Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: 8Bmamj5o0sv/AVSjT0MYJrasJp0G6l/SWXY7rLnykB8=
Subject key identifier: 8D:29:41:9A:C7:11:02:5D:8F:60:DE:67:22:9E:8B:4F:C8:DF:1E:9F
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 01A0DE72CAA8881E8A247F32B82999F8FF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 1A77
Signing time: Sat 26 Sep 2026 16:00:59 +0000
Manifest this update: Sat 26 Sep 2026 16:00:59 +0000
Manifest next update: Sun 27 Sep 2026 16:00:59 +0000
Files and hashes: 1: F2IHJrnPyRwbzKo1HP_xqBvLdvQ.roa (hash: FgszxDdrz1FfhJ+T4y5DQNjiDZnx4cEgXP5k1Bjw7eg=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: WaSgqnsw8uuc9SeNYwk+1+Y1nmMms1kgEpr4Vm/rWCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:72:ca:a8:88:1e:8a:24:7f:32:b8:29:99:f8:ff:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Sep 26 16:00:59 2026 GMT
Not After : Sep 27 16:00:59 2026 GMT
Subject: CN=8d29419ac711025d8f60de67229e8b4fc8df1e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:80:11:3f:92:85:64:20:a8:f5:5a:0e:2c:30:
96:b7:65:fb:51:d6:8f:0b:15:fc:0c:9f:3a:da:79:
61:a2:c7:b3:57:3b:68:7a:8d:94:b0:ef:44:c7:a0:
f5:0d:66:22:46:95:1b:c4:c3:24:8e:89:05:fd:e6:
c9:50:d9:72:82:22:2d:b5:04:14:46:04:c3:9d:07:
fe:ba:90:15:34:c5:99:9e:37:5d:11:d5:9a:c8:96:
d8:db:93:a4:c0:0d:14:be:ee:ba:d4:2b:fd:4d:5f:
bc:12:a9:e0:f3:fb:5a:1c:fb:b9:11:82:ef:44:10:
9a:e5:d6:5a:92:c9:73:3e:7f:c6:a8:71:44:d4:5d:
8b:17:72:34:a6:25:be:87:32:04:4c:9e:15:5f:ec:
9a:c6:e2:6d:78:c9:47:a7:9a:28:11:4a:90:ba:60:
9b:78:32:34:f7:99:b5:db:2e:96:cd:6b:02:64:e9:
15:34:80:0c:2b:47:11:99:b0:0b:54:c8:91:fb:b0:
06:22:0b:72:1e:c1:8b:9a:e5:bc:09:c7:69:b6:ab:
f9:4e:f5:9d:8c:0b:47:70:fd:78:6f:f6:d8:e7:cf:
0d:45:97:9c:e3:a4:e0:28:d1:39:e0:c8:a4:47:9e:
b6:80:4a:6e:2b:81:59:5a:a8:53:d8:bb:e6:b0:1f:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:29:41:9A:C7:11:02:5D:8F:60:DE:67:22:9E:8B:4F:C8:DF:1E:9F
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:50:39:b6:35:00:12:4a:36:36:36:d0:82:9b:cf:11:c0:3d:
5e:93:4a:39:b9:32:de:be:8e:b7:99:c8:12:aa:f0:79:67:05:
57:c9:6b:12:e1:a2:f7:a4:cb:db:09:d7:a8:51:d2:97:64:20:
0a:2b:d5:7a:4a:91:1f:d0:4b:e9:b0:74:26:31:33:d1:a2:f8:
d2:0c:81:b9:98:06:22:cf:dc:92:0d:ec:d8:f6:c6:d1:ba:ba:
fe:4a:68:c3:00:d1:89:e5:c1:e2:b5:7c:00:97:6d:82:06:eb:
7d:bc:84:cb:e1:de:68:a6:95:8b:e6:dd:99:64:ce:32:1e:9a:
36:86:33:94:2c:53:31:18:80:8c:99:56:b3:5f:1e:f3:30:06:
d5:db:a4:95:2e:37:49:f4:b9:80:06:3e:1a:c5:9d:e1:fc:90:
f1:3a:9f:df:30:55:aa:a1:5a:31:8c:1c:fc:c6:91:eb:b2:89:
83:cf:40:2c:82:e3:c2:b5:26:a8:5f:81:3e:5a:11:ff:f1:09:
a9:1f:be:0f:84:8d:46:cf:a5:0f:dc:d3:8c:a4:5a:47:34:79:
52:2e:77:23:0e:b0:35:d0:2b:a8:5f:2a:6c:32:cc:33:8d:e5:
1b:01:c4:30:63:9c:c4:15:d9:43:27:14:2f:42:31:69:d2:d1:
dc:0a:5d:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDecsqoiB6KJH8yuCmZ+P9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDZkOTk0YTEyMTkyNTdhM2NlYzllZDkxY2QxODliYzNk
OTNiMGIwHhcNMjYwOTI2MTYwMDU5WhcNMjYwOTI3MTYwMDU5WjAzMTEwLwYDVQQD
Eyg4ZDI5NDE5YWM3MTEwMjVkOGY2MGRlNjcyMjllOGI0ZmM4ZGYxZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YARP5KFZCCo9VoOLDCWt2X7UdaP
CxX8DJ862nlhosezVztoeo2UsO9Ex6D1DWYiRpUbxMMkjokF/ebJUNlygiIttQQU
RgTDnQf+upAVNMWZnjddEdWayJbY25OkwA0Uvu661Cv9TV+8Eqng8/taHPu5EYLv
RBCa5dZakslzPn/GqHFE1F2LF3I0piW+hzIETJ4VX+yaxuJteMlHp5ooEUqQumCb
eDI095m12y6WzWsCZOkVNIAMK0cRmbALVMiR+7AGIgtyHsGLmuW8Ccdptqv5TvWd
jAtHcP14b/bY588NRZec46TgKNE54MikR562gEpuK4FZWqhT2LvmsB/0GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0pQZrHEQJdj2DeZyKei0/I3x6fMB8GA1UdIwQY
MBaAFIEG2ZShIZJXo87J7ZHNGJvD2TsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEt
YjM1NGI3OGNjOTY5LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEtYjM1NGI3OGNjOTY5
LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFA5tjUA
Eko2NjbQgpvPEcA9XpNKObky3r6Ot5nIEqrweWcFV8lrEuGi96TL2wnXqFHSl2Qg
CivVekqRH9BL6bB0JjEz0aL40gyBuZgGIs/ckg3s2PbG0bq6/kpowwDRieXB4rV8
AJdtggbrfbyEy+HeaKaVi+bdmWTOMh6aNoYzlCxTMRiAjJlWs18e8zAG1duklS43
SfS5gAY+GsWd4fyQ8Tqf3zBVqqFaMYwc/MaR67KJg89ALILjwrUmqF+BPloR//EJ
qR++D4SNRs+lD9zTjKRaRzR5Ui53Iw6wNdArqF8qbDLMM43lGwHEMGOcxBXZQycU
L0IxadLR3Apd4w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:50:15 2026 by rpki-client