Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: Rl9tU0hGGesj0NqjWRG4v3akNdvhGpsnSJNhzacS79Q=
Subject key identifier: B1:51:D7:1E:7D:85:BC:16:42:F3:03:EE:2D:52:59:FB:65:A1:B2:94
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 01A00F615B263D86E54D36BE7878E9B365D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 05AC
Signing time: Mon 17 Aug 2026 11:00:33 +0000
Manifest this update: Mon 17 Aug 2026 11:00:33 +0000
Manifest next update: Tue 18 Aug 2026 11:00:33 +0000
Files and hashes: 1: AEyZjBDd8JRa3C8Qu8Ed1pPfWTA.roa (hash: t/3GieMGxWoGjj/AjR+XfDv+Hv6o+nbcwMgeFZJBMF0=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: KTjTW8Ay9zVqpilVa4nmuFGpFqcGY4N09Flo42RHXrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:61:5b:26:3d:86:e5:4d:36:be:78:78:e9:b3:65:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Aug 17 11:00:33 2026 GMT
Not After : Aug 18 11:00:33 2026 GMT
Subject: CN=b151d71e7d85bc1642f303ee2d5259fb65a1b294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:1b:04:c2:a3:b7:6b:9f:3d:c0:d3:12:6a:
f4:37:5b:af:43:b9:8b:28:cb:5e:21:be:ef:58:2c:
1a:5e:09:bf:f1:f2:8e:2d:22:12:1f:de:f4:55:70:
05:25:4e:1c:59:1b:fb:e9:2b:47:19:2f:e3:28:35:
a6:b3:ff:5d:f0:da:7e:12:bc:f3:d6:e5:6c:68:c6:
fb:6b:44:85:b7:83:93:83:b4:1d:dc:b8:04:77:81:
2c:58:fd:e3:45:23:61:cd:eb:f6:ef:f0:bd:ee:7e:
1d:5a:29:50:a7:10:fd:7c:8a:04:e5:39:cf:db:d2:
ff:d6:1d:e1:28:47:2b:10:a4:77:b6:41:fc:86:40:
cc:ce:13:92:58:83:f5:b5:ad:e9:28:b9:a2:39:d0:
53:4e:8d:b5:92:ca:bd:4b:84:c7:4b:18:87:fe:8a:
1b:5f:95:7e:0a:85:a0:30:fe:f3:6a:7f:72:84:74:
b8:85:ea:2c:30:c7:38:2c:0e:18:b3:29:db:1c:52:
31:66:b9:bc:38:30:f2:1c:64:25:34:08:70:80:26:
7a:9c:b8:40:c2:ec:c0:ea:79:b0:ca:0a:7d:4d:04:
ee:9c:41:f1:e2:d0:3d:34:72:d7:ab:0c:ae:5b:f6:
6f:a8:2a:42:00:f3:c0:00:ad:a5:14:b9:7c:4b:1d:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:51:D7:1E:7D:85:BC:16:42:F3:03:EE:2D:52:59:FB:65:A1:B2:94
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:28:a4:19:bb:99:d8:1e:f9:99:c1:d9:c1:7d:2f:09:ce:58:
0b:cc:4c:ad:fa:40:34:22:c1:72:ab:d6:01:d9:d5:8b:fd:dc:
2d:e9:6f:ff:a6:a4:6a:07:52:d2:b9:3b:e0:58:ab:c4:ba:be:
c6:67:c9:76:47:52:0b:2b:d4:20:18:e6:0b:b5:3a:fd:74:b6:
b8:8b:e6:23:00:c8:ed:62:ef:8e:0a:44:1c:93:85:e2:f8:7a:
be:f0:54:aa:84:cc:3f:63:51:a4:ea:1b:c6:ac:45:81:a7:b0:
e7:4d:9e:5e:12:cc:d5:39:80:08:fb:27:cb:29:a9:2d:50:10:
73:a5:c6:6d:bb:5d:06:28:a9:44:eb:01:5f:07:d9:7f:96:48:
8f:52:e5:ab:25:d5:89:d3:4c:5d:25:66:f1:39:e6:a3:d8:09:
94:0f:79:f6:33:a2:80:84:fb:c9:a7:d9:1a:4a:75:ea:32:5d:
2a:b3:43:6d:78:62:45:12:e5:94:77:36:72:66:1e:85:b6:00:
00:ee:7d:b9:dc:d1:2a:9b:cf:7d:82:7e:0e:10:47:27:76:f7:
fa:12:f0:d4:7c:90:01:8b:ed:42:65:04:32:4f:5e:7b:79:a3:
f3:19:1d:e2:2d:0c:d9:af:ce:58:c8:e8:10:26:2c:ff:85:eb:
16:c7:c8:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAPYVsmPYblTTa+eHjps2XWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODE0NDBhMzY3YTM0ZDMwNmJjMGY2ODVhZTljZDg2OTUy
ZjdmOTUwHhcNMjYwODE3MTEwMDMzWhcNMjYwODE4MTEwMDMzWjAzMTEwLwYDVQQD
EyhiMTUxZDcxZTdkODViYzE2NDJmMzAzZWUyZDUyNTlmYjY1YTFiMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo4bBMKjt2ufPcDTEmr0N1uvQ7mL
KMteIb7vWCwaXgm/8fKOLSISH970VXAFJU4cWRv76StHGS/jKDWms/9d8Np+Erzz
1uVsaMb7a0SFt4OTg7Qd3LgEd4EsWP3jRSNhzev27/C97n4dWilQpxD9fIoE5TnP
29L/1h3hKEcrEKR3tkH8hkDMzhOSWIP1ta3pKLmiOdBTTo21ksq9S4THSxiH/oob
X5V+CoWgMP7zan9yhHS4heosMMc4LA4YsynbHFIxZrm8ODDyHGQlNAhwgCZ6nLhA
wuzA6nmwygp9TQTunEHx4tA9NHLXqwyuW/ZvqCpCAPPAAK2lFLl8Sx19mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFR1x59hbwWQvMD7i1SWftlobKUMB8GA1UdIwQY
MBaAFIGBRAo2ejTTBrwPaFrpzYaVL3+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQt
NTU2OTFhNTY5NzIwLzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQtNTU2OTFhNTY5NzIw
LzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyikGbuZ
2B75mcHZwX0vCc5YC8xMrfpANCLBcqvWAdnVi/3cLelv/6akagdS0rk74FirxLq+
xmfJdkdSCyvUIBjmC7U6/XS2uIvmIwDI7WLvjgpEHJOF4vh6vvBUqoTMP2NRpOob
xqxFgaew502eXhLM1TmACPsnyympLVAQc6XGbbtdBiipROsBXwfZf5ZIj1LlqyXV
idNMXSVm8Tnmo9gJlA959jOigIT7yafZGkp16jJdKrNDbXhiRRLllHc2cmYehbYA
AO59udzRKpvPfYJ+DhBHJ3b3+hLw1HyQAYvtQmUEMk9ee3mj8xkd4i0M2a/OWMjo
ECYs/4XrFsfIQw==
-----END CERTIFICATE-----
Generated at Mon Aug 17 21:17:11 2026 by rpki-client