Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: lqP2sk2YN743ZM2NNwj3TeGaASVcKNRf/KSnP5L+iGw=
Subject key identifier: A3:E0:95:7D:8C:79:41:7E:B2:52:B4:53:76:EF:C7:99:77:BE:F4:7B
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 019F129C8C531808673B97C8C03A6B03C21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 09:01:17 +0000
Manifest this update: Mon 29 Jun 2026 09:01:17 +0000
Manifest next update: Tue 30 Jun 2026 09:01:17 +0000
Files and hashes: 1: 4ShXPhWP4Qk_JTUR7nsENpLjDoc.asa (hash: HXRCdfUgdsuwOo68NwP3+PURL7JrnmOHum1V4B+oxJQ=)
2: aiWvgSfnwbnLlzyTpx8toxkUKEw.roa (hash: yBRys49Mvvm6+/VlItOHtileiNejv8QSbeDxO1U1PhI=)
3: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: TfaYlrSeVq5pTBuYjnWNUysD8K7/gXwVQXJCbUk3RsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:8c:53:18:08:67:3b:97:c8:c0:3a:6b:03:c2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Jun 29 09:01:17 2026 GMT
Not After : Jun 30 09:01:17 2026 GMT
Subject: CN=a3e0957d8c79417eb252b45376efc79977bef47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:25:a8:1e:34:29:00:6f:b0:77:bf:fe:db:
18:c8:96:75:7c:42:88:81:38:2c:7b:ea:92:47:6e:
b6:bb:af:94:65:25:42:b4:f0:75:72:b3:8e:57:ff:
f4:7f:de:0a:08:fa:25:f1:fa:fb:16:cd:18:c8:7f:
0a:29:72:49:5a:45:4e:0c:84:89:a8:c0:7e:7b:9f:
11:62:72:a1:e6:28:5a:8e:f0:d5:06:3f:90:1f:75:
3f:32:67:e8:68:27:54:1e:07:aa:8d:ab:8a:3d:af:
43:d8:bf:53:ab:45:44:40:51:92:75:5c:7b:09:75:
cc:df:27:03:ca:4b:40:ff:72:89:9e:cb:98:ae:b1:
44:ae:1d:20:44:ca:32:39:5b:59:ab:f1:e8:cb:8a:
5e:6e:fb:e5:7f:4c:ac:23:e0:47:00:72:09:e3:04:
0a:34:45:b1:44:d2:1b:49:5e:00:24:ec:84:17:9f:
44:93:89:01:e7:b2:27:1c:00:55:ef:14:a7:4a:99:
f4:7c:dd:da:43:6e:74:7c:bf:7f:29:9b:0c:fa:68:
7f:58:e7:f3:8d:d9:1f:33:be:d1:c8:86:83:b2:8c:
54:79:00:01:ab:5e:8f:63:7c:76:eb:6f:0e:7a:50:
16:b5:b9:b6:0d:99:f4:7e:71:b5:30:74:73:c7:c5:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E0:95:7D:8C:79:41:7E:B2:52:B4:53:76:EF:C7:99:77:BE:F4:7B
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c3:98:fa:e5:08:a0:b7:68:7d:02:43:59:e2:df:c2:73:5b:
a5:37:b7:bc:41:41:09:79:59:02:77:17:ca:0a:26:d8:68:4c:
85:42:05:93:5d:28:00:a0:62:cc:c3:fb:23:49:3b:58:87:9a:
2c:f3:65:b4:39:1e:f9:17:ed:5d:2c:1e:ca:ab:b1:93:24:c0:
5f:7e:d8:99:01:2e:29:65:5d:ad:b7:ec:7a:7b:1f:24:8f:83:
17:e2:fd:ef:40:37:27:ce:50:1b:51:04:1d:55:c1:ec:b1:e2:
32:a4:e9:4a:3f:1f:26:76:a7:50:15:4f:3e:35:f8:ec:35:92:
dc:2a:7e:4a:77:10:be:0a:48:9d:e4:fd:46:e1:6e:b2:5e:13:
77:8d:b3:b2:7c:d4:36:94:49:20:79:d3:03:91:66:a8:80:4e:
9b:f9:c4:63:49:58:d5:8f:e6:eb:cc:dd:42:bd:6a:ac:af:de:
6d:da:38:f9:b8:89:23:31:56:ec:29:8e:a6:b3:bb:e0:98:d0:
41:92:ef:79:d2:64:b5:10:34:d0:a5:fb:6b:ec:c6:71:84:29:
6a:9a:25:35:73:61:2c:f3:bb:0b:0e:3b:92:f1:38:9d:62:bb:
0f:50:3d:a8:31:ac:38:17:4e:cb:9b:36:0d:c7:28:06:7e:cf:
14:78:49:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SnIxTGAhnO5fIwDprA8IdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMmY1YTZjMGI5NTY0N2YwNzAzNTBlNjUyNGUxMjIwZmJh
NDdmYTMwHhcNMjYwNjI5MDkwMTE3WhcNMjYwNjMwMDkwMTE3WjAzMTEwLwYDVQQD
EyhhM2UwOTU3ZDhjNzk0MTdlYjI1MmI0NTM3NmVmYzc5OTc3YmVmNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy4lqB40KQBvsHe//tsYyJZ1fEKI
gTgse+qSR262u6+UZSVCtPB1crOOV//0f94KCPol8fr7Fs0YyH8KKXJJWkVODISJ
qMB+e58RYnKh5ihajvDVBj+QH3U/MmfoaCdUHgeqjauKPa9D2L9Tq0VEQFGSdVx7
CXXM3ycDyktA/3KJnsuYrrFErh0gRMoyOVtZq/Hoy4pebvvlf0ysI+BHAHIJ4wQK
NEWxRNIbSV4AJOyEF59Ek4kB57InHABV7xSnSpn0fN3aQ250fL9/KZsM+mh/WOfz
jdkfM77RyIaDsoxUeQABq16PY3x2628OelAWtbm2DZn0fnG1MHRzx8VggwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPglX2MeUF+slK0U3bvx5l3vvR7MB8GA1UdIwQY
MBaAFIIvWmwLlWR/BwNQ5lJOEiD7pH+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMt
NWQwZTA5YTAyMDRmLzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMtNWQwZTA5YTAyMDRm
LzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMOY+uUI
oLdofQJDWeLfwnNbpTe3vEFBCXlZAncXygom2GhMhUIFk10oAKBizMP7I0k7WIea
LPNltDke+RftXSweyquxkyTAX37YmQEuKWVdrbfsensfJI+DF+L970A3J85QG1EE
HVXB7LHiMqTpSj8fJnanUBVPPjX47DWS3Cp+SncQvgpIneT9RuFusl4Td42zsnzU
NpRJIHnTA5FmqIBOm/nEY0lY1Y/m68zdQr1qrK/ebdo4+biJIzFW7CmOprO74JjQ
QZLvedJktRA00KX7a+zGcYQpapolNXNhLPO7Cw47kvE4nWK7D1A9qDGsOBdOy5s2
DccoBn7PFHhJGg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:21 2026 by rpki-client