Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
File: gIsAIvj93I8kiP-d-eE6xOLO1xA.mft (raw, json)
Hash identifier: ZBxOfCFDZXA+eyUE558LX4nSBwI+6HhvX5Q84jYebZc=
Subject key identifier: A5:A8:E5:A5:46:D6:A8:89:47:A1:A5:E9:91:E3:DC:D2:D3:D3:A6:B0
Authority key identifier: 80:8B:00:22:F8:FD:DC:8F:24:88:FF:9D:F9:E1:3A:C4:E2:CE:D7:10
Certificate issuer: /CN=808b0022f8fddc8f2488ff9df9e13ac4e2ced710
Certificate serial: 01A1DC829961DAAA8A08044C4E0E2E5AE611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
Manifest number: 0170
Signing time: Sun 15 Nov 2026 00:01:48 +0000
Manifest this update: Sun 15 Nov 2026 00:01:48 +0000
Manifest next update: Mon 16 Nov 2026 00:01:48 +0000
Files and hashes: 1: EJdtqQdc0UeFz8mnfKqKtvtPGnk.roa (hash: va4uWHoCe/BbcgVjzuzuEu6jfJbdipgHv67I7KVhA7I=)
2: gIsAIvj93I8kiP-d-eE6xOLO1xA.crl (hash: Ulf7EGMxHQWlBmBLqEiCM1/5Z+qM8Ih8+03QJ6kUfaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:99:61:da:aa:8a:08:04:4c:4e:0e:2e:5a:e6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808b0022f8fddc8f2488ff9df9e13ac4e2ced710
Validity
Not Before: Nov 15 00:01:48 2026 GMT
Not After : Nov 16 00:01:48 2026 GMT
Subject: CN=a5a8e5a546d6a88947a1a5e991e3dcd2d3d3a6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:f3:46:f3:65:cc:62:a1:93:83:e1:46:7a:
b8:65:a2:e6:97:5f:eb:e8:97:4e:4c:e0:ef:d8:e3:
4b:98:ce:2d:ca:00:16:aa:d8:c3:97:d1:7b:2a:5d:
40:e8:20:a7:86:8a:dc:a7:ab:2f:6f:f9:8e:87:bd:
02:8d:05:19:76:5f:d1:31:ac:87:f6:34:5d:15:fb:
56:5e:e5:19:7a:61:7b:2c:07:a0:3a:16:32:70:5f:
ad:3c:cf:0e:fa:16:a2:26:66:3c:a0:84:e8:85:5d:
99:29:ab:7a:c5:5a:88:1f:94:c2:d4:6b:82:26:6b:
a0:2e:28:2a:34:75:54:61:4a:c0:b6:c5:e5:78:19:
44:82:13:b0:be:44:40:84:65:4c:b3:46:eb:41:b5:
67:00:7d:42:cb:b6:65:34:c9:52:c2:f1:90:78:9a:
d5:90:cd:59:ef:e0:01:63:a3:64:02:bf:4d:41:de:
cc:e4:a1:3f:cd:8d:b8:19:ef:24:c7:b7:3d:70:7e:
ad:39:01:df:85:0e:d3:7a:d5:b3:1d:83:15:72:7b:
d2:3b:cb:8d:53:cf:a1:cb:0f:5d:9f:be:32:ba:35:
9c:12:45:a0:c9:33:f6:73:74:b5:ee:0f:94:0f:a1:
bf:52:aa:24:6e:a9:7d:4a:fd:fe:ea:40:c8:77:51:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A8:E5:A5:46:D6:A8:89:47:A1:A5:E9:91:E3:DC:D2:D3:D3:A6:B0
X509v3 Authority Key Identifier:
keyid:80:8B:00:22:F8:FD:DC:8F:24:88:FF:9D:F9:E1:3A:C4:E2:CE:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:84:f1:43:bb:69:54:d1:01:e5:fc:65:f4:51:27:77:02:47:
68:4f:ba:d1:51:fc:8e:7a:52:7b:43:6b:e2:2c:7a:5c:d0:1d:
59:2c:a1:0d:dc:a4:fc:00:eb:2a:b3:e8:cc:79:57:94:0e:f6:
5b:47:37:be:b0:fc:24:a6:5b:e3:68:10:63:c5:eb:5a:e3:7a:
f8:e8:d5:eb:f9:9d:8c:45:94:84:41:e4:5a:2a:b1:6f:41:89:
48:89:56:81:f8:22:49:2e:10:71:db:53:ab:36:0c:f9:87:90:
db:57:ed:10:d7:1c:1c:98:c7:0e:c0:60:8c:82:a6:80:c5:6e:
0b:ba:ce:5d:84:19:c2:36:64:ec:6e:80:13:0a:7e:13:b3:d8:
07:3f:32:31:f6:b2:74:dc:84:a4:1d:3b:bf:bf:37:9c:d6:8c:
e5:ff:7d:d8:da:01:c6:62:3e:de:b2:7c:c6:13:ff:69:3e:fb:
8d:53:e5:e7:eb:18:db:29:f6:b0:5e:39:28:9c:61:f3:20:83:
37:2c:25:0a:63:95:5f:61:5e:9a:eb:cd:ef:44:61:a3:98:e1:
02:39:07:e4:a4:eb:f4:60:df:21:21:ed:c6:35:c0:6f:17:7f:
49:0c:71:0a:c4:3d:86:ff:88:d0:af:fa:8f:43:7d:d4:4d:cb:
92:6f:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:31:36 2026 by rpki-client