Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: PhOm5BH+bCLvP/JMQuxLwHQ2mEqcsJidtIRsuTURvHM=
Subject key identifier: 10:9E:48:B8:4A:30:28:34:F1:A2:8C:91:94:52:28:22:5A:51:AC:A7
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 01A08D1F4ED2D49E1BEA86BE692A5227355E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 0911
Signing time: Thu 10 Sep 2026 21:00:34 +0000
Manifest this update: Thu 10 Sep 2026 21:00:34 +0000
Manifest next update: Fri 11 Sep 2026 21:00:34 +0000
Files and hashes: 1: QcGVhryX4x7bfWIgC0U3JlcZMH0.roa (hash: Bat9oEb0UFv1zJKscTa1DuwM+XuSb3SLfJDIXRZHQRs=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: XxiuV6nfGvkNmQoexNJKc6NyAmfGrEp+Uie5fghcvLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:4e:d2:d4:9e:1b:ea:86:be:69:2a:52:27:35:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Sep 10 21:00:34 2026 GMT
Not After : Sep 11 21:00:34 2026 GMT
Subject: CN=109e48b84a302834f1a28c91945228225a51aca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6a:64:7e:b7:07:25:d8:f0:d0:28:70:4d:b4:
f0:f3:57:34:9f:5d:1b:39:c3:8a:c4:82:8c:09:31:
95:06:62:43:57:4c:c7:ae:6f:95:32:58:bc:cd:1c:
be:0b:fa:4b:2b:81:05:32:30:bf:ed:9b:60:ef:62:
6d:af:f2:ee:42:2f:49:51:ba:d7:62:02:31:a9:e2:
23:82:f7:45:8f:b7:e0:58:49:15:12:57:09:b3:c8:
2e:40:d1:84:93:d1:97:cb:05:85:97:9e:3d:c0:e4:
70:53:63:aa:0b:21:b4:83:d7:22:ad:80:dd:eb:d1:
ef:65:d8:f7:23:a8:7d:a3:c2:1a:e8:8c:eb:35:5f:
29:9c:61:1e:17:b1:60:50:58:5a:36:97:f3:77:d8:
9b:8f:47:87:60:0f:91:83:5c:a6:3d:40:0d:be:e5:
f1:32:43:8d:8a:3b:cb:8d:e6:bd:42:7f:4d:2a:b9:
dd:44:84:95:63:5a:ea:97:31:f3:b0:07:e6:e4:c8:
cf:dd:a3:bd:82:9c:42:91:87:68:80:15:10:08:b6:
6a:10:8d:53:2c:11:5b:56:da:9e:70:75:ef:7d:8e:
67:a8:81:5a:aa:3d:97:da:0a:f1:40:90:6f:69:a4:
83:95:47:e8:fc:a0:32:cb:5c:83:36:9e:b2:16:49:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9E:48:B8:4A:30:28:34:F1:A2:8C:91:94:52:28:22:5A:51:AC:A7
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:38:b0:b9:17:f4:2a:ee:93:8f:c8:15:83:a9:a7:22:3c:bc:
ec:4d:b6:da:02:02:b9:cd:af:f8:76:05:59:73:c1:2d:75:c4:
de:4e:1e:cc:bb:1a:4a:14:c1:d7:60:fa:7c:45:3f:9b:7f:e9:
d8:b4:8a:4a:8e:6c:46:a4:44:98:c4:9b:46:b2:b9:95:ae:17:
8f:b2:88:58:18:42:3b:98:72:fc:94:1c:61:5d:3b:61:10:bf:
fa:e0:07:e2:6a:d2:1d:0a:42:7f:e1:67:26:25:03:3f:17:77:
d2:e9:27:41:de:22:14:7e:25:c2:20:dd:71:61:9b:d3:84:66:
de:a6:33:5e:c8:26:c2:04:6a:78:67:0e:b7:0b:e3:9c:f6:e0:
d7:65:0c:15:c7:9e:96:18:ae:a1:1c:1a:a6:22:00:3e:47:3a:
2f:4e:66:92:06:ad:fe:be:8a:d0:60:b3:c5:1c:6a:53:40:1c:
1c:c3:bf:e1:e8:cc:87:14:77:fe:d6:4f:ff:27:cf:78:3d:a6:
be:42:76:7a:8e:fc:cc:1c:54:8e:de:83:1b:9c:2c:9c:d9:e8:
fd:9c:9b:52:96:dd:0e:5f:28:80:8d:96:b2:20:a7:43:6a:cb:
11:63:fb:3e:db:26:e7:95:25:1d:4d:3a:5a:10:bb:f6:6b:31:
69:15:f2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:09:34 2026 by rpki-client