
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier: /yjqb5STRV4QUD4qxo6MmmwRiTgvzSK4HeQkueRa6UQ=
Subject key identifier: BB:17:1D:B2:B2:D3:24:78:E8:35:1E:42:A3:11:CF:92:DA:8A:8A:5A
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial: 01A14684589A6BFA189486478E1DE3A9EDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number: 14A3
Signing time: Fri 16 Oct 2026 21:00:40 +0000
Manifest this update: Fri 16 Oct 2026 21:00:40 +0000
Manifest next update: Sat 17 Oct 2026 21:00:40 +0000
Files and hashes: 1: _znAllcUhDUk5vaonzcpuUajgfo.roa (hash: qYtkv42oHHUxBFtOZdOaS3DV/fsi8LFPD+D7XK8B1uc=)
2: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: QbQ5/BeNaIGlMlV7TwZDmbmkQfzYe2OHsWXfqVwwVto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:84:58:9a:6b:fa:18:94:86:47:8e:1d:e3:a9:ed:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
Validity
Not Before: Oct 16 21:00:40 2026 GMT
Not After : Oct 17 21:00:40 2026 GMT
Subject: CN=bb171db2b2d32478e8351e42a311cf92da8a8a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:75:cf:14:84:53:5e:89:05:fa:9a:c8:56:
9f:e7:21:ef:df:4f:57:e2:40:c1:6c:ff:6d:3d:71:
01:b8:0d:f2:2d:ae:32:8f:e3:c5:7b:9f:9d:e2:25:
bc:51:cc:53:eb:1a:ad:d8:0c:65:34:ef:52:b6:e5:
2f:54:c0:50:14:e2:8a:bb:64:e8:e6:85:6a:59:fd:
ea:d1:a6:62:6f:66:d0:b6:66:76:db:87:18:b3:87:
04:dd:12:20:51:e4:06:69:b8:3a:d8:6a:84:ba:c7:
de:8e:7b:35:55:af:8c:92:0f:a6:18:54:28:69:2d:
89:a6:f8:65:72:53:a7:0e:4d:e5:1e:31:54:8d:0c:
a7:9e:40:3d:49:9e:10:5d:e3:70:f7:35:43:59:5d:
d8:d8:3b:ae:9f:0a:6e:b1:73:31:29:22:ea:be:13:
75:04:74:c1:67:80:26:a2:43:a9:2f:20:fb:20:85:
1a:67:a1:e1:b1:f8:18:42:84:42:3b:f5:bb:a7:d1:
bc:3a:98:aa:17:f3:12:30:d7:f5:f2:b3:b1:f2:8c:
10:ec:19:f1:5e:60:2a:3e:bf:fd:3a:d3:bc:85:58:
53:d7:52:6d:11:5e:f8:12:50:00:56:cd:d6:06:75:
ee:04:3d:dd:28:0f:6f:b2:bb:ed:a0:60:f8:1a:86:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:17:1D:B2:B2:D3:24:78:E8:35:1E:42:A3:11:CF:92:DA:8A:8A:5A
X509v3 Authority Key Identifier:
keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fb:d5:18:cc:6c:b0:57:b6:09:28:fd:f7:e0:df:d6:61:b4:
c1:25:12:0b:9a:f9:ff:82:9f:4e:c4:45:f2:e3:69:09:91:4c:
73:d8:c0:27:82:5e:c4:c9:ef:9d:58:07:c1:b7:42:93:bc:7c:
a0:f2:3b:d2:be:36:15:1e:2a:5b:8d:bb:68:a4:e2:45:c7:14:
36:1b:d2:ae:13:c6:c4:0b:13:07:73:70:dd:93:aa:0c:ba:77:
5a:37:ae:28:11:12:03:04:74:84:9d:77:07:fb:d9:e1:d3:4f:
5a:a5:f7:f1:9c:58:7c:61:18:4e:bb:2d:4a:34:be:54:03:0f:
b6:80:43:2e:fd:e1:07:20:86:11:bc:91:3e:d1:e7:e3:29:0c:
bb:97:01:c5:01:95:b1:a8:90:3d:7e:44:7a:48:a6:2d:70:5e:
7d:66:64:66:95:e1:a2:65:49:c7:42:0e:20:2f:44:9c:fd:cd:
49:00:45:09:da:cb:65:ca:32:84:47:d3:17:f1:72:1e:cf:a0:
70:b6:62:a9:ff:98:1e:a7:00:1f:b3:aa:65:c2:c1:4e:c0:2f:
7c:42:8e:4b:46:9b:53:79:55:c5:77:51:80:22:05:52:6b:be:
04:19:b4:17:7a:a6:5f:2b:c8:bd:99:93:42:d2:59:bd:ed:22:
2a:db:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:02:21 2026 by rpki-client