Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: CUIZh1wlYrgM1aiLOGPALOtfA4Si64+XsicfMltbwU0=
Subject key identifier: EB:80:19:EA:FB:96:CC:15:A8:97:DD:72:29:3B:C3:BA:1D:6A:FC:2F
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 01A17470364D545D931359D2C4E9BFC86B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 1AC5
Signing time: Sun 25 Oct 2026 19:01:12 +0000
Manifest this update: Sun 25 Oct 2026 19:01:12 +0000
Manifest next update: Mon 26 Oct 2026 19:01:12 +0000
Files and hashes: 1: K4rNlv6gYUKRgIqav4ptqCTSNGg.roa (hash: peGnClYWPqnMOOfi13oSusAgZ5+U+k8ztyI3Zgy/aPo=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: plr4+YXB8JbRubWaqe9fKiVpIAdmwN9feg3+mamm0kE=)
3: zposQW8-Ml33uc3ENu1a83hxjEI.roa (hash: aFqmx16M5gCNIMqJZ5eqfmDRHZVtOgPSXQjK2JfuQ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:70:36:4d:54:5d:93:13:59:d2:c4:e9:bf:c8:6b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Oct 25 19:01:12 2026 GMT
Not After : Oct 26 19:01:12 2026 GMT
Subject: CN=eb8019eafb96cc15a897dd72293bc3ba1d6afc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:e7:c1:91:30:42:7d:a6:b0:e1:ff:e5:21:
08:91:8a:17:e2:8b:b8:d4:49:a7:27:1c:74:c2:bb:
40:a6:90:e7:30:2a:08:d4:f0:a0:2a:2f:92:c6:76:
44:4b:5d:28:90:75:45:0b:17:03:4c:af:bc:39:a8:
6a:ce:dd:a7:c8:e1:49:b1:45:35:71:cd:b2:f9:8f:
43:a8:1f:42:1f:b9:de:4d:bf:8c:28:4c:06:6f:42:
37:58:ca:ea:0d:7e:88:2e:77:05:d1:da:ad:b1:55:
14:17:91:5a:59:ae:31:e4:e4:37:a4:9d:b9:a6:95:
78:36:b5:56:d5:bb:45:53:41:2c:46:3c:c2:ea:13:
b9:1d:a1:b9:00:2a:21:d1:2a:af:5a:12:e2:9f:fd:
b2:ea:17:c1:a9:82:b4:04:e3:72:21:dd:50:dd:fc:
a8:07:d4:a5:77:69:8c:82:41:50:5d:9c:d8:75:06:
8c:6d:4c:2d:0e:11:a5:1b:a4:c5:af:74:f9:e1:c3:
83:cb:1d:8d:71:a1:cc:9a:ae:b9:fd:b2:43:f0:ac:
9a:29:f0:57:8c:5c:99:40:6d:4d:0a:b8:5f:c2:d2:
6c:8c:fb:40:2f:21:e6:43:79:c0:30:b0:3d:a7:30:
3d:1d:5c:69:85:22:3e:4c:dc:09:e2:ac:0d:b4:80:
8d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:80:19:EA:FB:96:CC:15:A8:97:DD:72:29:3B:C3:BA:1D:6A:FC:2F
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9b:08:f1:bf:af:3b:e7:6e:6d:8b:71:d3:d3:26:36:76:f7:
67:10:3c:33:c4:fe:4f:f7:82:ed:44:50:65:7c:01:7c:91:00:
b0:27:da:a9:66:2a:d3:71:1f:e7:38:b4:43:95:09:f0:51:c4:
c8:5c:5c:16:76:07:44:c0:0b:4a:83:cd:5b:7c:29:9c:08:65:
af:1b:73:5c:08:e4:58:c4:d7:c9:8c:7d:d3:74:6d:41:26:e0:
02:62:4c:0d:16:d1:47:3a:11:e4:40:5b:9d:00:99:90:c1:8b:
78:9e:b2:7b:23:b2:77:7a:7d:32:d8:8e:a4:a8:b1:1f:23:e0:
05:33:d4:ba:8d:bd:d9:2c:ad:59:e2:ea:b7:07:1d:25:67:3b:
11:de:56:70:fa:d3:0f:18:f7:e0:58:d3:df:16:76:d4:3d:61:
21:9b:99:ea:59:b6:76:66:74:69:e3:72:f2:19:ce:63:e3:8c:
75:42:e5:2b:a8:1e:ae:d5:ba:db:0c:4c:a0:89:d8:a3:04:e4:
66:9f:3b:fc:b7:d2:d8:8f:be:75:fa:33:ae:0d:64:2b:a1:45:
0a:fc:7b:c5:cf:15:a0:2b:22:b3:7f:74:a3:c4:71:c8:4e:bb:
cc:8a:7a:c8:6a:6f:0c:9c:f2:c4:9d:71:80:e2:f5:3f:91:54:
0c:51:47:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF0cDZNVF2TE1nSxOm/yGt1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmQwMDgyOTUzNmQ0Nzc0NWY0N2RhOWQxYThhNzJmNmRk
NDYyZDQwHhcNMjYxMDI1MTkwMTEyWhcNMjYxMDI2MTkwMTEyWjAzMTEwLwYDVQQD
EyhlYjgwMTllYWZiOTZjYzE1YTg5N2RkNzIyOTNiYzNiYTFkNmFmYzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk3nwZEwQn2msOH/5SEIkYoX4ou4
1EmnJxx0wrtAppDnMCoI1PCgKi+SxnZES10okHVFCxcDTK+8Oahqzt2nyOFJsUU1
cc2y+Y9DqB9CH7neTb+MKEwGb0I3WMrqDX6ILncF0dqtsVUUF5FaWa4x5OQ3pJ25
ppV4NrVW1btFU0EsRjzC6hO5HaG5ACoh0SqvWhLin/2y6hfBqYK0BONyId1Q3fyo
B9Sld2mMgkFQXZzYdQaMbUwtDhGlG6TFr3T54cODyx2NcaHMmq65/bJD8KyaKfBX
jFyZQG1NCrhfwtJsjPtALyHmQ3nAMLA9pzA9HVxphSI+TNwJ4qwNtICNVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuAGer7lswVqJfdcik7w7odavwvMB8GA1UdIwQY
MBaAFIC9AIKVNtR3RfR9qdGopy9t1GLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMt
MDliOTkyMGZlMDBmLzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMtMDliOTkyMGZlMDBm
LzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5sI8b+v
O+dubYtx09MmNnb3ZxA8M8T+T/eC7URQZXwBfJEAsCfaqWYq03Ef5zi0Q5UJ8FHE
yFxcFnYHRMALSoPNW3wpnAhlrxtzXAjkWMTXyYx903RtQSbgAmJMDRbRRzoR5EBb
nQCZkMGLeJ6yeyOyd3p9MtiOpKixHyPgBTPUuo292SytWeLqtwcdJWc7Ed5WcPrT
Dxj34FjT3xZ21D1hIZuZ6lm2dmZ0aeNy8hnOY+OMdULlK6gertW62wxMoInYowTk
Zp87/LfS2I++dfozrg1kK6FFCvx7xc8VoCsis390o8RxyE67zIp6yGpvDJzyxJ1x
gOL1P5FUDFFHMA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 06:22:19 2026 by rpki-client