Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier: tLJ74Xgsu3wf9yyzxVi6xDZ+0YXJYBkSFgJodlZeMiI=
Subject key identifier: 0F:8C:C9:49:77:18:3C:1F:FA:D4:D7:9F:22:3F:2F:9A:0A:DB:B6:0C
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial: 01A0E99C4D5DB7541236CF284B0C4970E414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number: 1A77
Signing time: Mon 28 Sep 2026 20:02:09 +0000
Manifest this update: Mon 28 Sep 2026 20:02:09 +0000
Manifest next update: Tue 29 Sep 2026 20:02:09 +0000
Files and hashes: 1: RhRiCLu3V9nkc3JU2Ejeh0r6z3A.roa (hash: /FQPmAw2IpNKrgFt00mOhh1pZSgkOc3LG4d41GRZWyA=)
2: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: RqDmynwCdOkgH4GLcXh6/NhHABSoW1zscgcJcxOKTcE=)
3: pZJL0eNksfaHvSe4LIDTMSzvlCY.roa (hash: w14PGsWnAom/plqZ5dIIMe8RiKKn/dXWpdjVTgkHyCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 20:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9c:4d:5d:b7:54:12:36:cf:28:4b:0c:49:70:e4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Validity
Not Before: Sep 28 20:02:09 2026 GMT
Not After : Sep 29 20:02:09 2026 GMT
Subject: CN=0f8cc94977183c1ffad4d79f223f2f9a0adbb60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:d9:8c:f5:dc:3a:99:ab:d9:ad:09:75:cc:
c9:e7:c3:c5:70:ea:e5:7a:f9:34:d0:c3:53:20:10:
f8:58:a1:31:c9:21:4d:66:ab:26:92:0b:9a:be:c7:
5b:a8:15:44:d6:bd:1b:cf:cd:9d:27:18:54:bb:77:
01:19:79:21:f1:ec:cd:f5:5f:ec:3f:3d:e6:ce:63:
f6:1e:ab:bc:9e:82:dd:be:3b:d7:e4:f8:ee:17:5c:
af:d7:fd:78:a2:50:3b:c3:cc:48:04:d6:45:68:93:
fd:d9:01:aa:9c:17:d1:8c:ce:49:57:20:97:e2:a3:
50:d2:0a:bc:a8:7f:df:dd:fb:cf:13:b7:b2:6a:be:
be:5c:bb:9a:80:36:76:1a:45:1a:f9:12:3b:c9:ac:
21:67:4b:cd:d5:85:b4:58:09:a6:ef:6b:55:75:0f:
a5:07:d9:78:49:c1:6c:f7:d6:dc:6f:83:1a:32:d3:
ad:f0:0f:86:cf:79:84:63:1d:12:ee:9e:d4:b7:2a:
fb:3c:9d:23:72:18:52:e5:3c:87:46:24:f6:22:71:
56:ad:4e:8d:47:61:e9:31:0f:aa:8e:dc:d5:26:c8:
f2:84:a2:de:08:e2:e4:1b:71:76:4d:99:a8:dc:df:
eb:34:7d:ba:06:71:21:ef:ea:89:ab:2d:b0:80:9e:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8C:C9:49:77:18:3C:1F:FA:D4:D7:9F:22:3F:2F:9A:0A:DB:B6:0C
X509v3 Authority Key Identifier:
keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6c:db:79:42:c7:9d:d5:23:54:20:0f:fd:73:ea:09:7c:30:
