Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
File: gD9h6-VXBZ20TUlXBayGRTOZVJo.mft (raw, json)
Hash identifier: UnKHc4gNbh3TlpaSnEF1Hb2fQp1xfRamycA/Mk4mIhE=
Subject key identifier: 4A:6E:B0:FC:BF:DE:2D:A2:1D:D8:C8:16:E8:11:A0:3B:E5:48:1F:39
Authority key identifier: 80:3F:61:EB:E5:57:05:9D:B4:4D:49:57:05:AC:86:45:33:99:54:9A
Certificate issuer: /CN=803f61ebe557059db44d495705ac86453399549a
Certificate serial: 01A0CD47A079E4CD51B7E23F8BB30226BAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9h6-VXBZ20TUlXBayGRTOZVJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
Manifest number: 08
Signing time: Wed 23 Sep 2026 08:00:18 +0000
Manifest this update: Wed 23 Sep 2026 08:00:18 +0000
Manifest next update: Thu 24 Sep 2026 08:00:18 +0000
Files and hashes: 1: A5AnH5vcdik9CSB6MSoxsAkB6kQ.asa (hash: vK8uxVR5kTpCIL0Vm81LnmAZR6bLlzx/RpI95yO1UC0=)
2: ZQC4nFbuilGWlajQvrZa4A30c4w.roa (hash: 0llZ1MmgltxEgZO+1Q95nsmuakNJpLm9qN73g2AwDqo=)
3: gD9h6-VXBZ20TUlXBayGRTOZVJo.crl (hash: lL45KhS/Yv1xuZyleNCpfN1pxZn46D5xLeOqyXTeNrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9h6-VXBZ20TUlXBayGRTOZVJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:a0:79:e4:cd:51:b7:e2:3f:8b:b3:02:26:ba:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f61ebe557059db44d495705ac86453399549a
Validity
Not Before: Sep 23 08:00:18 2026 GMT
Not After : Sep 24 08:00:18 2026 GMT
Subject: CN=4a6eb0fcbfde2da21dd8c816e811a03be5481f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:88:b4:ba:d2:13:6d:70:6c:f6:c6:f1:ba:
59:82:ac:18:6d:75:51:68:17:82:7d:39:96:d7:73:
47:8a:ec:5f:51:56:58:c0:5a:22:09:24:de:58:94:
ed:97:7a:ea:5f:78:9d:4c:08:f6:d7:3c:ab:cd:b1:
6f:fe:f5:24:45:90:67:1e:c8:ed:7d:f0:ae:b7:2d:
a4:35:9a:48:88:52:e8:68:b9:97:cb:30:a5:f6:88:
d2:69:99:00:18:64:47:a6:c1:43:ce:96:10:6b:b7:
6a:25:17:61:28:67:99:bd:12:a2:47:b5:03:22:19:
c5:59:86:1c:48:d7:f2:74:ac:09:63:29:1d:5d:f1:
2e:9b:22:86:f1:0a:55:4c:46:9b:f4:1b:d7:e2:a0:
5f:04:89:9b:3c:73:db:37:5b:ee:f4:32:0b:e3:40:
a2:6e:e3:9d:e6:ea:dd:ba:18:68:80:eb:84:d2:a8:
c3:e7:e6:b0:50:74:30:a9:17:b4:da:22:16:9a:e0:
22:0a:9c:a1:93:63:41:8b:9f:b4:a9:63:4a:72:5e:
8b:b5:68:f1:d8:e5:fe:9f:88:2a:ae:89:c8:6f:10:
01:13:49:a0:42:14:8f:6c:0b:49:e3:a0:c3:51:78:
2e:c6:82:ae:cc:1c:3a:b2:53:d5:ed:1a:07:5a:bd:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6E:B0:FC:BF:DE:2D:A2:1D:D8:C8:16:E8:11:A0:3B:E5:48:1F:39
X509v3 Authority Key Identifier:
keyid:80:3F:61:EB:E5:57:05:9D:B4:4D:49:57:05:AC:86:45:33:99:54:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9h6-VXBZ20TUlXBayGRTOZVJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:12:5a:6f:45:25:7c:2b:1b:75:e5:c9:92:82:df:5d:62:7f:
2e:b7:ab:bd:25:4f:89:b5:14:1d:10:04:8a:34:e3:93:cc:56:
c8:65:35:56:72:c4:59:c6:ad:65:d1:c9:4e:09:e1:cc:ac:6b:
da:e2:4f:ae:e1:2d:a8:b0:d0:08:d0:d9:0b:a2:16:18:d6:46:
99:18:a9:f9:d0:eb:91:ea:c2:b8:57:a9:5b:d9:8f:a2:9e:ac:
c5:70:ae:11:15:c2:f8:6b:a2:c2:c6:d2:79:b2:02:46:09:5d:
eb:56:9f:52:22:d0:37:bf:12:d0:68:69:1b:07:d4:bd:6f:04:
1f:2c:49:ff:b0:63:da:85:4b:a5:e8:84:93:9e:6d:ec:c9:1f:
39:36:09:db:1b:61:d2:2a:97:8d:c6:04:3d:b4:c8:6a:eb:96:
28:41:8d:83:3c:80:1d:4d:5d:eb:cd:af:72:e9:81:0d:85:d6:
a3:47:fa:f6:83:22:bf:24:21:27:2d:5d:95:2c:16:35:6a:cf:
b0:a6:bd:94:0a:a2:82:40:1d:5e:6f:76:0a:5a:a2:1d:8b:3d:
82:19:db:59:af:08:e1:1d:f1:f5:60:27:8b:f6:bc:28:e9:ba:
25:da:fd:aa:bd:cd:95:f9:91:4b:90:f9:02:15:bd:a6:94:6d:
dc:61:3d:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNR6B55M1Rt+I/i7MCJrr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwM2Y2MWViZTU1NzA1OWRiNDRkNDk1NzA1YWM4NjQ1MzM5
OTU0OWEwHhcNMjYwOTIzMDgwMDE4WhcNMjYwOTI0MDgwMDE4WjAzMTEwLwYDVQQD
Eyg0YTZlYjBmY2JmZGUyZGEyMWRkOGM4MTZlODExYTAzYmU1NDgxZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg6ItLrSE21wbPbG8bpZgqwYbXVR
aBeCfTmW13NHiuxfUVZYwFoiCSTeWJTtl3rqX3idTAj21zyrzbFv/vUkRZBnHsjt
ffCuty2kNZpIiFLoaLmXyzCl9ojSaZkAGGRHpsFDzpYQa7dqJRdhKGeZvRKiR7UD
IhnFWYYcSNfydKwJYykdXfEumyKG8QpVTEab9BvX4qBfBImbPHPbN1vu9DIL40Ci
buOd5urduhhogOuE0qjD5+awUHQwqRe02iIWmuAiCpyhk2NBi5+0qWNKcl6LtWjx
2OX+n4gqronIbxABE0mgQhSPbAtJ46DDUXguxoKuzBw6slPV7RoHWr0YFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpusPy/3i2iHdjIFugRoDvlSB85MB8GA1UdIwQY
MBaAFIA/YevlVwWdtE1JVwWshkUzmVSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0Q5aDYtVlhCWjIwVFVsWEJheUdSVE9aVkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85ODRiNWYtZWZmYy00NWM1LWIxZWIt
NzAzZTc2MDNkOWY5LzEvZ0Q5aDYtVlhCWjIwVFVsWEJheUdSVE9aVkpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85ODRiNWYtZWZmYy00NWM1LWIxZWItNzAzZTc2MDNkOWY5
LzEvZ0Q5aDYtVlhCWjIwVFVsWEJheUdSVE9aVkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRJab0Ul
fCsbdeXJkoLfXWJ/LrervSVPibUUHRAEijTjk8xWyGU1VnLEWcatZdHJTgnhzKxr
2uJPruEtqLDQCNDZC6IWGNZGmRip+dDrkerCuFepW9mPop6sxXCuERXC+GuiwsbS
ebICRgld61afUiLQN78S0GhpGwfUvW8EHyxJ/7Bj2oVLpeiEk55t7MkfOTYJ2xth
0iqXjcYEPbTIauuWKEGNgzyAHU1d682vcumBDYXWo0f69oMivyQhJy1dlSwWNWrP
sKa9lAqigkAdXm92ClqiHYs9ghnbWa8I4R3x9WAni/a8KOm6Jdr9qr3NlfmRS5D5
AhW9ppRt3GE9gg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:33:45 2026 by rpki-client