Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier: bHyED0EPldHn3QjJlZ7rQ7aV1w3t4HN3xSw3xJAck9U=
Subject key identifier: D3:45:9D:8E:68:64:6C:3E:4C:DD:A6:8A:49:AA:29:66:28:EB:EA:AC
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 01A0EBC15348921905F48F19B9896C4882DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 06:01:50 +0000
Manifest this update: Tue 29 Sep 2026 06:01:50 +0000
Manifest next update: Wed 30 Sep 2026 06:01:50 +0000
Files and hashes: 1: FRyXsiFg-6BIhEw2ARWH0DNGSnM.roa (hash: HOwOr4bTuIB/KNZWR5lcxrrwlrEvRwNSNG9O5oAt0bs=)
2: M_VtU7f5fPlDKkVKH-oBTR-MfOc.roa (hash: INw4W70ov+0DIQom+PoiFmtJQ/A7yUcxsfN1Ujem6fA=)
3: kkaW2PybyMFtKIudjGW5zNwrUVA.roa (hash: q2dHdK2+xshlUtyI1McPweg9tnAFSg39WkJ96aCsEe8=)
4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: jA7Z3+TdCZgCGL9UAaMGWAk/dFAeZ+AGVRfS3U7H17A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c1:53:48:92:19:05:f4:8f:19:b9:89:6c:48:82:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Sep 29 06:01:50 2026 GMT
Not After : Sep 30 06:01:50 2026 GMT
Subject: CN=d3459d8e68646c3e4cdda68a49aa296628ebeaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:30:52:60:ad:b7:ba:0e:ad:66:71:6c:be:
87:32:e1:5a:7b:25:85:01:fe:1f:00:67:3d:13:47:
fc:96:6a:c1:8d:ac:f9:34:0d:2e:d6:20:a0:2b:9a:
27:a0:63:55:4e:a2:85:55:46:eb:30:8e:63:9f:99:
ba:0a:5b:cf:b2:f5:c0:cf:53:12:c5:bf:b4:9d:e3:
c4:f6:01:cc:1b:f8:bc:87:85:b4:8d:46:1d:52:1e:
44:39:44:1d:9c:80:73:dd:47:54:89:78:35:00:99:
41:17:e0:6e:31:de:c6:64:0c:47:97:cc:a2:30:67:
51:6a:f5:b1:4d:e7:9d:cc:16:6f:5a:67:65:e7:33:
08:27:81:03:f7:07:3f:b2:42:8d:2d:b8:40:4b:58:
66:bd:6c:a5:df:15:8a:fc:95:2e:b5:90:b3:52:d7:
33:c1:29:4e:73:56:23:7f:76:97:ad:1a:77:84:3c:
a5:b1:32:2b:a3:90:ec:6e:ea:c7:90:ff:ee:f2:b0:
6b:5d:4b:e3:d2:25:dc:10:3d:a7:77:da:46:72:5a:
f5:3e:71:c0:11:72:43:22:dc:3d:69:ed:4b:75:7a:
d7:32:d6:04:c5:8a:ee:11:75:af:c7:1f:7c:a2:9c:
4d:72:99:74:ff:6a:b5:05:4a:ba:db:1c:77:7d:d4:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:9D:8E:68:64:6C:3E:4C:DD:A6:8A:49:AA:29:66:28:EB:EA:AC
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:be:cb:35:e2:88:23:72:e8:4f:c0:c4:54:f7:0e:95:6d:35:
fd:d2:ff:26:3f:2e:e9:71:9f:f6:a0:99:9a:66:0f:22:aa:97:
9f:26:73:9d:9b:10:d3:ca:87:26:d3:ad:45:6b:c2:8a:14:51:
a2:80:d5:fb:fb:bc:3a:62:4a:7b:bd:fa:2c:a6:d6:bb:4e:f2:
f8:20:7d:74:8f:a4:6a:a2:cb:79:98:49:e9:a4:bc:5c:65:b5:
95:3d:bb:56:a1:23:dd:55:76:b7:b4:bd:6a:87:92:41:03:e5:
cc:ac:62:a8:b0:05:e2:df:0e:30:b5:e7:23:4c:c4:8a:e2:b9:
5b:87:d8:6f:3b:38:cb:57:4a:05:cd:da:58:64:c0:af:30:0c:
89:65:f7:b8:b7:79:cd:c4:fc:d5:ba:75:bc:67:6e:ef:f3:99:
c7:dc:a0:8d:9c:52:20:90:09:7b:f5:b2:f8:85:b3:e2:c4:b6:
c8:63:06:51:93:a7:a2:d0:8d:1c:1d:fd:23:04:71:d2:7e:6d:
74:e7:e6:e6:81:ae:8d:94:3c:42:7c:72:c7:75:c0:3e:85:69:
ac:0f:2b:2d:15:f5:d3:b6:21:dd:15:50:cc:7d:41:d3:bc:89:
f3:1b:2b:7c:74:83:90:dd:f1:de:79:7b:bd:e0:fb:cc:dc:ad:
32:c7:6c:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrwVNIkhkF9I8ZuYlsSILdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MmZjNjBkMzZlMjhiYjhkZjE0NWM4NGFjYWIxOWNmYTUz
YjAyNWEwHhcNMjYwOTI5MDYwMTUwWhcNMjYwOTMwMDYwMTUwWjAzMTEwLwYDVQQD
EyhkMzQ1OWQ4ZTY4NjQ2YzNlNGNkZGE2OGE0OWFhMjk2NjI4ZWJlYWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmowUmCtt7oOrWZxbL6HMuFaeyWF
Af4fAGc9E0f8lmrBjaz5NA0u1iCgK5onoGNVTqKFVUbrMI5jn5m6ClvPsvXAz1MS
xb+0nePE9gHMG/i8h4W0jUYdUh5EOUQdnIBz3UdUiXg1AJlBF+BuMd7GZAxHl8yi
MGdRavWxTeedzBZvWmdl5zMIJ4ED9wc/skKNLbhAS1hmvWyl3xWK/JUutZCzUtcz
wSlOc1Yjf3aXrRp3hDylsTIro5DsburHkP/u8rBrXUvj0iXcED2nd9pGclr1PnHA
EXJDItw9ae1LdXrXMtYExYruEXWvxx98opxNcpl0/2q1BUq62xx3fdSOewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNFnY5oZGw+TN2mikmqKWYo6+qsMB8GA1UdIwQY
MBaAFKUvxg024ou43xRchKyrGc+lOwJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTct
OWI0YTJkNWYzYTc2LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTctOWI0YTJkNWYzYTc2
LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbb7LNeKI
I3LoT8DEVPcOlW01/dL/Jj8u6XGf9qCZmmYPIqqXnyZznZsQ08qHJtOtRWvCihRR
ooDV+/u8OmJKe736LKbWu07y+CB9dI+kaqLLeZhJ6aS8XGW1lT27VqEj3VV2t7S9
aoeSQQPlzKxiqLAF4t8OMLXnI0zEiuK5W4fYbzs4y1dKBc3aWGTArzAMiWX3uLd5
zcT81bp1vGdu7/OZx9ygjZxSIJAJe/Wy+IWz4sS2yGMGUZOnotCNHB39IwRx0n5t
dOfm5oGujZQ8Qnxyx3XAPoVprA8rLRX107Yh3RVQzH1B07yJ8xsrfHSDkN3x3nl7
veD7zNytMsdsiQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:11:25 2026 by rpki-client