Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: mLMFSx2/1BUOg8blQL6DlRjfgC4rd3x0OiII6GxmRqM=
Subject key identifier: D8:84:F1:1D:A2:C0:8A:2F:7D:85:3B:48:11:50:C9:3A:7E:25:73:01
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 01A0EC9D473941C069552946E96BAFE46C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0FA3
Signing time: Tue 29 Sep 2026 10:02:05 +0000
Manifest this update: Tue 29 Sep 2026 10:02:05 +0000
Manifest next update: Wed 30 Sep 2026 10:02:05 +0000
Files and hashes: 1: fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa (hash: LXNlsf10QtsQkHE8Tm9n4uZsh/ON6f1nhNppQ718O5s=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: lINqUOI4EG5fyTWtiMtfvLZL364mGKzY+4PTv/OY6vU=)
3: xG0VUDOknHsZasT5TDaZxzA4pvE.roa (hash: Xzghi2lIosJPiXM8pVY4mOf1fz9gQv7/1SCn9lu4mdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9d:47:39:41:c0:69:55:29:46:e9:6b:af:e4:6c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Sep 29 10:02:05 2026 GMT
Not After : Sep 30 10:02:05 2026 GMT
Subject: CN=d884f11da2c08a2f7d853b481150c93a7e257301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:71:69:a1:d9:fe:88:0a:c5:f2:40:f7:2d:
6b:d5:1f:39:53:af:fa:f5:2c:0d:9c:b0:54:cc:06:
52:1f:24:b2:80:fc:a4:3e:a4:e8:3b:ac:62:20:c2:
4d:8b:a6:9a:27:20:4f:d5:20:54:eb:3b:f7:ef:b8:
03:d5:52:3d:e7:e8:19:5c:5a:18:06:71:15:d1:11:
5e:30:54:9e:bc:ed:26:30:c1:0c:f4:2e:dd:4a:16:
15:db:f8:32:87:e4:1d:79:5c:7f:07:89:7f:71:c3:
5a:d3:25:c4:5e:cf:eb:6f:db:ba:35:69:0f:08:8a:
4b:dc:29:82:26:5b:40:ab:2b:1f:57:64:d0:a0:d7:
3d:f0:0e:88:cc:02:48:44:5e:28:54:f9:eb:6b:f5:
fe:fb:e1:d0:c9:30:2f:f5:7f:e8:49:4b:89:c7:3e:
b9:6f:3b:13:c9:bb:e7:de:a8:ac:3b:12:89:f3:dc:
f3:b0:ef:d9:28:e8:e2:e8:bc:d6:ab:cc:d3:fa:55:
66:9c:63:c3:e3:0f:0d:94:1b:41:a0:e4:8d:50:1c:
96:c8:28:31:5e:c3:59:cb:3e:86:2b:5a:5a:62:20:
86:fb:ab:5f:4b:e4:af:2e:cd:ea:7d:17:f3:7d:9b:
b5:04:81:93:78:a5:83:fd:2c:84:82:58:9c:f9:06:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:84:F1:1D:A2:C0:8A:2F:7D:85:3B:48:11:50:C9:3A:7E:25:73:01
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5c:a1:96:68:50:e8:46:ff:ac:00:b3:97:7c:0e:3e:34:83:
85:bf:73:c7:5d:54:46:3d:31:aa:a7:3a:a8:e8:d2:16:1d:97:
58:d2:e7:c7:27:f4:b8:96:bc:f1:e5:50:0c:59:b4:bd:61:83:
27:e0:54:be:cb:66:43:a4:ff:8e:7e:c4:37:55:4b:dc:0a:e7:
03:ae:de:81:45:7d:86:45:30:d9:96:11:ab:5b:c8:22:1b:ea:
1e:39:40:a5:82:74:02:30:c7:88:fc:31:ed:99:63:b3:d9:2d:
5f:cf:f8:03:46:bd:51:ac:0d:c3:88:e3:46:bf:e5:15:22:42:
d2:58:b3:57:c6:8b:af:86:48:7f:fc:06:5e:66:30:57:88:0d:
04:aa:98:f0:23:50:7d:94:83:31:e7:53:aa:9d:f7:04:e4:21:
8d:a1:84:2b:64:ab:35:10:a2:66:b3:ce:2d:63:6b:34:6f:33:
72:85:ed:d5:26:49:a5:97:78:8c:e5:3a:b6:48:54:1d:12:8e:
8f:6f:a4:21:b3:53:db:49:12:5f:d7:df:22:0b:32:d8:97:11:
12:6d:0d:7b:31:2b:1c:9a:13:70:8e:98:c5:bf:a6:5d:96:32:
ac:d8:19:1a:80:b2:c7:af:31:db:7b:e1:9c:fe:f2:f3:ec:8a:
8f:b5:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 18:26:48 2026 by rpki-client