Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
File: gD9h6-VXBZ20TUlXBayGRTOZVJo.mft (raw, json)
Hash identifier: mm6mX7jbU40vanyPW6pG0X/gf3N3nxjK8Wb2CXuABpU=
Subject key identifier: 9E:25:C0:51:51:4E:3E:26:8C:7F:68:7D:B5:B7:72:79:60:11:45:CE
Authority key identifier: 80:3F:61:EB:E5:57:05:9D:B4:4D:49:57:05:AC:86:45:33:99:54:9A
Certificate issuer: /CN=803f61ebe557059db44d495705ac86453399549a
Certificate serial: 01A1DF8372AFEFB3343AD4F975AB58FED56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9h6-VXBZ20TUlXBayGRTOZVJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
Manifest number: 96
Signing time: Sun 15 Nov 2026 14:01:36 +0000
Manifest this update: Sun 15 Nov 2026 14:01:36 +0000
Manifest next update: Mon 16 Nov 2026 14:01:36 +0000
Files and hashes: 1: A5AnH5vcdik9CSB6MSoxsAkB6kQ.asa (hash: vK8uxVR5kTpCIL0Vm81LnmAZR6bLlzx/RpI95yO1UC0=)
2: ZQC4nFbuilGWlajQvrZa4A30c4w.roa (hash: 0llZ1MmgltxEgZO+1Q95nsmuakNJpLm9qN73g2AwDqo=)
3: gD9h6-VXBZ20TUlXBayGRTOZVJo.crl (hash: X8LSUx7lJQ7ccxVF+W9xaXilCk4AnK+Xr0oLoyJQeqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9h6-VXBZ20TUlXBayGRTOZVJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:72:af:ef:b3:34:3a:d4:f9:75:ab:58:fe:d5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f61ebe557059db44d495705ac86453399549a
Validity
Not Before: Nov 15 14:01:36 2026 GMT
Not After : Nov 16 14:01:36 2026 GMT
Subject: CN=9e25c051514e3e268c7f687db5b77279601145ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:f4:62:7b:91:b7:8e:37:38:09:9a:f6:4a:
ba:c4:17:18:b2:88:8c:e5:95:2a:2d:08:af:6e:a1:
ee:a2:99:d5:f4:14:bb:67:c5:50:40:7b:07:b2:0e:
4e:5e:51:68:f8:16:e3:11:ba:ce:1a:0b:f7:18:2f:
5d:4f:4f:9d:f8:0a:5b:6b:c4:87:47:38:62:1b:ec:
3c:28:80:10:a5:08:02:5d:3f:42:e7:38:59:f6:66:
1e:88:5a:bd:80:b3:bf:2b:a3:d4:38:4f:64:37:61:
38:11:7b:99:b1:65:e7:cd:82:2c:70:20:92:d3:0b:
7a:38:a8:1a:32:bf:33:22:c9:0e:14:41:2d:b3:03:
87:f4:21:76:b8:0d:48:ea:f3:7c:e6:e7:7d:e4:86:
c7:e8:a5:42:8a:2b:a6:4c:b8:92:8b:52:b3:0d:10:
e9:ca:9c:34:e0:06:95:f3:d8:e2:7d:86:bc:d9:ae:
2b:94:2f:71:eb:48:2b:a4:eb:c4:07:45:1d:a2:85:
06:86:01:3b:3a:37:b7:0f:ee:8e:0d:69:fd:ac:9e:
1b:d7:4a:d9:df:d2:fa:0a:99:9f:66:be:bd:ff:23:
27:9e:e1:b5:a1:c2:b7:a3:92:b5:bf:1f:2c:88:15:
f0:4b:e8:ec:8e:1b:0c:cc:8f:e0:de:47:f8:57:f6:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:25:C0:51:51:4E:3E:26:8C:7F:68:7D:B5:B7:72:79:60:11:45:CE
X509v3 Authority Key Identifier:
