Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: XBGIXEd8xtnWcqSUTtkAUFuM/6rcK72Rw+PhY/CWmjY=
Subject key identifier: A0:4C:C2:9F:1B:34:61:9B:50:73:8B:75:D8:05:D6:0A:D6:AF:26:86
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 019F95EDE9C7364869BB825552650EFA34F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 0891
Signing time: Fri 24 Jul 2026 21:00:24 +0000
Manifest this update: Fri 24 Jul 2026 21:00:24 +0000
Manifest next update: Sat 25 Jul 2026 21:00:24 +0000
Files and hashes: 1: QcGVhryX4x7bfWIgC0U3JlcZMH0.roa (hash: Bat9oEb0UFv1zJKscTa1DuwM+XuSb3SLfJDIXRZHQRs=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: DlvVZlx3tHL5POhbGri2ZRMi1KoMouFQ1+BQzvqvTxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ed:e9:c7:36:48:69:bb:82:55:52:65:0e:fa:34:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Jul 24 21:00:24 2026 GMT
Not After : Jul 25 21:00:24 2026 GMT
Subject: CN=a04cc29f1b34619b50738b75d805d60ad6af2686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:d0:e1:8f:40:76:f0:01:51:c3:e6:a9:1f:
58:1f:31:0d:76:38:01:7f:57:9a:e2:0d:ac:26:7a:
db:c1:de:d6:3a:fc:99:1a:23:84:c4:fd:ac:de:01:
c3:9c:40:cf:78:da:7f:69:e9:d9:8f:a0:30:c5:ed:
a0:5f:c0:34:d5:de:31:a5:fa:bc:91:54:55:c1:c1:
a2:e2:6b:02:09:1b:a4:58:c8:97:7e:5b:e0:86:ec:
84:e9:97:6e:c2:5e:02:a3:8c:dc:c2:80:b2:58:1a:
86:8c:12:a3:37:84:9e:1d:7a:62:36:39:21:ac:b3:
3b:89:b7:cd:89:34:41:ee:ea:6e:a7:53:de:30:aa:
eb:43:b2:dc:e7:17:84:db:b6:7b:24:a7:d3:75:30:
1b:be:80:c8:2d:26:b0:70:2b:c5:68:32:94:3c:d7:
ff:98:e5:09:21:75:8e:18:94:eb:db:66:2e:57:8c:
d3:e8:48:80:4a:d3:ec:0a:41:3d:23:23:ed:be:ad:
d9:5b:70:30:a1:f2:34:31:23:4f:84:05:83:87:5c:
b3:88:ba:bf:5c:0d:3b:95:5b:d7:f2:89:c2:f6:bb:
9d:0b:f3:c4:f6:4f:e9:41:e4:44:4c:ce:06:2a:86:
37:b7:80:fc:16:99:4f:19:ed:ee:21:7a:56:b5:94:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4C:C2:9F:1B:34:61:9B:50:73:8B:75:D8:05:D6:0A:D6:AF:26:86
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e5:dd:a1:b8:c0:cd:48:13:16:f1:9a:1d:a7:bb:51:62:cd:
6d:e4:73:47:07:93:63:8d:8a:2e:b2:e4:99:8e:bf:23:01:6a:
fe:89:d5:a2:5c:05:76:65:66:c3:5f:a2:03:d4:35:45:1d:92:
e9:40:7f:ae:c7:ac:de:37:db:93:f4:03:06:ca:67:e5:23:f1:
44:42:45:23:1e:42:9e:52:0f:43:1f:a5:df:26:b2:02:99:47:
59:29:f0:f1:59:3e:1d:d9:d3:00:d9:3c:6b:dc:2c:e7:b0:4d:
61:cd:39:19:f9:60:fd:73:35:d2:df:6d:bb:1a:19:57:2d:8c:
2a:bd:36:be:00:bc:19:2c:b1:e0:73:9a:94:43:4c:da:92:95:
93:06:eb:39:9f:6e:d4:0b:89:1b:40:4d:ab:dd:d8:13:c4:07:
56:a4:1b:b9:1b:8e:8c:80:8b:65:f9:dc:d0:71:29:23:77:2d:
f7:5d:fd:a1:e2:81:5f:5b:57:39:5d:15:27:11:c8:cd:5f:05:
85:5c:0e:b9:24:d4:4e:84:ba:0e:67:06:f3:d4:8c:36:58:15:
83:01:05:ea:c3:94:87:80:10:b0:cb:72:b3:aa:e2:be:6d:e4:
ac:94:bd:2f:10:3f:60:7d:89:78:ac:7d:0d:5b:5a:d8:ca:0b:
cd:55:dd:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+V7enHNkhpu4JVUmUO+jT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmU1Njk4YTEyNzk2NGNjMGU0Y2U4ZTNmZGM5ODVlMmEy
NWE2NjMwHhcNMjYwNzI0MjEwMDI0WhcNMjYwNzI1MjEwMDI0WjAzMTEwLwYDVQQD
EyhhMDRjYzI5ZjFiMzQ2MTliNTA3MzhiNzVkODA1ZDYwYWQ2YWYyNjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPfQ4Y9AdvABUcPmqR9YHzENdjgB
f1ea4g2sJnrbwd7WOvyZGiOExP2s3gHDnEDPeNp/aenZj6Awxe2gX8A01d4xpfq8
kVRVwcGi4msCCRukWMiXflvghuyE6Zduwl4Co4zcwoCyWBqGjBKjN4SeHXpiNjkh
rLM7ibfNiTRB7upup1PeMKrrQ7Lc5xeE27Z7JKfTdTAbvoDILSawcCvFaDKUPNf/
mOUJIXWOGJTr22YuV4zT6EiAStPsCkE9IyPtvq3ZW3AwofI0MSNPhAWDh1yziLq/
XA07lVvX8onC9rudC/PE9k/pQeRETM4GKoY3t4D8FplPGe3uIXpWtZRBHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBMwp8bNGGbUHOLddgF1grWryaGMB8GA1UdIwQY
MBaAFID+VpihJ5ZMwOTOjj/cmF4qJaZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zZjlhZDEtNmJlNS00ZmE0LTllNTYt
ZDcwMWRjNjk4NjNmLzEvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zZjlhZDEtNmJlNS00ZmE0LTllNTYtZDcwMWRjNjk4NjNm
LzEvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuXdobjA
zUgTFvGaHae7UWLNbeRzRweTY42KLrLkmY6/IwFq/onVolwFdmVmw1+iA9Q1RR2S
6UB/rses3jfbk/QDBspn5SPxREJFIx5CnlIPQx+l3yayAplHWSnw8Vk+HdnTANk8
a9ws57BNYc05Gflg/XM10t9tuxoZVy2MKr02vgC8GSyx4HOalENM2pKVkwbrOZ9u
1AuJG0BNq93YE8QHVqQbuRuOjICLZfnc0HEpI3ct9139oeKBX1tXOV0VJxHIzV8F
hVwOuSTUToS6DmcG89SMNlgVgwEF6sOUh4AQsMtys6rivm3krJS9LxA/YH2JeKx9
DVta2MoLzVXdoA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 06:57:13 2026 by rpki-client