Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: Hbl4pN3PqJ/w6uL+LZhloAeDFgm1WyCXH+y1LE2mqKI=
Subject key identifier: 67:B2:D5:CB:43:C3:DE:26:D3:73:CF:54:96:D1:64:6E:99:FE:A5:62
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 01A0DA9679BEBD01898AD76A2CF8DDCA8BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 0BCC
Signing time: Fri 25 Sep 2026 22:01:29 +0000
Manifest this update: Fri 25 Sep 2026 22:01:29 +0000
Manifest next update: Sat 26 Sep 2026 22:01:29 +0000
Files and hashes: 1: EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa (hash: CaEBziMi2C6rN6WGf7O34W/+WtB1Ogao7r0fRD3u2XA=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: xAiyXRTY8I2K9xeHx45bk1jluFIpRrMsozbEVBYDDYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:79:be:bd:01:89:8a:d7:6a:2c:f8:dd:ca:8b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Sep 25 22:01:29 2026 GMT
Not After : Sep 26 22:01:29 2026 GMT
Subject: CN=67b2d5cb43c3de26d373cf5496d1646e99fea562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:bb:50:8d:66:94:22:40:78:e7:0d:43:40:
e0:cb:81:12:3b:c8:2e:df:8f:10:d3:53:46:9c:ca:
95:f0:88:74:c1:71:21:d7:a4:f0:e7:6f:27:f6:d7:
02:16:55:43:77:ce:3f:11:f9:7c:ca:85:36:fb:dc:
8d:1b:35:95:c5:35:28:4b:96:34:4e:f0:cc:20:6b:
1c:b2:b9:66:4f:95:39:f8:fa:ab:11:da:45:ef:10:
50:fa:d8:c8:52:59:3a:43:23:79:cc:73:fd:48:f8:
fa:5a:ab:76:81:d3:60:cb:a2:75:aa:b3:80:7f:e8:
35:e7:a4:6e:d1:b5:39:ab:9f:4a:ad:98:a1:12:c1:
b6:7d:fb:e1:4a:0c:b6:2f:3c:3e:96:d0:1b:ee:2c:
e0:42:83:61:3e:b9:5d:b8:30:01:bc:7f:b9:2a:70:
d1:35:4a:5e:62:c3:22:94:97:9f:c3:3b:e6:f9:ff:
0d:5e:ff:37:11:c7:54:31:bf:75:25:96:ca:ed:7c:
6f:c9:18:2f:69:f3:6d:49:ea:06:39:e3:1a:a4:8d:
f8:5c:41:69:1e:74:c1:3f:9a:e7:25:fc:f9:70:b8:
3e:8d:e2:dc:21:ce:2a:c9:a8:34:31:13:ce:3d:8e:
6e:6e:2d:38:fa:7e:48:f9:64:8e:98:76:40:b1:ad:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B2:D5:CB:43:C3:DE:26:D3:73:CF:54:96:D1:64:6E:99:FE:A5:62
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:90:2a:de:9e:13:26:d7:51:fe:34:d1:6d:87:47:8f:7a:32:
58:f1:5e:81:05:ba:0a:8c:ba:f1:1a:ad:d6:06:81:f3:0c:70:
a1:c3:a3:23:66:ed:06:ac:81:97:db:88:c9:b2:d2:2e:aa:5a:
81:cb:20:9d:59:a5:cd:22:a2:a2:1a:48:b2:03:c4:e4:c0:c4:
51:81:2f:b1:69:f8:6b:18:13:13:dc:d6:ab:00:a1:c8:dd:d4:
69:eb:26:e4:43:b5:bd:47:df:30:7c:6a:d4:57:54:c1:64:96:
7d:6a:d2:c4:1f:aa:c2:77:85:99:33:0c:09:2c:82:a0:76:8d:
86:64:9f:22:45:eb:bf:5f:60:80:a5:eb:b0:d1:88:77:e6:fa:
41:fe:e4:ad:e6:d1:46:c6:03:f4:f4:06:69:f2:de:f8:96:48:
43:33:24:0b:ec:1f:9e:4e:12:7a:ed:c2:2a:00:8e:0c:70:df:
ee:6f:ad:bb:05:5d:f9:47:02:1f:a2:53:a2:a6:89:28:18:59:
3e:19:c2:d9:6e:4a:0a:2c:33:28:46:c2:5d:76:4b:99:5b:cb:
eb:50:5b:49:f8:ce:3f:8d:5d:75:bb:8b:91:39:65:06:1b:b4:
de:fc:6d:2e:55:a2:79:54:0f:0e:1b:69:65:31:5e:e5:58:f5:
fc:74:44:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDalnm+vQGJitdqLPjdyoujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYWU3MGRmZDQzMDUyNzM2ZmU4NWYwMGQyOTg0Y2UzNzZi
NzZlYjMwHhcNMjYwOTI1MjIwMTI5WhcNMjYwOTI2MjIwMTI5WjAzMTEwLwYDVQQD
Eyg2N2IyZDVjYjQzYzNkZTI2ZDM3M2NmNTQ5NmQxNjQ2ZTk5ZmVhNTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy367UI1mlCJAeOcNQ0Dgy4ESO8gu
348Q01NGnMqV8Ih0wXEh16Tw528n9tcCFlVDd84/Efl8yoU2+9yNGzWVxTUoS5Y0
TvDMIGscsrlmT5U5+PqrEdpF7xBQ+tjIUlk6QyN5zHP9SPj6Wqt2gdNgy6J1qrOA
f+g156Ru0bU5q59KrZihEsG2ffvhSgy2Lzw+ltAb7izgQoNhPrlduDABvH+5KnDR
NUpeYsMilJefwzvm+f8NXv83EcdUMb91JZbK7XxvyRgvafNtSeoGOeMapI34XEFp
HnTBP5rnJfz5cLg+jeLcIc4qyag0MRPOPY5ubi04+n5I+WSOmHZAsa1kXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGey1ctDw94m03PPVJbRZG6Z/qViMB8GA1UdIwQY
MBaAFIGucN/UMFJzb+hfANKYTON2t26zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgt
YmI1ODkzYTZhYzkxLzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgtYmI1ODkzYTZhYzkx
LzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZAq3p4T
JtdR/jTRbYdHj3oyWPFegQW6Coy68Rqt1gaB8wxwocOjI2btBqyBl9uIybLSLqpa
gcsgnVmlzSKiohpIsgPE5MDEUYEvsWn4axgTE9zWqwChyN3Uaesm5EO1vUffMHxq
1FdUwWSWfWrSxB+qwneFmTMMCSyCoHaNhmSfIkXrv19ggKXrsNGId+b6Qf7krebR
RsYD9PQGafLe+JZIQzMkC+wfnk4Seu3CKgCODHDf7m+tuwVd+UcCH6JToqaJKBhZ
PhnC2W5KCiwzKEbCXXZLmVvL61BbSfjOP41ddbuLkTllBhu03vxtLlWieVQPDhtp
ZTFe5Vj1/HRECQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:12:25 2026 by rpki-client