Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: 4tprltDUV4p/QgAt6dYUVMhq05PHXwTKSQyatz7R2zg=
Subject key identifier: 87:42:BD:59:7D:6A:C6:9A:45:F1:84:57:90:7F:BD:34:D3:A6:D7:1C
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 01A0F90F28C95BF9CB8C6C6FF7350097C0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 1A81
Signing time: Thu 01 Oct 2026 20:01:55 +0000
Manifest this update: Thu 01 Oct 2026 20:01:55 +0000
Manifest next update: Fri 02 Oct 2026 20:01:55 +0000
Files and hashes: 1: 1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa (hash: riRb4iPkDBtyw2U0WQzBeSsFtt3y8g90iqUigaVwK4I=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: zxmwqqfJNVTTwFFr+K8l9ovKMpAR6g1SzkimugStNN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:0f:28:c9:5b:f9:cb:8c:6c:6f:f7:35:00:97:c0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Oct 1 20:01:55 2026 GMT
Not After : Oct 2 20:01:55 2026 GMT
Subject: CN=8742bd597d6ac69a45f18457907fbd34d3a6d71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:5e:d8:e1:8e:57:e3:69:c9:0e:66:db:3e:
9b:27:7e:de:2e:f3:a8:f2:3f:95:44:60:95:57:4c:
05:af:24:1e:4f:ce:95:1c:9e:fe:6e:af:51:34:80:
e3:b9:6a:5a:e4:29:e9:41:18:84:3c:bb:5f:08:31:
67:e4:00:79:d5:91:ab:fa:9e:0f:81:b4:4e:f5:16:
aa:b2:2d:41:35:5d:8d:08:98:66:82:9b:ee:30:22:
fc:a6:e2:b6:b9:80:42:16:5b:0d:3b:67:8b:22:11:
49:1c:e5:bf:f5:d6:66:e7:61:15:90:79:3f:81:fa:
88:b1:01:4f:09:bb:bd:70:f9:c1:cb:d1:7f:99:09:
85:c7:0d:61:1b:67:40:4e:bb:03:92:24:46:41:9c:
9e:68:7d:57:6c:7c:00:b7:f2:58:0b:a9:c4:d9:61:
83:3f:a2:d1:8f:91:a1:60:f2:aa:12:67:97:ff:bd:
b4:82:9e:90:5b:4e:4d:d0:cc:14:8e:3f:d6:df:7a:
c7:0d:23:93:55:12:3f:0e:7b:e0:a1:ce:e2:53:4c:
6c:65:69:59:4d:5a:25:3b:a0:ca:a0:f2:25:b1:5c:
e3:a3:5d:4d:bd:87:ba:95:e2:2f:6c:12:50:99:bf:
b7:43:99:a8:88:e0:2d:49:ca:f5:a0:ed:98:6c:b8:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:42:BD:59:7D:6A:C6:9A:45:F1:84:57:90:7F:BD:34:D3:A6:D7:1C
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b1:b8:e9:51:cd:3c:0b:a1:5b:18:02:da:7c:0e:f4:06:d3:
df:de:d6:1a:87:6d:2e:0b:a7:53:95:c8:b6:1f:1e:e9:59:97:
0c:f1:5b:43:eb:85:0f:5c:42:c9:93:fa:dd:30:e7:4a:00:03:
17:20:2a:0a:c1:03:b3:9d:11:6b:9d:e4:6c:79:b2:a0:71:17:
61:df:54:d3:cf:aa:33:a0:16:8e:26:da:cc:df:b6:43:06:f1:
b6:29:03:f6:2a:35:5d:61:ea:94:3a:eb:35:dd:75:f9:fd:a5:
b1:83:d0:01:93:b9:67:44:b8:61:e9:ae:d4:92:57:77:ea:85:
5b:b6:71:1d:39:36:a5:e4:39:86:b9:4a:bc:a2:9c:c8:f6:ae:
ae:0c:4d:a4:bc:a5:fd:41:bd:57:28:55:81:71:fc:57:81:86:
c2:be:68:0f:4d:db:77:0a:7b:0f:38:ed:30:77:1d:b8:64:4c:
22:36:2c:0f:a2:ee:75:18:80:cd:e2:9b:6b:84:1e:fb:ab:64:
55:73:80:e6:3e:e1:00:1b:1a:e5:cc:98:08:6b:44:f4:fa:59:
77:7a:36:23:03:91:e7:b5:1b:5c:31:f6:d1:a2:cb:9d:6c:d8:
af:49:2a:c0:05:96:5d:53:db:4e:3c:12:d4:5a:a9:35:9a:a5:
fe:30:37:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 12:26:11 2026 by rpki-client