Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: p+J8XGn8L8HWX45aAbEEXPtl8sVZY06K5O1aZyvUKp4=
Subject key identifier: AD:D7:71:BB:CE:0B:5B:CB:9E:9F:C1:99:A1:50:76:48:D8:72:F7:1B
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 01A11A194F4BB3C692EB56638A204369CFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 095A
Signing time: Thu 08 Oct 2026 06:00:28 +0000
Manifest this update: Thu 08 Oct 2026 06:00:28 +0000
Manifest next update: Fri 09 Oct 2026 06:00:28 +0000
Files and hashes: 1: QcGVhryX4x7bfWIgC0U3JlcZMH0.roa (hash: Bat9oEb0UFv1zJKscTa1DuwM+XuSb3SLfJDIXRZHQRs=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: ESB04qcYnnH7mBtzALyd1XmjLRmcxCnYFd/YsylKb7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:4f:4b:b3:c6:92:eb:56:63:8a:20:43:69:cf:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Oct 8 06:00:28 2026 GMT
Not After : Oct 9 06:00:28 2026 GMT
Subject: CN=add771bbce0b5bcb9e9fc199a1507648d872f71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:78:29:8e:72:bf:19:14:4b:bf:0f:fc:44:
e9:75:a0:07:9c:91:03:e9:c0:29:cc:f2:07:c9:15:
85:67:a2:b1:2f:b5:2e:5c:b2:0e:25:7a:fd:93:ac:
95:59:11:2a:f8:63:04:1c:1b:99:1a:2b:5c:9e:b1:
48:36:ac:59:2f:cd:6b:4a:a9:66:bb:b5:55:4f:a7:
de:52:32:11:2b:03:1e:81:dc:c5:78:b8:7e:ab:d7:
4a:0b:f0:d4:39:f1:4b:d9:a5:cc:04:01:f4:a0:8f:
c1:21:35:e1:ed:ff:96:41:cd:a7:86:5d:5e:2f:36:
c9:3c:59:0c:2d:a4:8f:af:8a:4f:49:4f:ea:cb:2b:
1f:a4:27:96:01:5f:08:00:4d:00:5c:40:f8:65:79:
6d:3a:ec:87:00:6b:5f:26:02:c7:40:42:5d:90:30:
73:86:07:56:da:81:3c:47:f7:48:06:c3:20:78:58:
53:96:06:85:36:84:2b:75:d1:8b:f9:6a:75:0d:42:
fb:32:03:e5:7e:bb:37:0d:1a:55:47:c1:5e:05:31:
ca:65:43:c8:08:f3:bd:cb:c2:64:e6:b6:67:d5:83:
98:28:74:63:77:89:50:95:5b:9f:ec:2e:e2:c4:cf:
80:c2:52:01:de:f7:da:ab:d0:a3:c1:60:71:dd:e8:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D7:71:BB:CE:0B:5B:CB:9E:9F:C1:99:A1:50:76:48:D8:72:F7:1B
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:84:ec:ad:b3:af:71:25:b9:de:d2:ff:14:34:36:25:16:2c:
5d:52:61:46:dd:36:e3:96:e9:c3:be:13:6b:d3:7a:68:4b:e1:
39:d7:c2:a3:e7:6e:46:53:89:c6:1c:e6:99:9f:e5:3a:49:6e:
81:50:43:a6:c6:e9:27:b3:a8:d2:4d:a4:8e:dc:87:5f:7c:ea:
5c:cb:ba:fb:1c:ae:3b:5a:d8:66:86:84:53:da:6c:cf:6d:58:
43:b5:0d:64:ca:1d:3a:f7:74:8d:ce:b1:5d:08:7e:d0:c3:3d:
73:2c:a2:1a:b0:47:6d:46:a4:56:9f:77:2d:23:57:1b:41:f5:
7f:c9:46:74:2e:8e:c4:4f:de:c5:9f:92:f6:50:76:9a:9c:07:
7e:99:20:92:73:7f:b4:17:66:e5:03:3c:93:5f:d5:a5:cf:94:
eb:9b:5d:49:6e:a3:fe:e2:70:9d:f5:95:03:10:f2:2f:cf:23:
68:90:6a:25:44:3d:a7:5e:dc:d6:88:4c:d2:b5:06:b5:57:9e:
ef:c4:f9:86:37:72:e0:1b:69:6e:47:4c:be:a6:02:82:45:d9:
20:6d:eb:d1:27:10:70:22:4b:ab:54:3f:9d:dd:b6:b1:7b:95:
27:4e:30:22:7e:b5:5d:95:d5:54:36:3b:6b:28:47:24:80:1e:
2c:7b:51:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEaGU9Ls8aS61ZjiiBDac/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmU1Njk4YTEyNzk2NGNjMGU0Y2U4ZTNmZGM5ODVlMmEy
NWE2NjMwHhcNMjYxMDA4MDYwMDI4WhcNMjYxMDA5MDYwMDI4WjAzMTEwLwYDVQQD
EyhhZGQ3NzFiYmNlMGI1YmNiOWU5ZmMxOTlhMTUwNzY0OGQ4NzJmNzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdt4KY5yvxkUS78P/ETpdaAHnJED
6cApzPIHyRWFZ6KxL7UuXLIOJXr9k6yVWREq+GMEHBuZGitcnrFINqxZL81rSqlm
u7VVT6feUjIRKwMegdzFeLh+q9dKC/DUOfFL2aXMBAH0oI/BITXh7f+WQc2nhl1e
LzbJPFkMLaSPr4pPSU/qyysfpCeWAV8IAE0AXED4ZXltOuyHAGtfJgLHQEJdkDBz
hgdW2oE8R/dIBsMgeFhTlgaFNoQrddGL+Wp1DUL7MgPlfrs3DRpVR8FeBTHKZUPI
CPO9y8Jk5rZn1YOYKHRjd4lQlVuf7C7ixM+AwlIB3vfaq9CjwWBx3ei6mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3XcbvOC1vLnp/BmaFQdkjYcvcbMB8GA1UdIwQY
MBaAFID+VpihJ5ZMwOTOjj/cmF4qJaZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zZjlhZDEtNmJlNS00ZmE0LTllNTYt
ZDcwMWRjNjk4NjNmLzEvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zZjlhZDEtNmJlNS00ZmE0LTllNTYtZDcwMWRjNjk4NjNm
LzEvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4TsrbOv
cSW53tL/FDQ2JRYsXVJhRt0245bpw74Ta9N6aEvhOdfCo+duRlOJxhzmmZ/lOklu
gVBDpsbpJ7Oo0k2kjtyHX3zqXMu6+xyuO1rYZoaEU9psz21YQ7UNZModOvd0jc6x
XQh+0MM9cyyiGrBHbUakVp93LSNXG0H1f8lGdC6OxE/exZ+S9lB2mpwHfpkgknN/
tBdm5QM8k1/Vpc+U65tdSW6j/uJwnfWVAxDyL88jaJBqJUQ9p17c1ohM0rUGtVee
78T5hjdy4BtpbkdMvqYCgkXZIG3r0ScQcCJLq1Q/nd22sXuVJ04wIn61XZXVVDY7
ayhHJIAeLHtR9w==
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:43:12 2026 by rpki-client