Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: KHKcgL2NhwAEWwNVuFVbDeOUdAIQOsYWagEH6oq+9Vg=
Subject key identifier: 35:6E:81:AD:01:61:B2:54:39:0A:B7:9D:09:16:83:08:BB:87:AC:8A
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019E2995076095043B40CF7D668861025071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0CC9
Signing time: Fri 15 May 2026 03:01:33 +0000
Manifest this update: Fri 15 May 2026 03:01:33 +0000
Manifest next update: Sat 16 May 2026 03:01:33 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: ly2l7qI6hVB/5M9Tg+G13AVeM+N+HnqlPfuboQm9GrI=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:95:07:60:95:04:3b:40:cf:7d:66:88:61:02:50:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: May 15 03:01:33 2026 GMT
Not After : May 16 03:01:33 2026 GMT
Subject: CN=356e81ad0161b254390ab79d09168308bb87ac8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:4b:c0:aa:39:ec:85:1b:2f:ff:01:f0:bd:
66:e4:a4:c3:20:3f:76:8b:86:0b:39:73:80:92:fb:
82:4b:6b:c5:1a:4e:38:5e:55:cb:26:7b:fe:67:a4:
28:f3:12:88:31:8a:bc:df:01:6f:9d:b5:87:40:60:
42:67:aa:23:76:e8:1c:00:2b:3e:c4:90:3b:23:19:
32:b1:2b:15:63:c4:43:2c:6a:b9:44:3a:09:a7:25:
64:2e:83:3b:cf:7c:c1:12:c6:d8:78:3e:1d:93:d3:
12:9b:5b:ee:dd:dc:07:f6:fd:34:f7:5a:12:24:18:
a4:d3:93:ad:95:ff:d1:21:2e:50:5c:8f:a4:c9:93:
70:99:fd:08:6e:0a:38:2e:18:e5:51:2e:13:59:56:
b5:3d:95:68:08:90:bd:5b:4c:ff:4f:61:cc:3f:2a:
b0:1d:24:00:3f:84:0d:ac:bd:ef:c4:5c:fa:70:c4:
e5:31:e9:16:d8:ba:ec:8d:a4:4a:65:5c:43:cd:b3:
8c:9a:78:81:29:58:39:91:db:5b:67:b5:7e:2b:a6:
6f:4c:8f:27:ee:44:01:f5:f7:4f:f9:a9:84:16:10:
8d:a6:87:82:f4:7c:1a:8f:e5:4a:77:6d:a6:45:05:
74:5e:5c:f9:7d:33:6a:1d:03:df:9d:6c:3e:7c:27:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6E:81:AD:01:61:B2:54:39:0A:B7:9D:09:16:83:08:BB:87:AC:8A
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:f6:fc:86:07:59:90:eb:c1:32:09:07:d6:d9:0b:e6:cb:61:
fb:ee:fc:1f:30:6f:f2:f2:74:60:58:74:88:02:fd:34:be:71:
59:64:99:42:07:47:35:4d:f1:d0:1c:60:65:68:76:81:bd:1c:
49:12:ea:ef:85:60:de:5c:2f:d3:49:62:ab:ed:10:93:d5:29:
70:51:6d:00:29:5b:74:97:21:e0:c9:a6:ec:d7:e3:0b:4d:07:
b0:77:e7:5f:29:4e:11:22:8f:23:2c:08:ae:ad:b6:ac:e1:9f:
e8:fc:0b:ae:23:19:ab:01:51:f6:56:10:fc:32:67:11:24:a4:
fe:22:31:29:31:c4:be:39:e1:f1:ab:21:7e:07:d0:e1:dd:fb:
47:58:86:0c:5b:b3:6d:b5:c6:e7:7e:61:6b:0b:13:d3:a3:9d:
aa:61:cc:e4:a9:4c:99:a5:75:42:b4:06:b7:cd:d3:8f:02:d2:
14:5e:59:b3:a5:20:e1:75:38:57:51:ea:91:a2:21:ba:68:6a:
ff:b7:5a:1a:79:1d:fb:44:97:30:72:d8:ff:ab:24:ea:22:72:
6b:62:31:99:0e:b1:12:d3:25:3a:29:b3:5e:b2:ab:da:3c:f6:
f6:b3:cc:4a:99:50:7c:cd:10:66:11:9b:0a:c1:ea:f8:b1:03:
ef:60:c2:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4plQdglQQ7QM99ZohhAlBxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz
M2IzMDIwHhcNMjYwNTE1MDMwMTMzWhcNMjYwNTE2MDMwMTMzWjAzMTEwLwYDVQQD
EygzNTZlODFhZDAxNjFiMjU0MzkwYWI3OWQwOTE2ODMwOGJiODdhYzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJVLwKo57IUbL/8B8L1m5KTDID92
i4YLOXOAkvuCS2vFGk44XlXLJnv+Z6Qo8xKIMYq83wFvnbWHQGBCZ6ojdugcACs+
xJA7IxkysSsVY8RDLGq5RDoJpyVkLoM7z3zBEsbYeD4dk9MSm1vu3dwH9v0091oS
JBik05Otlf/RIS5QXI+kyZNwmf0Ibgo4LhjlUS4TWVa1PZVoCJC9W0z/T2HMPyqw
HSQAP4QNrL3vxFz6cMTlMekW2LrsjaRKZVxDzbOMmniBKVg5kdtbZ7V+K6ZvTI8n
7kQB9fdP+amEFhCNpoeC9Hwaj+VKd22mRQV0Xlz5fTNqHQPfnWw+fCcTdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVuga0BYbJUOQq3nQkWgwi7h6yKMB8GA1UdIwQY
MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct
YjI3ZDg3MzBhMjcwLzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw
LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5Pb8hgdZ
kOvBMgkH1tkL5sth++78HzBv8vJ0YFh0iAL9NL5xWWSZQgdHNU3x0BxgZWh2gb0c
SRLq74Vg3lwv00liq+0Qk9UpcFFtAClbdJch4Mmm7NfjC00HsHfnXylOESKPIywI
rq22rOGf6PwLriMZqwFR9lYQ/DJnESSk/iIxKTHEvjnh8ashfgfQ4d37R1iGDFuz
bbXG535hawsT06OdqmHM5KlMmaV1QrQGt83TjwLSFF5Zs6Ug4XU4V1HqkaIhumhq
/7daGnkd+0SXMHLY/6sk6iJya2IxmQ6xEtMlOimzXrKr2jz29rPMSplQfM0QZhGb
CsHq+LED72DCwQ==
-----END CERTIFICATE-----
Generated at Fri May 15 13:58:49 2026 by rpki-client