Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: hf4hUegaj+GKx1ueFSBlboGxMegBNOpNMrLrYKegXAM=
Subject key identifier: 15:96:BD:E3:23:67:F2:28:77:7F:5D:E4:AC:FC:42:BB:2F:47:5C:B2
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 019FA3730DAB0C479EB5437B20C18289D052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 0898
Signing time: Mon 27 Jul 2026 12:00:54 +0000
Manifest this update: Mon 27 Jul 2026 12:00:54 +0000
Manifest next update: Tue 28 Jul 2026 12:00:54 +0000
Files and hashes: 1: QcGVhryX4x7bfWIgC0U3JlcZMH0.roa (hash: Bat9oEb0UFv1zJKscTa1DuwM+XuSb3SLfJDIXRZHQRs=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: KP0dN2rXynTo4pK6UyWolhom/n5HkHtRS9Whpcv8iBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:0d:ab:0c:47:9e:b5:43:7b:20:c1:82:89:d0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Jul 27 12:00:54 2026 GMT
Not After : Jul 28 12:00:54 2026 GMT
Subject: CN=1596bde32367f228777f5de4acfc42bb2f475cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:69:5e:43:8c:ad:89:9e:4f:27:1c:56:33:
0f:5b:a6:08:06:6f:2b:5f:e6:49:1c:18:e4:92:9a:
1f:d8:60:0f:99:6d:f7:ab:86:8e:a7:43:8e:f1:29:
f1:c8:a7:9e:2a:b6:1f:b7:21:b9:8c:d6:26:c5:8f:
8f:55:e3:e7:1c:db:1d:a5:02:69:08:05:5b:5f:47:
15:f0:2f:b7:a8:bb:43:de:ad:39:76:69:93:78:db:
47:01:80:29:95:57:2a:fc:fc:4e:9f:bf:35:0d:92:
7f:26:9b:c1:42:67:ac:e5:3a:a9:71:e9:b8:33:d0:
80:b0:e9:8c:dd:ba:4a:29:d7:3f:71:88:93:a5:f3:
4e:7a:6f:ae:39:28:b2:74:f8:4e:e1:68:03:d6:a4:
00:aa:27:9b:29:5d:fc:0b:29:71:bb:44:de:24:3a:
b6:ee:1a:45:26:1d:20:6d:da:33:7a:17:ad:43:38:
7c:f1:dc:be:1f:c5:a1:0d:f0:31:7b:ee:db:e3:17:
1b:94:e6:df:4d:62:28:cc:5b:77:77:e7:6e:6b:c5:
09:95:0f:6b:22:ef:c4:55:58:5a:de:3d:2c:96:3a:
70:9b:93:e1:97:44:f7:45:db:eb:6a:42:24:3d:5f:
8f:62:cc:0b:f9:bb:c2:b9:de:c9:89:05:46:3c:83:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:96:BD:E3:23:67:F2:28:77:7F:5D:E4:AC:FC:42:BB:2F:47:5C:B2
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b0:0b:9f:5b:f3:9c:c9:fb:e6:a8:6e:45:72:80:58:73:7e:
46:e5:da:b1:aa:b4:d9:a2:99:45:e7:13:fd:cd:1f:d7:a8:cd:
e9:37:7d:bd:a9:74:a1:1b:ee:1a:44:05:06:f9:9c:24:6f:ed:
11:c4:0f:ea:ef:de:de:72:e0:00:be:17:7c:57:6d:f9:f9:c7:
3c:09:03:a2:cb:98:eb:f7:0d:a5:a6:a7:fd:5c:d0:26:34:f8:
72:35:c9:b5:d0:35:25:3c:35:f7:7b:a3:db:3e:f4:02:cf:82:
85:f0:c1:77:dd:b1:36:f5:25:de:62:b1:d6:04:9f:df:2f:a0:
67:b0:87:86:67:23:26:4d:77:d6:1d:af:80:fa:cf:ed:7a:19:
e9:f7:27:18:fb:fc:48:92:2c:90:47:93:ec:c6:32:f2:e3:eb:
a8:19:8d:55:75:0f:75:e2:c1:9a:99:02:e9:e8:00:1f:c5:6e:
b5:ac:b4:d8:19:43:0c:fe:ab:6d:21:c2:7a:50:4f:83:5e:00:
07:fd:ba:c0:08:64:29:b9:57:b6:2f:c1:86:71:c7:72:ad:76:
26:31:23:c1:99:b1:8d:9e:03:c3:29:92:45:f7:f3:d9:01:5e:
8d:36:73:ce:b4:f7:cd:42:6b:c9:28:c3:ab:d9:08:41:9d:74:
30:0c:fc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:34:49 2026 by rpki-client