Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
File: gh8Shdd1qfWJJD6shErcWridl8k.mft (raw, json)
Hash identifier: lIE9KViRmWJzK8bApGcMUt3Utp1KQRFwXvldlBewAF0=
Subject key identifier: 83:AB:0A:64:57:A8:3F:E9:AB:12:35:9E:00:C4:74:6F:72:AE:86:91
Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
Certificate issuer: /CN=821f1285d775a9f589243eac844adc5ab89d97c9
Certificate serial: 01A0E10715E39145B301948C39616B2BCEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
Manifest number: 0F19
Signing time: Sun 27 Sep 2026 04:02:12 +0000
Manifest this update: Sun 27 Sep 2026 04:02:12 +0000
Manifest next update: Mon 28 Sep 2026 04:02:12 +0000
Files and hashes: 1: Ken1-UyKUV7K-ivTPRx21HrB1go.roa (hash: SzlYiDowE9Ts27wto98BsM6+plGlLtF6xf2nTMUOAKI=)
2: dGmTMuCLcokZ_dpzsnFglotPhbE.roa (hash: xS9B/n1G06zo3aHFhFfNBhI/mXvOeeGrRH7j7PtD+Q0=)
3: gh8Shdd1qfWJJD6shErcWridl8k.crl (hash: 0Zk40lcdTvUwExwIESLfkiGIUkxzOzZN8Axp/ixIDgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:15:e3:91:45:b3:01:94:8c:39:61:6b:2b:ce:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9
Validity
Not Before: Sep 27 04:02:12 2026 GMT
Not After : Sep 28 04:02:12 2026 GMT
Subject: CN=83ab0a6457a83fe9ab12359e00c4746f72ae8691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:7c:98:04:02:c9:0f:a9:26:a3:94:1a:e7:
a2:13:fa:53:4d:9b:0e:34:40:13:7f:13:9e:1d:e0:
46:ed:45:a8:f5:9b:34:16:eb:fb:63:35:30:50:d9:
8e:14:2f:dd:27:3f:25:2d:00:d1:04:24:2f:56:14:
c2:9d:f3:5e:98:ea:b7:41:94:79:f5:9a:d9:66:9d:
72:b3:06:75:35:6b:45:05:06:0a:30:54:da:15:46:
e1:b4:89:4e:4a:ac:dd:4a:c0:47:0a:b5:84:f7:32:
2a:bb:17:ce:07:f2:0c:44:d0:af:8a:44:a8:90:7d:
fa:bf:6a:b6:dc:e6:46:0a:66:57:3e:7a:cf:8c:aa:
82:54:01:8c:cd:55:ab:8a:d6:20:a7:0b:d8:7b:11:
df:ff:cc:6a:6b:9d:ed:e5:90:e1:bf:47:f2:29:a6:
45:65:8e:6d:f2:10:43:fa:94:87:38:32:7d:20:1a:
6d:c8:9d:42:ed:f9:00:1f:76:53:33:21:f5:b4:01:
ee:a7:a0:85:da:3e:54:de:ba:09:f9:58:2f:80:90:
c6:0d:f6:f8:ba:39:a8:ea:fe:4d:5a:64:36:dd:d3:
9b:f2:f2:12:53:6a:29:74:fb:dc:ad:e7:94:8a:83:
e8:ec:1c:a9:55:80:4f:f7:35:4d:46:cd:b5:f2:24:
e5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AB:0A:64:57:A8:3F:E9:AB:12:35:9E:00:C4:74:6F:72:AE:86:91
X509v3 Authority Key Identifier:
keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:01:a8:17:4e:23:4a:71:74:92:d4:43:f1:fc:d2:e4:9e:05:
ba:38:3b:11:5f:f9:c1:17:fd:be:00:a0:c1:3b:02:e8:a3:18:
a5:f4:e7:2e:e1:65:f5:fe:1f:3b:03:74:2d:8d:df:d8:3b:0d:
ad:04:58:84:5f:f0:41:7e:3a:f2:c1:ea:0b:9c:97:f1:b2:bf:
06:b4:00:ff:45:15:71:b2:78:89:9b:f2:b7:1a:8b:66:29:ff:
25:89:c5:65:3b:30:b6:87:3c:dc:fd:1f:c1:e1:48:9f:d8:df:
4f:b8:1a:47:ea:80:2b:9e:54:02:ae:c2:51:7f:52:3a:26:00:
4c:7f:82:6d:0f:ea:b1:45:e2:5c:c4:30:30:84:da:a5:c6:83:
d5:71:72:2c:9f:21:a7:6f:91:25:2a:37:e5:e7:2d:69:f3:39:
f6:a9:24:88:b9:8c:05:93:f8:44:58:99:f5:97:e3:39:0c:86:
7f:79:19:b8:5a:da:f1:94:89:96:2a:19:ee:56:e4:c4:45:e3:
c3:ee:2f:3c:24:43:9f:12:5c:22:01:6c:e5:53:df:aa:2f:49:
64:89:f1:72:ef:a4:7c:74:fc:da:25:f4:d3:70:44:45:77:3e:
31:35:43:f8:a2:5e:15:e3:c1:e2:7a:5b:dd:32:98:fa:41:9a:
90:89:31:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:51:42 2026 by rpki-client