Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: I6sK69HtXcC4rnUX3ZKEr3d+YW+5i/CbxvJanTkHiAQ=
Subject key identifier: FB:E6:6C:41:A1:9D:8C:E5:EA:16:23:E6:C9:D3:41:4E:BA:C3:F9:27
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 01A1DCB93BC71A0A73ACAC298AB40B008026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 138D
Signing time: Sun 15 Nov 2026 01:01:29 +0000
Manifest this update: Sun 15 Nov 2026 01:01:29 +0000
Manifest next update: Mon 16 Nov 2026 01:01:29 +0000
Files and hashes: 1: ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa (hash: DP27/a5o1Ym+vesDLFqV0Tua4ny+ds0/pH34jhmErS8=)
2: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: +re4rh3R+fUh0Xa/7H045KMMbZO1nJlvl+JenqeMjwc=)
3: Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa (hash: KqQ8TKxBYl3JumzrSj+0qt5zeDJPsxKpAnGsc38qwpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:3b:c7:1a:0a:73:ac:ac:29:8a:b4:0b:00:80:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Nov 15 01:01:29 2026 GMT
Not After : Nov 16 01:01:29 2026 GMT
Subject: CN=fbe66c41a19d8ce5ea1623e6c9d3414ebac3f927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:27:5e:7f:0c:b7:1d:23:61:fa:01:0c:86:fa:
0a:dd:86:8f:e9:62:df:78:23:be:dc:e6:28:d9:81:
fc:67:10:96:be:80:7e:cb:a7:bd:cb:57:7e:88:be:
2c:d0:35:2d:86:5c:d2:e9:d1:10:c9:86:8b:6a:70:
1b:7e:76:ed:76:de:d2:f6:42:1a:7f:d5:41:2a:d2:
13:b3:a3:33:93:b9:c9:b7:cb:ca:51:4f:a4:5c:9b:
69:e9:7b:19:3d:fd:d4:f7:0e:b8:81:ef:68:41:64:
14:ca:f8:3a:48:74:38:b6:92:93:be:6d:94:80:ed:
83:86:96:ca:3c:c6:e7:9d:70:51:92:f8:d1:d1:1a:
e9:05:27:69:b3:f4:f2:04:a5:6b:63:6e:e4:13:21:
6e:3d:70:58:6b:34:7e:78:66:c8:4a:ac:c1:f7:4c:
11:1f:6b:c7:5f:82:85:fa:45:ae:de:02:62:16:53:
02:de:ec:85:a8:3c:2d:64:bc:4e:6c:69:17:07:35:
62:c9:f2:d6:90:3b:fd:54:a0:d1:0a:dc:be:bd:77:
e8:e5:8f:13:a6:f3:ab:04:57:d3:eb:6f:c4:b5:a5:
e1:fe:11:ee:59:d8:66:36:31:2a:66:4d:b2:f0:a4:
64:de:de:e4:ce:54:16:bd:cd:5e:0a:e2:43:c3:e6:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E6:6C:41:A1:9D:8C:E5:EA:16:23:E6:C9:D3:41:4E:BA:C3:F9:27
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:68:cd:4b:cc:19:84:38:2d:6f:95:2a:e4:13:06:54:e1:4f:
40:c1:fc:9e:26:db:62:99:e8:c4:72:4d:54:e5:cc:bd:27:0e:
3e:1d:90:27:03:17:97:5e:e8:cb:93:6e:6c:46:d9:ec:72:c8:
13:29:9c:14:64:a6:80:3c:79:e8:ff:f6:b5:20:3f:5b:22:d7:
af:cc:1a:df:95:32:e1:d6:7b:74:43:5a:ba:98:dc:eb:4d:71:
59:82:7e:2c:6e:78:8b:58:28:14:01:c0:b3:c1:c8:54:25:c5:
fa:ca:df:06:9b:44:f8:64:4d:1d:ea:19:12:63:63:26:f5:ab:
ec:0d:65:a0:35:34:e1:3d:47:7c:5a:49:63:82:f8:82:51:c7:
ef:4a:ce:cd:21:d1:11:08:6b:4b:5d:67:51:21:29:c8:63:3b:
ed:64:31:b9:8f:bc:8c:f4:39:eb:f6:bd:7a:d4:e2:d3:4d:3c:
78:19:a0:91:7d:49:8c:4b:0f:9e:17:27:0d:ef:be:4a:33:75:
56:41:16:00:ee:3a:5f:f2:d3:b9:6d:43:2f:09:0f:52:3c:46:
7e:35:76:5f:44:47:b3:fe:3f:d4:1d:6b:72:63:1c:be:33:b6:
2f:39:2b:94:80:04:12:57:0d:1b:9a:c0:5e:bc:07:c9:0a:0d:
69:20:ee:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuTvHGgpzrKwpirQLAIAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGQwOTIzZWMxMDY2Nzc2MGFkODgyZTZhZjlhMTU2OTlj
MDVlZjgwHhcNMjYxMTE1MDEwMTI5WhcNMjYxMTE2MDEwMTI5WjAzMTEwLwYDVQQD
EyhmYmU2NmM0MWExOWQ4Y2U1ZWExNjIzZTZjOWQzNDE0ZWJhYzNmOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnidefwy3HSNh+gEMhvoK3YaP6WLf
eCO+3OYo2YH8ZxCWvoB+y6e9y1d+iL4s0DUthlzS6dEQyYaLanAbfnbtdt7S9kIa
f9VBKtITs6Mzk7nJt8vKUU+kXJtp6XsZPf3U9w64ge9oQWQUyvg6SHQ4tpKTvm2U
gO2DhpbKPMbnnXBRkvjR0RrpBSdps/TyBKVrY27kEyFuPXBYazR+eGbISqzB90wR
H2vHX4KF+kWu3gJiFlMC3uyFqDwtZLxObGkXBzViyfLWkDv9VKDRCty+vXfo5Y8T
pvOrBFfT62/EtaXh/hHuWdhmNjEqZk2y8KRk3t7kzlQWvc1eCuJDw+arMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvmbEGhnYzl6hYj5snTQU66w/knMB8GA1UdIwQY
MBaAFBpNCSPsEGZ3YK2ILmr5oVaZwF74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2swSkktd1FabmRncllndWF2bWhWcG5BWHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zNTY0ZTctMTFkNC00ZDdhLThiY2Mt
YTk1Mzc2OGZkZTJmLzEvR2swSkktd1FabmRncllndWF2bWhWcG5BWHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zNTY0ZTctMTFkNC00ZDdhLThiY2MtYTk1Mzc2OGZkZTJm
LzEvR2swSkktd1FabmRncllndWF2bWhWcG5BWHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWjNS8wZ
hDgtb5Uq5BMGVOFPQMH8nibbYpnoxHJNVOXMvScOPh2QJwMXl17oy5NubEbZ7HLI
EymcFGSmgDx56P/2tSA/WyLXr8wa35Uy4dZ7dENaupjc601xWYJ+LG54i1goFAHA
s8HIVCXF+srfBptE+GRNHeoZEmNjJvWr7A1loDU04T1HfFpJY4L4glHH70rOzSHR
EQhrS11nUSEpyGM77WQxuY+8jPQ56/a9etTi0008eBmgkX1JjEsPnhcnDe++SjN1
VkEWAO46X/LTuW1DLwkPUjxGfjV2X0RHs/4/1B1rcmMcvjO2LzkrlIAEElcNG5rA
XrwHyQoNaSDuUg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 09:57:04 2026 by rpki-client