keyid:80:3F:61:EB:E5:57:05:9D:B4:4D:49:57:05:AC:86:45:33:99:54:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9h6-VXBZ20TUlXBayGRTOZVJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:73:ce:6e:60:cf:42:92:8a:d2:a6:5c:dd:2e:1f:46:07:3d:
73:3d:26:2f:01:10:fe:98:16:86:e0:53:a4:32:65:23:d5:85:
15:51:25:91:b3:30:4d:c2:6e:fa:41:bd:35:f3:5e:19:58:bb:
2d:55:a2:1c:5d:7b:12:a6:a0:e0:63:08:a8:e0:05:dc:94:eb:
e9:c2:d4:25:08:23:b0:12:fc:2e:80:ab:06:33:37:c9:ae:b4:
04:76:f7:01:b0:bd:d1:f5:72:56:72:c7:38:2b:0e:50:15:b4:
cd:d3:ba:a4:99:ff:3c:2a:5c:1a:ac:6c:da:ef:de:4c:b9:59:
8b:9f:e3:7f:34:6a:f4:8f:f0:cc:90:90:ef:52:29:84:aa:e1:
80:4d:62:f7:58:06:c5:36:c2:ab:25:da:7b:4e:99:05:1b:c2:
f4:dc:07:c0:64:73:ad:06:0b:30:da:62:e8:bb:01:ae:45:14:
4e:34:8a:af:95:0f:f5:5f:a4:77:18:c5:27:13:da:0e:e4:d8:
11:d3:9f:e5:5b:c6:09:c8:db:9c:3f:46:68:7c:29:73:af:fd:
99:d5:8e:c4:87:4e:ab:a8:a9:f5:17:7d:45:9e:1a:a6:6c:ff:
90:c1:6d:a6:7e:65:a9:f6:82:3d:37:8c:a3:58:6a:9b:5e:fc:
a6:c2:2f:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfg3Kv77M0OtT5datY/tVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwM2Y2MWViZTU1NzA1OWRiNDRkNDk1NzA1YWM4NjQ1MzM5
OTU0OWEwHhcNMjYxMTE1MTQwMTM2WhcNMjYxMTE2MTQwMTM2WjAzMTEwLwYDVQQD
Eyg5ZTI1YzA1MTUxNGUzZTI2OGM3ZjY4N2RiNWI3NzI3OTYwMTE0NWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhb0YnuRt443OAma9kq6xBcYsoiM
5ZUqLQivbqHuopnV9BS7Z8VQQHsHsg5OXlFo+BbjEbrOGgv3GC9dT0+d+Apba8SH
RzhiG+w8KIAQpQgCXT9C5zhZ9mYeiFq9gLO/K6PUOE9kN2E4EXuZsWXnzYIscCCS
0wt6OKgaMr8zIskOFEEtswOH9CF2uA1I6vN85ud95IbH6KVCiiumTLiSi1KzDRDp
ypw04AaV89jifYa82a4rlC9x60grpOvEB0UdooUGhgE7Oje3D+6ODWn9rJ4b10rZ
39L6CpmfZr69/yMnnuG1ocK3o5K1vx8siBXwS+jsjhsMzI/g3kf4V/YjOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4lwFFRTj4mjH9ofbW3cnlgEUXOMB8GA1UdIwQY
MBaAFIA/YevlVwWdtE1JVwWshkUzmVSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0Q5aDYtVlhCWjIwVFVsWEJheUdSVE9aVkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85ODRiNWYtZWZmYy00NWM1LWIxZWIt
NzAzZTc2MDNkOWY5LzEvZ0Q5aDYtVlhCWjIwVFVsWEJheUdSVE9aVkpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85ODRiNWYtZWZmYy00NWM1LWIxZWItNzAzZTc2MDNkOWY5
LzEvZ0Q5aDYtVlhCWjIwVFVsWEJheUdSVE9aVkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3PObmDP
QpKK0qZc3S4fRgc9cz0mLwEQ/pgWhuBTpDJlI9WFFVElkbMwTcJu+kG9NfNeGVi7
LVWiHF17Eqag4GMIqOAF3JTr6cLUJQgjsBL8LoCrBjM3ya60BHb3AbC90fVyVnLH
OCsOUBW0zdO6pJn/PCpcGqxs2u/eTLlZi5/jfzRq9I/wzJCQ71IphKrhgE1i91gG
xTbCqyXae06ZBRvC9NwHwGRzrQYLMNpi6LsBrkUUTjSKr5UP9V+kdxjFJxPaDuTY
EdOf5VvGCcjbnD9GaHwpc6/9mdWOxIdOq6ip9Rd9RZ4apmz/kMFtpn5lqfaCPTeM
o1hqm178psIvlQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:50:56 2026 by rpki-client