
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File: gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier: 2Nk2jTSDDns9jF7cunhy2U/xLOFWLy5Z/MjYNgIEEBg=
Subject key identifier: B5:59:EC:41:4F:E5:43:52:77:AD:20:C2:AD:1D:FA:DD:1E:C4:C1:AF
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 01A133D9AE01DEE323F46B8C61C85BED59BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number: 1AA8
Signing time: Tue 13 Oct 2026 06:01:06 +0000
Manifest this update: Tue 13 Oct 2026 06:01:06 +0000
Manifest next update: Wed 14 Oct 2026 06:01:06 +0000
Files and hashes: 1: 0xjlkzMLHzYUOQzM0T_hixdH3Vc.roa (hash: w3LcFmfi5o+ZqCPWaVzw9mcyP3jYqj4m9ROiWLMpgAY=)
2: 5t0r8fJd2nhioYpGfkI7Yf9otXA.roa (hash: k52ZXWE/9hDIrYh0zpZm2nywZwLzZgmA6wQ6L4w58mM=)
3: 6K4jtyB3n1dTIno4GBJ6uOlA2H4.roa (hash: s//DyxiKkxSxvwwq0U0tirxt/hDGoM9Ut2Dc50YCwqM=)
4: Cryli7tFA3xQzdS5-qcU49qg2iM.roa (hash: ZS2Te+uiOMALn+TaiqIM3OKXyBaszdLcDeqRDP7qYwo=)
5: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: ooTN6YHRV4g9GDBx9cWovE/BAb6awCkBZaK0MWTYBGU=)
6: jsVSRtJd2CDXuEExXGRqUMz5PZw.roa (hash: 3KBrD6dE8HRG9EKrovP9Lr4d9GeL2O9jLSsM034LhGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:d9:ae:01:de:e3:23:f4:6b:8c:61:c8:5b:ed:59:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Oct 13 06:01:06 2026 GMT
Not After : Oct 14 06:01:06 2026 GMT
Subject: CN=b559ec414fe5435277ad20c2ad1dfadd1ec4c1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:b1:6d:20:70:fc:20:20:7d:81:cd:1a:20:
2e:c0:2b:cd:dd:c4:14:44:f2:c3:b1:f1:a9:48:6d:
13:0f:f9:3f:7b:5b:84:9a:d1:87:e4:13:84:ac:49:
e7:9b:46:26:91:88:42:8e:a3:10:f6:fc:e8:41:5f:
ea:38:e8:45:eb:30:25:2d:b1:20:46:4a:c8:e7:4f:
c5:dc:88:54:a1:bd:cf:c7:aa:14:91:48:f0:ac:21:
32:5d:ed:17:de:0c:6d:ae:8e:81:3c:69:18:27:52:
45:81:08:87:e9:7f:a3:0d:19:91:7c:eb:51:33:dd:
3c:e5:ec:43:29:2d:5a:10:86:cf:c3:ee:de:35:a6:
98:69:af:f4:72:41:48:53:59:42:53:5f:41:45:cc:
10:85:8c:68:ea:b8:40:96:19:93:da:ec:40:d7:f3:
52:50:2f:1e:c8:f4:3c:4f:ac:6d:f0:1c:ab:8d:11:
96:df:74:29:c4:f5:5e:79:fa:bc:f8:20:cc:f4:95:
b4:b4:0b:75:c5:1f:0d:a8:30:b6:83:1b:52:b6:88:
37:a0:6b:75:32:42:17:27:f8:8c:f0:9c:c7:c7:49:
db:9c:09:58:cb:77:62:54:cb:76:05:1b:f5:19:99:
43:43:69:b5:da:5a:4b:63:a7:cf:13:a3:5a:cf:d3:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:59:EC:41:4F:E5:43:52:77:AD:20:C2:AD:1D:FA:DD:1E:C4:C1:AF
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e9:53:ef:1a:3b:7a:6a:cf:6a:d4:56:79:de:4d:41:09:3d:
ea:f2:a7:4d:61:88:ae:6c:3b:9f:13:ef:f8:60:8f:63:16:15:
60:2a:b7:2c:14:38:19:cd:42:89:b9:5e:41:8a:81:a7:36:7a:
7f:02:29:5f:4f:93:16:1c:d1:14:70:da:77:2c:c6:22:56:b6:
83:e9:a8:41:27:e8:91:86:12:93:fa:b1:2f:8c:47:03:5d:63:
18:34:03:2d:ae:83:af:51:d1:41:89:c8:5a:d3:dd:76:51:2b:
d0:48:4e:21:db:8d:73:da:0e:bd:82:2f:0e:b8:cf:d9:48:51:
c3:2b:08:e0:2b:3b:8a:3b:25:41:c1:3f:84:e2:1c:8c:f8:81:
1b:84:95:b1:9f:27:a9:26:f5:71:fe:00:0d:e4:ef:a0:da:10:
f2:6d:4a:46:37:e7:10:8b:91:dd:ec:2f:98:62:fc:02:0a:28:
54:bd:7f:11:e2:52:0c:08:74:6a:1d:c4:b5:43:48:22:8c:0b:
bc:a2:9f:cb:13:c8:39:9c:41:cd:18:23:93:88:76:72:bb:a0:
61:0a:86:15:a7:4b:2a:db:0f:df:aa:7e:e0:b3:6e:a8:50:b3:
5f:43:1e:0b:b3:5f:98:6b:fa:83:b1:f6:8d:2e:85:4d:6e:aa:
ca:53:29:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:47:55 2026 by rpki-client