Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: YE18Dw/uV5P+0cvx2QNDafIS3x03crPtF2UqM8ghMe4=
Subject key identifier: 09:C6:6A:FF:CC:17:54:8E:41:47:63:D7:94:02:7B:7A:52:82:D9:4C
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 01A0CE23E983A0B084494C1C79EC5C76B014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0E83
Signing time: Wed 23 Sep 2026 12:00:55 +0000
Manifest this update: Wed 23 Sep 2026 12:00:55 +0000
Manifest next update: Thu 24 Sep 2026 12:00:55 +0000
Files and hashes: 1: TtXo5-QRvXwKIgknKnZ4_4t2vL8.roa (hash: mXHeMxujxsacK8/QlflktbO+DxAXX0UCko2MtIwDM0I=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: hbnWb7ls8+EkuVNUuL2cvz8QkTuhXB6vqi4xoM9lrm8=)
3: pbTK5peLIyvXvbiyDRGHdQgVdNA.asa (hash: Wtfdhvq2K7gS1UXNM4URBttcFhHoJO+q7bKyWG4w/Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:e9:83:a0:b0:84:49:4c:1c:79:ec:5c:76:b0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Sep 23 12:00:55 2026 GMT
Not After : Sep 24 12:00:55 2026 GMT
Subject: CN=09c66affcc17548e414763d794027b7a5282d94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:7f:63:cf:99:06:06:94:29:c8:a0:e2:f5:
c3:30:ef:b1:ca:58:1e:67:99:ee:66:45:ba:ea:ce:
97:07:97:c3:7f:7e:6f:fb:d3:c7:22:d7:6b:93:e4:
28:fd:8c:67:f5:22:19:00:88:29:45:73:5f:63:e7:
c8:29:7c:05:83:41:30:f5:20:2b:be:e7:1b:7a:0c:
cd:e8:41:c7:a8:22:2a:79:58:dc:de:f3:75:bc:39:
e9:e3:dd:02:16:6d:44:0e:c0:91:19:86:6e:cb:4b:
f0:b9:72:46:f6:12:f4:be:7c:f0:1f:b5:f2:3c:34:
98:04:01:70:39:fc:d1:cf:b8:03:b2:af:6d:e9:a2:
6d:23:7e:57:e5:0c:ef:42:be:b7:6e:94:7d:5d:0c:
f5:f7:78:8f:34:4b:0b:32:e9:d7:dd:57:d6:ba:9e:
a6:d0:3b:f6:c8:40:55:ce:79:1e:07:bd:49:d1:55:
20:c2:c7:a8:58:99:e4:a2:82:ea:50:a9:5e:37:03:
86:2f:2f:39:ed:b4:74:6a:c8:86:24:b6:df:02:17:
4a:9b:df:69:f9:d6:1e:d4:24:8a:25:a3:cb:c3:ba:
74:f2:1c:5a:2e:53:7c:15:17:03:53:4b:73:d6:8f:
94:4a:c5:aa:3d:8c:51:a7:64:ef:04:36:15:5d:77:
bc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C6:6A:FF:CC:17:54:8E:41:47:63:D7:94:02:7B:7A:52:82:D9:4C
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7e:ab:3b:44:88:bd:01:98:ac:1a:c9:53:c9:9d:05:9c:46:
83:f6:e4:b5:79:d0:41:6a:13:21:d9:a0:28:3f:8c:48:33:1a:
62:c6:21:35:2e:e9:c8:30:f0:8e:4b:18:b8:8c:27:67:3c:2b:
23:6b:9e:65:a0:ae:9f:80:f7:f5:8b:ca:e7:1d:8a:9b:61:ca:
7d:bf:ef:bd:17:85:21:bd:bf:ad:be:ef:70:75:26:1b:d0:95:
6e:80:62:22:a8:a6:28:cd:0c:df:80:af:9b:7a:3a:55:a7:86:
c2:5e:04:e7:da:b7:b1:bf:14:f5:d2:c5:e1:66:ff:97:39:b8:
7d:90:41:e8:3d:27:39:0e:fd:4c:b5:fc:9a:a8:5c:f3:1a:6c:
e9:81:1a:dd:ee:e8:bf:0e:36:c3:31:69:73:73:f3:a7:30:87:
36:72:4b:b1:56:14:0c:63:29:e4:54:02:08:02:58:33:b0:31:
c4:24:1f:b8:7a:81:ff:71:00:54:8d:74:59:70:ea:19:40:e1:
bb:54:c8:e5:94:fc:49:c2:b8:a6:19:59:f5:a7:69:86:a3:63:
83:b3:5c:6f:1f:21:d7:6c:9e:71:18:37:97:63:46:11:12:49:
e2:cb:12:9a:cd:ce:97:ba:44:60:d7:5e:82:35:6c:2f:67:88:
37:22:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:18:23 2026 by rpki-client