Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.mft
File: gmQMpNTLIsMeI1_vCESqfnHQxls.mft (raw, json)
Hash identifier: 3gIUm+gHSEeUvruD3YCW02T3obJ7r1EqJ6x/Sz0SHWw=
Subject key identifier: 28:9D:DB:43:45:A9:DE:51:A4:A5:CE:60:FB:3A:ED:BC:44:7D:E5:9F
Authority key identifier: 82:64:0C:A4:D4:CB:22:C3:1E:23:5F:EF:08:44:AA:7E:71:D0:C6:5B
Certificate issuer: /CN=82640ca4d4cb22c31e235fef0844aa7e71d0c65b
Certificate serial: 01A0CA477A9794A1D5F17FB8806BC2E0F609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmQMpNTLIsMeI1_vCESqfnHQxls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:17 +0000
Manifest this update: Tue 22 Sep 2026 18:01:17 +0000
Manifest next update: Wed 23 Sep 2026 18:01:17 +0000
Files and hashes: 1: MEy4hPf1PScygUdvHtNXZU1Xk7c.asa (hash: m0Ub60UIvjMWUZombv8JTaQ47c/Z3i+DBkap5riV34g=)
2: gmQMpNTLIsMeI1_vCESqfnHQxls.crl (hash: 4o6IcSckOZM6PS+5eT2fdgT4MjpZ83nXAtgCRFeUGPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmQMpNTLIsMeI1_vCESqfnHQxls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:7a:97:94:a1:d5:f1:7f:b8:80:6b:c2:e0:f6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82640ca4d4cb22c31e235fef0844aa7e71d0c65b
Validity
Not Before: Sep 22 18:01:17 2026 GMT
Not After : Sep 23 18:01:17 2026 GMT
Subject: CN=289ddb4345a9de51a4a5ce60fb3aedbc447de59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:18:e8:c7:01:e3:9a:7b:62:eb:67:90:97:
2c:08:91:7f:f6:18:2c:60:df:f4:75:90:17:53:72:
79:23:48:18:1f:3a:28:8d:84:1a:6e:e6:73:72:77:
f7:95:ec:11:4d:54:ae:68:c8:b9:fc:90:04:f1:c2:
1e:bf:a9:36:09:4b:f8:c7:c4:fd:cc:86:52:6d:87:
c4:37:48:9d:8b:a6:35:77:c7:9e:74:a7:4c:18:e9:
9f:d9:54:e1:6f:74:b6:51:8b:a9:cf:57:6f:9d:29:
53:03:be:8e:13:e2:30:de:7f:1c:a0:f8:e0:a1:24:
17:3b:cd:10:c4:7d:a9:ac:c3:64:b4:75:f2:1a:a4:
39:04:6f:69:7e:14:fe:f8:da:4b:37:6d:29:70:c1:
48:2a:77:70:78:04:9b:6f:4d:1f:31:4b:92:95:04:
49:6a:a3:fe:ab:01:3c:84:7e:2e:78:80:51:3b:9f:
af:5c:95:3b:03:5c:69:d4:3a:30:f0:1d:44:83:09:
aa:ed:d3:ba:67:6f:1f:5c:6f:d2:bc:bf:d8:06:83:
83:af:68:d2:81:c5:0b:07:8d:d2:a4:ed:4c:f5:bd:
dd:61:b0:91:ee:c0:c1:3d:0b:6a:99:34:e4:37:ae:
4f:90:8e:d4:53:c5:83:cc:6b:52:b8:78:aa:d8:f8:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9D:DB:43:45:A9:DE:51:A4:A5:CE:60:FB:3A:ED:BC:44:7D:E5:9F
X509v3 Authority Key Identifier:
keyid:82:64:0C:A4:D4:CB:22:C3:1E:23:5F:EF:08:44:AA:7E:71:D0:C6:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmQMpNTLIsMeI1_vCESqfnHQxls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b5e9c6-ee54-492a-ae78-d453fbb8bfeb/1/gmQMpNTLIsMeI1_vCESqfnHQxls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5f:96:ab:77:4d:a4:75:0a:8a:94:ec:61:30:fc:82:a8:7a:
