Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: mpWa0E7tBXtPrAL8/gjlGXYOrR0Bn9TbbIe+FVxX7vo=
Subject key identifier: 0B:68:FE:84:C0:A9:B9:AC:54:30:A3:C3:0A:B1:42:0C:83:97:EB:F6
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 01A0EC6613C68F63F208C83086AE183C0937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0E37
Signing time: Tue 29 Sep 2026 09:01:47 +0000
Manifest this update: Tue 29 Sep 2026 09:01:47 +0000
Manifest next update: Wed 30 Sep 2026 09:01:47 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: Jqi3I0QROrVy5a4uBhr6XlQBRdp7LEaZnwazfgBnEpE=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:66:13:c6:8f:63:f2:08:c8:30:86:ae:18:3c:09:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Sep 29 09:01:47 2026 GMT
Not After : Sep 30 09:01:47 2026 GMT
Subject: CN=0b68fe84c0a9b9ac5430a3c30ab1420c8397ebf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:82:ca:2b:d7:8b:9a:37:93:da:7c:07:2c:
e8:40:1b:f1:50:0e:25:9c:95:4c:35:91:fc:0f:de:
e5:15:29:21:07:ec:31:14:a3:7c:e5:2c:10:d9:af:
11:bb:4c:c4:85:24:46:47:73:96:38:d1:8e:58:69:
1d:7a:43:e1:a8:2a:79:99:17:d9:41:06:a8:54:d8:
f7:64:03:6f:3e:ca:4e:91:1a:e4:fd:14:33:23:71:
b8:68:50:b9:fa:b4:db:55:a9:0f:01:16:34:16:f8:
c9:7b:a7:ba:9c:1d:56:3c:e6:9b:b4:b8:0a:c1:3c:
13:b2:bf:cc:c4:fd:03:c2:af:50:f7:78:69:2d:fc:
8c:f7:10:d3:39:35:74:7c:3c:ce:71:e0:48:fd:e5:
df:ea:a6:6e:5c:e1:6e:da:5e:4a:f3:86:d6:2f:83:
62:b8:c2:d3:fe:1a:62:21:8e:4a:b0:da:18:da:7c:
00:7b:5d:a8:42:7e:74:42:0a:e6:cc:ba:76:3f:54:
2e:f0:34:93:d0:97:40:38:06:68:62:6e:7c:cb:50:
eb:15:da:55:bf:57:7d:27:e1:6b:22:f0:b6:2b:0b:
0d:b9:4f:78:7b:b6:f4:5a:89:07:b2:d6:b0:82:8e:
57:7c:94:d8:43:94:9f:db:28:02:bf:00:1a:9d:b5:
63:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:68:FE:84:C0:A9:B9:AC:54:30:A3:C3:0A:B1:42:0C:83:97:EB:F6
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:be:c7:f8:df:4e:93:05:cc:62:0c:b4:af:dd:60:73:ce:1d:
d1:e2:4d:71:0f:90:12:bc:fe:7e:10:0d:dc:20:41:72:8e:0c:
bc:67:4f:8b:86:a7:29:f6:84:6d:23:1a:26:60:bd:9c:60:af:
30:cc:72:d4:ec:21:21:f3:f5:6b:f4:96:83:72:99:76:9d:cc:
59:91:34:44:d5:b4:a4:0d:00:c3:49:f8:52:51:99:d6:de:10:
c9:c8:74:ac:8a:8b:26:e2:34:b3:da:4b:0c:53:60:ac:a6:cc:
cf:01:be:f6:1a:34:ba:17:f3:86:8c:65:99:60:d5:3a:53:77:
2b:47:7b:f7:8d:9d:e7:6a:df:e3:db:53:25:8e:bf:ec:01:5c:
05:32:f9:83:ab:9a:1a:56:7c:5a:11:94:fe:3a:d8:3c:c6:74:
f3:72:ef:de:7c:bc:25:fe:bc:59:cb:53:1f:3c:1a:56:79:2b:
c1:6a:cb:d2:32:a4:45:ca:29:70:73:2e:b0:49:96:6b:05:e0:
f3:71:1e:22:0f:b4:45:be:ef:8e:ff:79:ef:c1:76:6c:cf:fb:
0c:41:02:d1:e1:76:36:e7:ce:c3:4a:30:d9:a7:23:f3:d0:15:
fd:a5:11:1b:ca:70:8e:76:bc:e6:7d:31:f6:ee:c6:19:c8:f2:
dc:4f:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:25:11 2026 by rpki-client