Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier: dCH7juXaALrnkMjfB3fLaG3OYRUJBEI7oglGjanykug=
Subject key identifier: A8:EF:D1:9D:FB:8F:0B:43:2C:10:46:E0:24:02:39:A8:76:00:07:2A
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 019FA14DBACD4890995E569CD568409145F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number: 0B2F
Signing time: Mon 27 Jul 2026 02:00:53 +0000
Manifest this update: Mon 27 Jul 2026 02:00:53 +0000
Manifest next update: Tue 28 Jul 2026 02:00:53 +0000
Files and hashes: 1: HGlsVrHEnVUZTxnltUDYgtbddII.roa (hash: PRTqegkFaXBSmjlIahMPcYyZ0ftS890tO/2pjXR1d6s=)
2: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: Xf5DLofLOKvW0ekRfzJVcjI83c6BhmShotAMkfis73M=)
3: jcRnGzty5tFJLCYMbqQ9KAoJt0M.roa (hash: a1X93SlCywmHujOimn+Po6M7RMMfbT2R8166ZJ7vS9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:ba:cd:48:90:99:5e:56:9c:d5:68:40:91:45:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Jul 27 02:00:53 2026 GMT
Not After : Jul 28 02:00:53 2026 GMT
Subject: CN=a8efd19dfb8f0b432c1046e0240239a87600072a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:12:1e:06:47:02:61:75:0f:90:e9:78:4b:
bc:3e:14:73:63:e9:4b:91:37:f6:fe:fc:a5:de:62:
60:3e:42:c1:d0:f6:45:d7:d9:fd:93:25:20:c6:6a:
cc:dc:2e:ab:d0:65:97:da:59:5a:d8:35:98:70:06:
d9:df:48:e7:13:a0:6d:8a:56:c4:a9:f1:25:7d:15:
bb:78:e5:88:f3:3c:fa:7b:54:10:30:1a:ce:ac:a0:
22:64:24:36:07:06:c0:35:ac:a6:79:db:6c:0a:fa:
cd:22:a4:34:ea:61:f6:dd:d8:b1:ad:bd:18:65:14:
cd:61:2f:38:4e:d5:9a:0b:42:74:34:ec:fa:b2:e8:
ee:61:4a:8c:04:cb:9e:0c:07:f1:7d:05:fb:32:ea:
0f:77:b8:78:47:1d:b2:bd:ac:4a:64:2b:c1:7a:e3:
e5:75:e5:05:3e:6e:cf:95:db:12:f5:e2:24:71:81:
5b:3c:d4:42:97:f6:15:68:70:2d:9d:64:a0:9a:3e:
b3:84:08:80:3e:63:04:52:c4:a7:82:82:7f:85:83:
69:3c:ac:2b:72:0e:6c:7b:ff:27:56:cb:f2:4a:e9:
50:9e:82:02:56:2b:1e:e3:41:dd:21:88:e5:cd:b8:
f0:bc:03:b8:43:f9:20:6c:ec:b4:38:7b:1e:5a:71:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EF:D1:9D:FB:8F:0B:43:2C:10:46:E0:24:02:39:A8:76:00:07:2A
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4f:87:8a:bc:8e:62:78:e1:af:7b:6f:f7:9f:96:10:57:95:
bd:14:d3:34:4c:4e:34:e5:c2:8b:b5:bd:0a:89:f7:f6:37:e3:
96:a6:8d:4a:96:e8:8d:47:fd:45:08:ee:5e:57:f5:01:af:a5:
f6:82:b2:d6:f6:8e:90:cd:0c:fe:95:3d:48:ca:f9:c1:3f:9c:
f0:43:8d:69:d3:b2:84:e9:0d:65:49:89:ab:e7:77:7d:57:de:
47:7b:74:69:65:18:5f:0f:1d:f3:4f:5f:2c:fb:c7:bd:02:a9:
2a:16:01:29:af:a3:67:9e:25:83:4c:51:aa:19:62:62:e1:fa:
7b:5d:7f:75:2e:87:5e:0d:1a:8c:1b:81:06:d0:d0:6b:e7:c9:
15:ee:f5:69:f5:7b:6a:bd:0d:70:1e:f9:75:fc:df:ba:ca:c9:
58:63:2e:3c:bd:7c:8b:5b:00:5f:ae:38:67:f0:4e:2c:f3:3b:
d8:82:26:80:54:12:ae:4a:1b:4d:bf:52:15:08:8b:14:d9:78:
0a:88:ab:be:3f:86:be:93:cd:62:e2:bc:ac:33:ce:8f:ba:ca:
df:3c:0e:6c:30:af:44:48:0b:0e:ed:3f:66:31:68:00:c4:6c:
e2:f0:c8:a2:f3:22:6e:10:d8:20:74:5f:b9:9d:25:80:ab:e8:
08:69:6d:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTbrNSJCZXlac1WhAkUX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmZkOWRmNDU2YWRiZTNiMWU2NjFlZTE1NjI2ODY1ZmUx
Njg4YzgwHhcNMjYwNzI3MDIwMDUzWhcNMjYwNzI4MDIwMDUzWjAzMTEwLwYDVQQD
EyhhOGVmZDE5ZGZiOGYwYjQzMmMxMDQ2ZTAyNDAyMzlhODc2MDAwNzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWcSHgZHAmF1D5DpeEu8PhRzY+lL
kTf2/vyl3mJgPkLB0PZF19n9kyUgxmrM3C6r0GWX2lla2DWYcAbZ30jnE6BtilbE
qfElfRW7eOWI8zz6e1QQMBrOrKAiZCQ2BwbANaymedtsCvrNIqQ06mH23dixrb0Y
ZRTNYS84TtWaC0J0NOz6sujuYUqMBMueDAfxfQX7MuoPd7h4Rx2yvaxKZCvBeuPl
deUFPm7PldsS9eIkcYFbPNRCl/YVaHAtnWSgmj6zhAiAPmMEUsSngoJ/hYNpPKwr
cg5se/8nVsvySulQnoICVise40HdIYjlzbjwvAO4Q/kgbOy0OHseWnEPFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjv0Z37jwtDLBBG4CQCOah2AAcqMB8GA1UdIwQY
MBaAFID/2d9FatvjseZh7hViaGX+FojIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQt
M2NiOGQ4MTdlMDI3LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQtM2NiOGQ4MTdlMDI3
LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0+HiryO
Ynjhr3tv95+WEFeVvRTTNExONOXCi7W9Con39jfjlqaNSpbojUf9RQjuXlf1Aa+l
9oKy1vaOkM0M/pU9SMr5wT+c8EONadOyhOkNZUmJq+d3fVfeR3t0aWUYXw8d809f
LPvHvQKpKhYBKa+jZ54lg0xRqhliYuH6e11/dS6HXg0ajBuBBtDQa+fJFe71afV7
ar0NcB75dfzfusrJWGMuPL18i1sAX644Z/BOLPM72IImgFQSrkobTb9SFQiLFNl4
Coirvj+GvpPNYuK8rDPOj7rK3zwObDCvREgLDu0/ZjFoAMRs4vDIovMibhDYIHRf
uZ0lgKvoCGltAA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:58:58 2026 by rpki-client