Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: UwbGqNX3fkZGty3aTZLtPI58PzPn03FhofEwLrFhMzs=
Subject key identifier: C5:32:80:D6:6F:1C:20:A7:FD:81:C4:2F:1C:7A:C7:71:51:85:5D:06
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 01A0EEC1E8C11955034C7859393C1EB69024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 1A7E
Signing time: Tue 29 Sep 2026 20:01:20 +0000
Manifest this update: Tue 29 Sep 2026 20:01:20 +0000
Manifest next update: Wed 30 Sep 2026 20:01:20 +0000
Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: oI6vByewB8+ENFNDw64Trus0nmRjwCuloSedLqJcaME=)
2: xQLXNMGtJIEmbmsa0yimk8gh264.roa (hash: 681EcZV9/rvtEn+cL3EpnhUhg/0vWlpEsupf9xZzDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:c1:e8:c1:19:55:03:4c:78:59:39:3c:1e:b6:90:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Sep 29 20:01:20 2026 GMT
Not After : Sep 30 20:01:20 2026 GMT
Subject: CN=c53280d66f1c20a7fd81c42f1c7ac77151855d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:16:7f:b9:3f:08:0c:33:8c:1d:53:1a:1f:d4:
bf:f1:ff:4b:db:07:a4:29:73:9f:c7:cb:a1:ea:27:
ee:93:92:89:64:c9:dd:1e:f9:80:80:72:7f:f1:9d:
62:7a:18:2d:9b:07:7a:36:5d:a5:88:f8:a1:6a:24:
3b:13:07:bf:87:c4:be:d5:3d:a8:59:da:e8:72:cc:
6e:39:70:0f:ee:c4:99:25:8e:da:9a:a8:5d:47:c8:
a4:66:fc:cc:c6:3d:c6:94:89:8d:0f:f5:87:75:0a:
9a:7f:f8:33:20:6c:cf:40:67:72:0f:19:63:4f:76:
2f:08:87:ba:3a:f6:fe:b5:ec:af:5b:ce:b7:cb:19:
ab:19:b5:36:9e:f5:1a:2b:06:34:e4:33:aa:81:a7:
a4:ec:54:74:4d:3f:0d:9b:16:f9:1d:95:7f:6a:92:
64:5c:d7:70:4d:f5:aa:14:47:79:de:51:64:5c:b8:
0f:0e:32:de:69:c0:3c:f2:da:29:a2:13:f9:fa:22:
5e:75:08:7f:15:1c:cd:eb:77:f8:f6:32:c2:c8:4f:
80:2a:0b:a5:60:50:13:68:a7:fc:08:37:3a:a5:7a:
db:5e:03:b5:a7:7d:d5:a5:f2:58:89:bd:40:ab:55:
ad:65:a0:6c:a3:85:92:5c:eb:44:a8:6e:38:83:b5:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:32:80:D6:6F:1C:20:A7:FD:81:C4:2F:1C:7A:C7:71:51:85:5D:06
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e1:55:27:e4:10:4a:33:8d:62:00:3e:d0:32:94:f1:4e:c8:
63:8c:29:74:5e:d9:19:f0:51:dc:be:63:86:75:d4:e0:43:d2:
d7:77:b7:d8:60:ac:54:bd:e8:49:b3:32:d5:83:ec:14:dc:b8:
fc:fc:d6:b9:2e:78:2b:dc:84:e0:7c:fc:88:b3:c7:14:fe:9a:
f2:88:ce:be:25:e5:b9:4a:a4:2d:79:a3:3c:11:7f:58:12:83:
75:ed:76:d8:1a:a8:10:2c:23:bb:36:c5:a2:8a:a1:4f:c4:bb:
e7:90:d4:62:0d:ea:8f:51:d2:86:85:38:62:9d:d7:c0:00:1e:
6b:f8:a2:c2:d3:b6:f8:6c:2f:0a:83:6b:00:70:65:f2:af:f6:
bf:cb:f7:ef:fc:06:35:fc:6a:32:8f:c4:76:24:bf:e6:9b:39:
9a:b2:a2:2a:c9:3a:46:98:72:dc:8b:ff:19:e9:23:6d:d9:0c:
37:c7:8b:19:c3:ab:d5:1f:de:5b:cb:3d:d2:01:61:dc:7f:f8:
3f:d3:c7:b2:84:9a:78:a9:4e:fa:b8:a4:59:c3:e0:a3:e9:74:
37:d5:29:de:dc:04:d0:22:6a:da:fb:25:e4:a2:46:06:15:c3:
ed:2c:af:d9:ca:d6:71:04:e7:f2:61:0a:97:58:8c:6a:0c:69:
22:bd:de:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDuwejBGVUDTHhZOTwetpAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYWI0YzA5NDViNzM4ZWRkYTA1ODNhMjc0YjYzYzFiODY3
M2E2MzAwHhcNMjYwOTI5MjAwMTIwWhcNMjYwOTMwMjAwMTIwWjAzMTEwLwYDVQQD
EyhjNTMyODBkNjZmMWMyMGE3ZmQ4MWM0MmYxYzdhYzc3MTUxODU1ZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxZ/uT8IDDOMHVMaH9S/8f9L2wek
KXOfx8uh6ifuk5KJZMndHvmAgHJ/8Z1iehgtmwd6Nl2liPihaiQ7Ewe/h8S+1T2o
WdrocsxuOXAP7sSZJY7amqhdR8ikZvzMxj3GlImND/WHdQqaf/gzIGzPQGdyDxlj
T3YvCIe6Ovb+teyvW863yxmrGbU2nvUaKwY05DOqgaek7FR0TT8Nmxb5HZV/apJk
XNdwTfWqFEd53lFkXLgPDjLeacA88topohP5+iJedQh/FRzN63f49jLCyE+AKgul
YFATaKf8CDc6pXrbXgO1p33VpfJYib1Aq1WtZaBso4WSXOtEqG44g7U07wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUygNZvHCCn/YHELxx6x3FRhV0GMB8GA1UdIwQY
MBaAFICrTAlFtzjt2gWDonS2PBuGc6YwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mNmZlZTYtYzBhMi00YTAzLWE5ODEt
ZjVmZGEwZWEzMDBkLzEvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9mNmZlZTYtYzBhMi00YTAzLWE5ODEtZjVmZGEwZWEzMDBk
LzEvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+FVJ+QQ
SjONYgA+0DKU8U7IY4wpdF7ZGfBR3L5jhnXU4EPS13e32GCsVL3oSbMy1YPsFNy4
/PzWuS54K9yE4Hz8iLPHFP6a8ojOviXluUqkLXmjPBF/WBKDde122BqoECwjuzbF
ooqhT8S755DUYg3qj1HShoU4Yp3XwAAea/iiwtO2+GwvCoNrAHBl8q/2v8v37/wG
NfxqMo/EdiS/5ps5mrKiKsk6Rphy3Iv/GekjbdkMN8eLGcOr1R/eW8s90gFh3H/4
P9PHsoSaeKlO+rikWcPgo+l0N9Up3twE0CJq2vsl5KJGBhXD7Syv2crWcQTn8mEK
l1iMagxpIr3ehw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 05:59:43 2026 by rpki-client