:72:72:05:52:c9:a2:fb:a6:01:d3:f2:bb:da:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Jun 29 12:01:23 2026 GMT
Not After : Jun 30 12:01:23 2026 GMT
Subject: CN=5bcfdd0f9b0f8d0df204b9de2630e487ec1505fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1a:b4:bf:dd:2c:9a:fc:35:04:90:b2:a6:0d:
db:49:32:2d:ff:96:e3:66:ca:7d:64:ba:e8:5b:fa:
4d:e0:37:b3:0c:68:f5:08:2e:37:23:23:7a:88:7a:
59:5d:89:15:7f:44:b6:05:23:3a:31:de:55:00:90:
97:74:de:a1:90:cb:32:99:ee:1a:2b:6d:d5:62:17:
77:69:7c:a9:10:df:2b:69:32:2f:8e:36:ee:6f:36:
1b:9e:16:ad:2b:be:db:58:95:f3:a7:a9:59:18:8a:
d7:a8:38:73:c7:ab:3d:bb:2f:d6:1f:9d:26:46:fd:
0f:6d:b0:c3:b2:a4:28:86:28:b1:82:76:ce:e3:03:
af:88:3a:96:47:24:a9:93:ab:c1:80:4b:3a:f2:94:
06:5d:e6:88:30:09:2a:0f:b2:e8:cc:c8:3c:25:06:
8e:0f:57:76:85:a8:e0:01:86:2c:3c:56:be:4d:d3:
9c:3c:b8:1b:bc:4b:a2:73:ed:aa:4b:35:54:59:22:
41:8f:e2:f0:66:a6:a4:6c:fe:6a:08:3d:6b:bc:1a:
95:4e:a1:7a:0f:c9:03:bb:d0:96:f3:8b:05:34:c7:
9b:b7:1a:54:74:c1:8b:c1:ef:0b:42:f3:7d:3d:35:
a9:af:2d:23:8f:86:19:38:82:f8:6f:94:04:a9:14:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CF:DD:0F:9B:0F:8D:0D:F2:04:B9:DE:26:30:E4:87:EC:15:05:FC
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e2:8a:cc:0c:01:5c:e5:c2:55:09:be:6b:43:2f:9c:66:22:
23:a7:45:5f:56:b9:ae:3a:3f:43:d8:32:ec:b2:13:74:c1:05:
bc:05:1b:55:52:3f:3f:b4:4b:0a:d9:59:40:6c:7d:1b:40:a6:
a1:ef:5c:29:9c:78:cc:71:f6:cf:ac:13:0a:23:9f:d7:0c:34:
10:24:55:1c:5c:16:c0:07:e7:8f:59:50:dc:b5:eb:75:9f:b2:
14:c0:28:87:07:8c:01:8c:47:e9:00:26:05:ec:79:e2:09:f1:
0b:52:11:9e:02:cd:62:5e:a7:f8:7a:6e:a5:ae:fc:d6:c8:11:
e2:86:93:55:c2:5f:2d:40:36:00:7a:00:a8:e0:58:76:b1:97:
4b:fc:96:b7:61:77:2d:39:06:d5:4c:d1:e2:74:8e:36:87:72:
3e:16:11:f6:53:59:49:f7:2e:5c:17:05:5e:14:d2:90:18:73:
ad:16:fa:aa:9c:43:a8:16:bd:db:48:c3:4b:e2:20:d1:62:9d:
46:26:d6:bc:ea:24:da:9f:74:a5:b9:1f:ae:71:bf:a3:78:28:
1a:29:f9:65:a9:34:9c:6b:03:53:2f:1d:9b:23:b2:dc:35:42:
64:92:16:49:1b:28:9f:ba:8c:ee:b0:3f:e2:85:12:e0:8e:44:
54:ce:34:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8TQXJyBVLJovumAdPyu9ouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz
M2IzMDIwHhcNMjYwNjI5MTIwMTIzWhcNMjYwNjMwMTIwMTIzWjAzMTEwLwYDVQQD
Eyg1YmNmZGQwZjliMGY4ZDBkZjIwNGI5ZGUyNjMwZTQ4N2VjMTUwNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hq0v90smvw1BJCypg3bSTIt/5bj
Zsp9ZLroW/pN4DezDGj1CC43IyN6iHpZXYkVf0S2BSM6Md5VAJCXdN6hkMsyme4a
K23VYhd3aXypEN8raTIvjjbubzYbnhatK77bWJXzp6lZGIrXqDhzx6s9uy/WH50m
Rv0PbbDDsqQohiixgnbO4wOviDqWRySpk6vBgEs68pQGXeaIMAkqD7LozMg8JQaO
D1d2hajgAYYsPFa+TdOcPLgbvEuic+2qSzVUWSJBj+LwZqakbP5qCD1rvBqVTqF6
D8kDu9CW84sFNMebtxpUdMGLwe8LQvN9PTWpry0jj4YZOIL4b5QEqRR6dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvP3Q+bD40N8gS53iYw5IfsFQX8MB8GA1UdIwQY
MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct
YjI3ZDg3MzBhMjcwLzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw
LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOKKzAwB
XOXCVQm+a0MvnGYiI6dFX1a5rjo/Q9gy7LITdMEFvAUbVVI/P7RLCtlZQGx9G0Cm
oe9cKZx4zHH2z6wTCiOf1ww0ECRVHFwWwAfnj1lQ3LXrdZ+yFMAohweMAYxH6QAm
Bex54gnxC1IRngLNYl6n+Hpupa781sgR4oaTVcJfLUA2AHoAqOBYdrGXS/yWt2F3
LTkG1UzR4nSONodyPhYR9lNZSfcuXBcFXhTSkBhzrRb6qpxDqBa920jDS+Ig0WKd
RibWvOok2p90pbkfrnG/o3goGin5Zak0nGsDUy8dmyOy3DVCZJIWSRson7qM7rA/
4oUS4I5EVM40LA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 19:28:40 2026 by rpki-client