Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File: gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier: CELzkX8RXaG2X7/xLsdVmpWO701Wb5t3knJCRQEuCZI=
Subject key identifier: E9:C7:DF:A7:1E:EB:1F:94:31:6E:31:A7:83:D4:F7:7B:77:5C:C2:B7
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 01A0F1FAAF45C7C86458F943AA79F4C2220E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number: 1AB5
Signing time: Wed 30 Sep 2026 11:02:12 +0000
Manifest this update: Wed 30 Sep 2026 11:02:12 +0000
Manifest next update: Thu 01 Oct 2026 11:02:12 +0000
Files and hashes: 1: KnCjXC0CtDz7MRhB0QGe_0O_Pbo.roa (hash: ifpbxLGdjsNwInt+UoHo2Q5p0zJ8zz1iOEpU4LLAFmo=)
2: WvR_PyZn7HQBLy1Van9znwED4dU.roa (hash: 5FqxeqmUCHn2vzUhg58G9qJL/lfqVbvp/uqG5bnLGIU=)
3: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: 72MIA60ph9iNL0MRCsI6o2RXet4UZjb1mRSEu5nuv6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:fa:af:45:c7:c8:64:58:f9:43:aa:79:f4:c2:22:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Sep 30 11:02:12 2026 GMT
Not After : Oct 1 11:02:12 2026 GMT
Subject: CN=e9c7dfa71eeb1f94316e31a783d4f77b775cc2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:e0:51:e5:e7:84:59:cd:2a:9a:d0:2a:b5:
0b:b6:ad:a3:02:01:d3:12:fa:34:16:fe:a7:21:d4:
e1:e4:43:b1:8d:fd:ae:bc:88:5e:0c:3f:5b:b6:fd:
47:67:be:32:a2:cf:60:30:98:7c:19:0c:e5:3c:88:
c1:1a:d8:e6:0c:f6:e5:89:16:40:0b:cc:1f:d6:be:
5a:16:e7:c9:17:00:07:c5:69:b6:4c:f4:b8:91:b4:
e1:1e:f8:98:b2:80:04:3a:0b:ca:63:d7:3b:77:e4:
4d:c5:e0:3c:13:6c:b1:65:2b:34:5d:1b:ba:77:04:
d0:35:14:b9:ee:d6:32:8e:9c:ba:f9:8b:f8:e4:27:
5b:77:50:5d:70:90:53:6e:c9:09:0e:cb:f9:07:6e:
86:30:50:fd:1f:da:4b:3f:5b:46:3f:97:47:c2:2d:
16:03:60:a8:93:a5:c2:02:7b:53:e1:10:97:18:ae:
01:35:c4:cd:ce:1d:e2:cc:37:58:b9:d0:07:b1:72:
e7:aa:8d:a3:cb:7c:68:1a:aa:86:2f:c5:61:54:ba:
93:c4:7c:1f:4d:79:51:aa:fa:1c:26:e9:66:ce:fe:
e5:a3:34:e1:19:42:80:1f:ef:07:6a:d1:52:1d:ac:
e5:4f:ec:67:3d:15:78:23:e6:0c:5f:68:5a:e5:ee:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C7:DF:A7:1E:EB:1F:94:31:6E:31:A7:83:D4:F7:7B:77:5C:C2:B7
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3d:f7:61:c9:ef:7c:80:c0:1f:a0:17:91:85:b7:0a:07:b4:
7b:db:c5:e9:61:ae:8f:25:f3:2b:50:56:9f:3c:77:4b:21:0a:
a7:28:ef:1c:3e:24:52:93:4f:c2:2c:1f:e8:86:6c:82:5d:fa:
a9:0b:26:8b:4f:7d:42:df:ef:a3:a7:a3:de:3a:02:9e:62:ae:
5f:56:3b:f1:98:81:c5:d1:f7:87:a6:e9:5e:a2:39:be:d5:ed:
76:f9:23:96:33:0f:3c:65:81:7b:b1:73:ab:a8:2d:4b:b7:89:
23:e6:7f:b6:fe:2d:9a:e0:c7:ff:be:9d:75:4c:31:7a:24:7a:
e4:ba:cf:0e:1b:73:1a:30:38:4a:6c:a7:9f:43:9a:0e:97:f0:
4f:aa:91:e3:37:95:c1:c3:01:02:64:cd:b7:e5:6a:4e:9a:fb:
a6:63:09:89:83:18:ee:de:c5:c0:e1:11:24:2b:ed:65:c7:3a:
74:d9:44:eb:ec:26:5f:bb:11:b0:15:b4:1a:7d:c9:ef:91:c9:
be:8e:6e:d3:27:0b:4f:2e:e3:bf:88:28:ac:fe:7c:23:bd:cb:
64:c3:79:f6:09:41:56:9e:10:96:5f:c0:78:db:89:ae:6e:ee:
b6:08:3c:aa:f7:fd:c4:b5:87:be:c9:2e:1e:a3:63:c1:ed:80:
85:f5:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:24:56 2026 by rpki-client