Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: qJ7JHPcQbv+KmhpaUFsxk7nlrS40yZN2grStJ9dCNPI=
Subject key identifier: 91:BB:E3:B4:3F:A2:6E:25:AD:84:D4:48:F4:34:D5:79:B0:CD:97:EA
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 01A102B66EBF7C9D2B1D7A756BAF02BC9CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 15A7
Signing time: Sat 03 Oct 2026 17:01:12 +0000
Manifest this update: Sat 03 Oct 2026 17:01:12 +0000
Manifest next update: Sun 04 Oct 2026 17:01:12 +0000
Files and hashes: 1: MKLnBwEoTvJQ6Ll9HAStk_6b-lo.roa (hash: UcMYN8ihICS5eRjwAvcwUGC2jCQeNNKHfqsuNIFnBhE=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: ApzdrLRzm1cbKX/o/BAtU/g5SzzMAN5UZpVVOVCulBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:6e:bf:7c:9d:2b:1d:7a:75:6b:af:02:bc:9c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Oct 3 17:01:12 2026 GMT
Not After : Oct 4 17:01:12 2026 GMT
Subject: CN=91bbe3b43fa26e25ad84d448f434d579b0cd97ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:06:e1:00:22:fe:f1:d0:e7:db:19:33:4d:
bb:3a:70:76:12:9b:9f:33:00:b5:71:05:44:51:e1:
89:8f:20:e1:ae:9f:03:61:74:3c:3f:ae:9b:f6:47:
f4:16:ec:ff:6b:1c:25:a9:c3:6e:a0:6b:3d:84:68:
c7:7f:f2:08:e2:f7:0b:8e:71:59:e8:47:eb:de:36:
07:7b:7f:a2:37:bf:9d:36:50:8b:f5:bb:a7:a6:b8:
2a:98:19:73:7b:99:d5:d7:b5:d6:86:06:ef:69:cb:
f3:af:93:18:33:cb:45:d8:d5:d5:7c:0e:0f:f7:29:
ef:c0:58:ca:51:e7:18:c9:8a:78:f3:8a:35:53:50:
cd:16:c3:61:7e:06:aa:10:db:4f:db:84:8b:93:db:
5b:fb:4a:f9:44:8b:df:d8:4b:25:d8:b4:f1:b3:f9:
d6:ec:86:74:b1:69:ed:b7:b8:78:c3:ac:3b:78:25:
32:33:a7:93:20:06:e6:f1:1a:6d:87:7f:52:c3:00:
52:ea:2c:e5:6f:b0:0a:60:dc:df:cf:48:75:b0:6c:
2d:0f:3d:06:0f:9c:b8:a5:60:3a:74:f1:35:45:c9:
c0:c9:97:78:68:a8:f8:5b:13:44:12:b6:ff:23:45:
e8:f1:15:e4:28:1e:9f:e4:46:de:26:57:99:89:b0:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BB:E3:B4:3F:A2:6E:25:AD:84:D4:48:F4:34:D5:79:B0:CD:97:EA
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:9c:3e:e9:12:a8:3d:f5:33:62:79:71:27:0e:e1:bb:08:73:
62:b8:2a:a3:76:7e:35:e0:0d:81:11:34:81:74:aa:79:d4:21:
d7:47:e5:0a:95:e7:59:0f:60:7f:49:48:b7:6e:d4:9b:87:17:
0b:74:8f:73:07:bd:d4:f5:87:af:41:af:0e:91:00:17:fc:5c:
59:72:8a:9a:c6:54:0b:d2:f6:9c:a4:40:09:d5:95:a7:63:c7:
03:8a:08:a8:3f:42:90:51:17:29:e4:c7:cf:d7:0f:9d:a1:81:
3d:94:cc:21:4c:25:e4:0a:d2:a7:30:72:77:e0:8a:60:0e:f0:
94:8e:fc:bb:4e:38:b9:a8:13:ac:8f:c9:15:c9:02:47:96:c2:
14:a6:5c:49:c0:f6:98:94:ac:4a:7f:1b:eb:a7:93:07:d6:17:
db:87:62:62:36:f7:e3:c9:8a:29:1b:a5:75:29:dc:97:53:91:
fc:40:8d:b9:54:d3:29:0d:d8:1f:bf:04:68:98:7f:cd:a4:52:
7d:ea:77:49:56:f2:44:c4:1a:10:6b:de:bc:b1:b2:eb:02:76:
dc:91:d8:5a:e4:29:61:74:f7:c1:ef:79:87:15:66:04:32:ad:
81:f9:ee:5c:e2:d2:05:fd:d0:a4:ef:42:12:c2:da:90:dc:bb:
85:fa:fd:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECtm6/fJ0rHXp1a68CvJyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzE3M2EzODBjZGY5M2M3YjI4NjY4ZmFiYWU1NjlhYTZm
N2EzNWEwHhcNMjYxMDAzMTcwMTEyWhcNMjYxMDA0MTcwMTEyWjAzMTEwLwYDVQQD
Eyg5MWJiZTNiNDNmYTI2ZTI1YWQ4NGQ0NDhmNDM0ZDU3OWIwY2Q5N2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwoG4QAi/vHQ59sZM027OnB2Epuf
MwC1cQVEUeGJjyDhrp8DYXQ8P66b9kf0Fuz/axwlqcNuoGs9hGjHf/II4vcLjnFZ
6Efr3jYHe3+iN7+dNlCL9bunprgqmBlze5nV17XWhgbvacvzr5MYM8tF2NXVfA4P
9ynvwFjKUecYyYp484o1U1DNFsNhfgaqENtP24SLk9tb+0r5RIvf2Esl2LTxs/nW
7IZ0sWntt7h4w6w7eCUyM6eTIAbm8Rpth39SwwBS6izlb7AKYNzfz0h1sGwtDz0G
D5y4pWA6dPE1RcnAyZd4aKj4WxNEErb/I0Xo8RXkKB6f5EbeJleZibDKEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG747Q/om4lrYTUSPQ01XmwzZfqMB8GA1UdIwQY
MBaAFIJxc6OAzfk8eyhmj6uuVpqm96NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25Gem80RE4tVHg3S0dhUHE2NVdtcWIzbzFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZWYxMTQtNTg2OC00N2I4LTk3ODgt
N2I2NDA4OWJiMTQxLzEvZ25Gem80RE4tVHg3S0dhUHE2NVdtcWIzbzFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jZWYxMTQtNTg2OC00N2I4LTk3ODgtN2I2NDA4OWJiMTQx
LzEvZ25Gem80RE4tVHg3S0dhUHE2NVdtcWIzbzFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyJw+6RKo
PfUzYnlxJw7huwhzYrgqo3Z+NeANgRE0gXSqedQh10flCpXnWQ9gf0lIt27Um4cX
C3SPcwe91PWHr0GvDpEAF/xcWXKKmsZUC9L2nKRACdWVp2PHA4oIqD9CkFEXKeTH
z9cPnaGBPZTMIUwl5ArSpzByd+CKYA7wlI78u044uagTrI/JFckCR5bCFKZcScD2
mJSsSn8b66eTB9YX24diYjb348mKKRuldSncl1OR/ECNuVTTKQ3YH78EaJh/zaRS
fep3SVbyRMQaEGvevLGy6wJ23JHYWuQpYXT3we95hxVmBDKtgfnuXOLSBf3QpO9C
EsLakNy7hfr9CQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 22:34:27 2026 by rpki-client