Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
File: gh8Shdd1qfWJJD6shErcWridl8k.mft (raw, json)
Hash identifier: EKzLJWczboicoSTAxm6p3ad4B04NIafRu1C+6dM0iCQ=
Subject key identifier: B6:16:71:96:03:03:D5:99:71:46:AD:AD:71:77:09:73:61:17:AB:4F
Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
Certificate issuer: /CN=821f1285d775a9f589243eac844adc5ab89d97c9
Certificate serial: 01A1DE02E835649F03B99AA6A323B7D1955D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
Manifest number: 0F9C
Signing time: Sun 15 Nov 2026 07:01:34 +0000
Manifest this update: Sun 15 Nov 2026 07:01:34 +0000
Manifest next update: Mon 16 Nov 2026 07:01:34 +0000
Files and hashes: 1: Ken1-UyKUV7K-ivTPRx21HrB1go.roa (hash: SzlYiDowE9Ts27wto98BsM6+plGlLtF6xf2nTMUOAKI=)
2: dGmTMuCLcokZ_dpzsnFglotPhbE.roa (hash: xS9B/n1G06zo3aHFhFfNBhI/mXvOeeGrRH7j7PtD+Q0=)
3: gh8Shdd1qfWJJD6shErcWridl8k.crl (hash: vwBRb6hRj867mPeXyQYFq4WLZndqwW1u37dGsYq+QvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:e8:35:64:9f:03:b9:9a:a6:a3:23:b7:d1:95:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9
Validity
Not Before: Nov 15 07:01:34 2026 GMT
Not After : Nov 16 07:01:34 2026 GMT
Subject: CN=b61671960303d5997146adad717709736117ab4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:85:0c:26:bd:74:b6:05:1b:1a:b4:c9:ff:
7a:5f:55:58:8b:ed:4c:0f:24:ae:3b:b9:63:f4:0c:
74:ed:c6:9d:ff:a2:66:48:be:8b:51:72:b3:59:ec:
ba:be:ef:fb:c3:91:dd:69:bf:74:fb:f4:b9:be:3a:
26:8c:d0:a9:20:97:7c:fd:e4:da:1f:b2:4d:77:10:
1e:27:c1:4d:8d:f8:dc:20:53:28:41:c4:f9:30:c3:
37:e4:27:0a:37:cb:c2:4b:9e:65:b4:e3:d1:34:27:
8c:28:07:e8:18:c9:6a:10:f7:fb:2d:39:cd:1b:96:
38:49:df:90:08:b6:bc:27:e4:5d:43:80:a5:05:2d:
50:e7:ab:ec:4a:95:19:55:a2:cc:4d:ab:97:3d:7a:
b2:8a:5b:2a:06:ce:c7:10:73:a2:99:74:f4:52:ed:
9e:42:87:d5:ee:47:95:e7:c4:08:ea:c5:7a:c7:e1:
d4:4e:11:03:b3:8a:69:7a:77:1c:ce:d6:cd:71:7b:
85:6b:f4:68:74:38:63:1a:36:05:af:8e:9c:96:f9:
0c:b3:92:a8:e4:b1:01:9f:18:b5:0e:6b:f6:83:9d:
33:2d:4b:79:1e:01:25:f0:83:d8:c9:17:a7:5f:b7:
ab:75:d7:02:97:83:e6:87:39:f4:53:af:b7:df:2a:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:16:71:96:03:03:D5:99:71:46:AD:AD:71:77:09:73:61:17:AB:4F
X509v3 Authority Key Identifier:
keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b6:c7:9d:c4:90:88:c0:cb:bd:81:ad:69:41:83:2a:9c:4b:
fd:8a:08:be:44:de:34:6b:46:2b:ba:74:8e:35:97:db:ae:f1:
35:4e:c8:8b:6f:4b:16:5d:04:4d:11:bf:3c:b3:a0:ea:b7:ce:
7a:13:bc:21:de:69:d8:9b:cd:2e:29:e4:e7:5d:a1:55:62:01:
32:17:fd:13:22:f9:02:a9:82:ae:5d:54:12:c7:09:06:bc:83:
af:e1:16:6b:77:dd:fa:a0:a9:e8:a4:79:0f:ea:75:7b:fe:9a:
24:3e:f4:b0:f1:00:67:6a:38:d2:2a:6c:58:a8:fd:e0:c8:4f:
a7:95:a6:15:13:b9:ec:88:e5:59:c0:79:a5:18:42:d1:6a:37:
ab:b3:c6:96:05:a7:e8:fb:89:22:01:06:71:b6:c0:61:98:36:
3f:7e:01:c5:53:70:6b:ae:0b:6e:b2:a9:af:64:03:87:57:3d:
d1:c8:5a:7a:0a:e6:28:41:1c:f5:c2:fb:c5:e8:14:e5:e1:33:
5f:9f:8c:67:77:78:40:5b:36:4a:ed:2e:14:5b:e1:8e:24:73:
06:3c:16:6f:3d:fd:40:e6:ee:15:87:3b:26:f8:e8:9a:7f:5b:
b0:04:8d:10:a0:08:b6:2a:ca:9b:54:8c:5a:45:4a:a8:a4:b2:
09:d9:f0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:34:33 2026 by rpki-client