30:f8:05:1e:20:55:8c:60:3c:ee:48:78:fa:07:de:71:19:4d:
1f:b2:a7:c0:0d:61:74:10:67:56:21:55:b5:bb:b6:55:3c:d3:
69:47:15:7f:cb:6a:04:78:b2:fb:cf:f8:87:de:41:6b:58:48:
59:c7:f0:1c:a7:c9:0c:10:da:1d:9d:ef:3e:55:7e:c9:29:bf:
4c:27:e6:a9:1a:2f:59:2b:2b:5c:6c:94:79:88:b4:83:10:ef:
85:af:d5:35:ad:16:3e:42:d9:36:45:88:d9:90:e8:95:e7:3f:
6e:5d:53:1a:8c:ff:c7:64:6f:51:61:3a:d4:3b:3b:80:bf:6f:
0b:93:47:5a:1a:6e:03:7d:ff:fb:f6:38:3d:ec:81:85:7e:38:
4a:69:d4:2c:b6:dc:41:8c:71:d1:a8:c4:f1:3a:ce:27:2e:4e:
94:20:3b:a9:36:9a:85:b8:a4:f7:e0:0b:e5:73:45:9e:3f:39:
55:6c:ff:f2:8d:ea:97:a5:41:03:44:08:b1:64:5f:6c:df:42:
a9:f4:b1:18:94:99:22:4f:d0:ea:eb:77:67:d9:06:b6:e2:a9:
a0:8e:f4:99:6a:db:3b:f2:58:6c:9c:90:ce:e1:6d:0f:7d:79:
ca:f0:88:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpnE1dt1QSNs8oSwxJcOQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNDZkZThjZWMwMWQwNTI1MzZjMGYwOGRmZTdhOGI1M2Y5
YWFlYzIwHhcNMjYwOTI4MjAwMjA5WhcNMjYwOTI5MjAwMjA5WjAzMTEwLwYDVQQD
EygwZjhjYzk0OTc3MTgzYzFmZmFkNGQ3OWYyMjNmMmY5YTBhZGJiNjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP7ZjPXcOpmr2a0JdczJ58PFcOrl
evk00MNTIBD4WKExySFNZqsmkguavsdbqBVE1r0bz82dJxhUu3cBGXkh8ezN9V/s
Pz3mzmP2Hqu8noLdvjvX5PjuF1yv1/14olA7w8xIBNZFaJP92QGqnBfRjM5JVyCX
4qNQ0gq8qH/f3fvPE7eyar6+XLuagDZ2GkUa+RI7yawhZ0vN1YW0WAmm72tVdQ+l
B9l4ScFs99bcb4MaMtOt8A+Gz3mEYx0S7p7Utyr7PJ0jchhS5TyHRiT2InFWrU6N
R2HpMQ+qjtzVJsjyhKLeCOLkG3F2TZmo3N/rNH26BnEh7+qJqy2wgJ6xJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+MyUl3GDwf+tTXnyI/L5oK27YMMB8GA1UdIwQY
MBaAFIFG3ozsAdBSU2wPCN/nqLU/mq7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjhkOWEtOGRkYi00NGIzLTlhYzAt
Y2Q1NzJmZDA0NGVlLzEvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kZjhkOWEtOGRkYi00NGIzLTlhYzAtY2Q1NzJmZDA0NGVl
LzEvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmzbeULH
ndUjVCAP/XPqCXwwMPgFHiBVjGA87kh4+gfecRlNH7KnwA1hdBBnViFVtbu2VTzT
aUcVf8tqBHiy+8/4h95Ba1hIWcfwHKfJDBDaHZ3vPlV+ySm/TCfmqRovWSsrXGyU
eYi0gxDvha/VNa0WPkLZNkWI2ZDolec/bl1TGoz/x2RvUWE61Ds7gL9vC5NHWhpu
A33/+/Y4PeyBhX44SmnULLbcQYxx0ajE8TrOJy5OlCA7qTaahbik9+AL5XNFnj85
VWz/8o3ql6VBA0QIsWRfbN9CqfSxGJSZIk/Q6ut3Z9kGtuKpoI70mWrbO/JYbJyQ
zuFtD315yvCI+A==
-----END CERTIFICATE-----
Generated at Tue Sep 29 08:51:52 2026 by rpki-client