ec:19:4b:8a:57:ed:40:0d:c8:20:9c:7d:9b:5f:38:1e:79:55:
64:32:25:d0:30:45:c7:e8:22:6e:14:c6:8f:f4:39:de:9f:eb:
2c:d9:26:d8:5c:d9:5f:fa:2d:b0:6b:bd:74:b1:97:d0:c0:0f:
85:c5:08:ff:45:25:79:00:78:b8:cc:94:13:1c:7e:7c:d8:23:
f6:0b:01:17:dc:7f:1b:63:e3:99:c8:21:04:1f:37:75:ac:4e:
6a:23:a7:32:a8:6d:0e:b7:a6:d9:04:50:8a:d7:0a:e0:6c:3e:
79:f2:b4:26:97:cd:97:fb:25:4c:6a:5d:2b:6c:49:bc:f8:76:
f9:5c:1b:ba:00:f0:d2:fe:ac:0a:44:78:fc:16:b1:fc:17:d4:
56:df:24:ff:08:cc:da:28:e3:44:1c:6c:fb:a5:ed:d9:e7:4a:
b1:52:44:81:9d:74:65:c3:92:45:ff:71:30:f7:63:aa:fb:b4:
5e:76:94:8e:2a:87:b4:26:2c:e9:aa:65:39:91:c5:78:aa:68:
26:cb:4c:83:db:82:26:9d:70:c2:07:37:a0:a0:98:c5:74:bf:
0a:fa:4f:54:13:08:7b:db:49:21:56:be:8e:ed:98:e2:30:3b:
7b:4e:ac:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKR3qXlKHV8X+4gGvC4PYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjQwY2E0ZDRjYjIyYzMxZTIzNWZlZjA4NDRhYTdlNzFk
MGM2NWIwHhcNMjYwOTIyMTgwMTE3WhcNMjYwOTIzMTgwMTE3WjAzMTEwLwYDVQQD
EygyODlkZGI0MzQ1YTlkZTUxYTRhNWNlNjBmYjNhZWRiYzQ0N2RlNTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKcY6McB45p7YutnkJcsCJF/9hgs
YN/0dZAXU3J5I0gYHzoojYQabuZzcnf3lewRTVSuaMi5/JAE8cIev6k2CUv4x8T9
zIZSbYfEN0idi6Y1d8eedKdMGOmf2VThb3S2UYupz1dvnSlTA76OE+Iw3n8coPjg
oSQXO80QxH2prMNktHXyGqQ5BG9pfhT++NpLN20pcMFIKndweASbb00fMUuSlQRJ
aqP+qwE8hH4ueIBRO5+vXJU7A1xp1Dow8B1Egwmq7dO6Z28fXG/SvL/YBoODr2jS
gcULB43SpO1M9b3dYbCR7sDBPQtqmTTkN65PkI7UU8WDzGtSuHiq2PiVtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCid20NFqd5RpKXOYPs67bxEfeWfMB8GA1UdIwQY
MBaAFIJkDKTUyyLDHiNf7whEqn5x0MZbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21RTXBOVExJc01lSTFfdkNFU3FmbkhReGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iNWU5YzYtZWU1NC00OTJhLWFlNzgt
ZDQ1M2ZiYjhiZmViLzEvZ21RTXBOVExJc01lSTFfdkNFU3FmbkhReGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9iNWU5YzYtZWU1NC00OTJhLWFlNzgtZDQ1M2ZiYjhiZmVi
LzEvZ21RTXBOVExJc01lSTFfdkNFU3FmbkhReGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1+Wq3dN
pHUKipTsYTD8gqh67BlLilftQA3IIJx9m184HnlVZDIl0DBFx+gibhTGj/Q53p/r
LNkm2FzZX/otsGu9dLGX0MAPhcUI/0UleQB4uMyUExx+fNgj9gsBF9x/G2Pjmcgh
BB83daxOaiOnMqhtDrem2QRQitcK4Gw+efK0JpfNl/slTGpdK2xJvPh2+VwbugDw
0v6sCkR4/Bax/BfUVt8k/wjM2ijjRBxs+6Xt2edKsVJEgZ10ZcOSRf9xMPdjqvu0
XnaUjiqHtCYs6aplOZHFeKpoJstMg9uCJp1wwgc3oKCYxXS/CvpPVBMIe9tJIVa+
ju2Y4jA7e06sJw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:29:22 2026 by rpki-client