Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
File: gIsAIvj93I8kiP-d-eE6xOLO1xA.mft (raw, json)
Hash identifier: 4jkkshAZxHWefXBj6aKVqjw+v5JurerPUagAy0I/Uns=
Subject key identifier: B1:8C:F6:CD:6C:1A:5E:EC:C9:EE:8D:ED:8F:1C:44:49:08:87:33:3A
Authority key identifier: 80:8B:00:22:F8:FD:DC:8F:24:88:FF:9D:F9:E1:3A:C4:E2:CE:D7:10
Certificate issuer: /CN=808b0022f8fddc8f2488ff9df9e13ac4e2ced710
Certificate serial: 01A0D9BAB6D41BE6154B150E1BF65B99911A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:27 +0000
Manifest this update: Fri 25 Sep 2026 18:01:27 +0000
Manifest next update: Sat 26 Sep 2026 18:01:27 +0000
Files and hashes: 1: EJdtqQdc0UeFz8mnfKqKtvtPGnk.roa (hash: va4uWHoCe/BbcgVjzuzuEu6jfJbdipgHv67I7KVhA7I=)
2: gIsAIvj93I8kiP-d-eE6xOLO1xA.crl (hash: uHoFxuugM/e2N6FEp58nf1D80HO+Zff9+PuI4dvYZUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:b6:d4:1b:e6:15:4b:15:0e:1b:f6:5b:99:91:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808b0022f8fddc8f2488ff9df9e13ac4e2ced710
Validity
Not Before: Sep 25 18:01:27 2026 GMT
Not After : Sep 26 18:01:27 2026 GMT
Subject: CN=b18cf6cd6c1a5eecc9ee8ded8f1c44490887333a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:14:f1:e5:54:44:cf:42:80:97:b6:39:b7:
09:61:e4:75:64:3b:9e:24:c3:44:b7:ef:a1:4a:66:
ab:61:3d:c8:4a:eb:10:6c:60:1e:2d:2b:54:e0:16:
a8:2d:2b:28:8a:52:09:ee:44:ab:33:f0:6d:bb:6b:
f1:53:9b:91:c6:7e:8a:2c:89:88:04:a6:15:c6:b5:
12:86:19:2f:95:f8:b9:89:ee:5d:5d:49:b9:6d:96:
96:5f:f9:83:76:3e:5a:8c:25:35:20:7c:40:4a:7c:
e2:17:63:3b:f8:54:ab:01:c7:4d:db:43:5d:9e:ec:
fc:91:71:e4:bb:98:76:9b:bd:97:c1:fd:92:90:61:
82:aa:29:37:69:33:bc:8e:7f:6b:0b:99:00:08:9b:
73:d2:0b:e2:10:d0:d6:fe:5f:49:1f:74:1f:a3:45:
89:61:59:f0:eb:4c:45:d2:0a:bc:a3:4d:66:e4:41:
03:d3:2a:c6:bd:1f:c6:ed:bc:c2:83:ba:7e:a5:51:
a3:1c:e5:52:cb:a9:8c:53:40:42:78:60:05:18:4b:
2c:a0:4f:86:69:f5:e5:e6:ce:8f:36:84:93:c0:a6:
b8:fa:51:c9:e5:a1:18:9f:4a:fe:4b:bb:54:de:e1:
a1:09:35:76:07:54:9b:b7:57:44:77:ed:fd:32:70:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8C:F6:CD:6C:1A:5E:EC:C9:EE:8D:ED:8F:1C:44:49:08:87:33:3A
X509v3 Authority Key Identifier:
keyid:80:8B:00:22:F8:FD:DC:8F:24:88:FF:9D:F9:E1:3A:C4:E2:CE:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:51:7a:f8:a4:bc:d2:27:d3:a8:07:2c:33:a0:10:fb:cc:ce:
68:51:8d:1e:76:99:73:c9:af:a6:c1:c8:2b:4c:bb:7a:30:f5:
32:5a:4e:68:49:bc:0e:bc:25:c3:67:4d:4a:87:02:03:2f:9f:
5e:22:a5:cd:76:4c:2c:d9:e7:97:87:b1:72:c7:49:f1:af:82:
91:c4:ce:0e:0a:76:e6:b9:59:bc:27:b7:6c:8f:83:40:77:c9:
ad:7d:8c:cc:60:5b:b3:63:ac:c1:5d:6e:b1:ec:b1:8a:0c:05:
75:07:2a:de:1a:a1:24:45:8a:a3:18:cb:26:c6:99:56:db:ce:
d1:eb:3b:9f:bb:54:e1:45:9d:e1:f7:33:4b:ea:a4:13:4c:39:
6d:a2:eb:1f:3f:0e:5e:d0:55:63:48:b4:46:9a:69:60:63:31:
0f:1e:9c:d9:8f:1e:a1:50:2b:2a:87:6f:e0:f8:ef:75:22:f8:
9f:e6:4f:72:e8:e3:e7:88:a5:73:30:52:0a:f1:93:a5:97:72:
5b:3f:d6:bc:e3:de:73:83:62:69:41:19:b0:07:ad:2a:db:be:
13:a2:bc:d2:25:62:88:a5:57:36:96:c3:9e:be:68:af:56:70:
36:8f:ce:90:79:b8:64:7e:d0:f9:5b:2e:bf:1d:bf:35:13:dc:
74:3e:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:50 2026 by rpki-client