Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
File: GpvZxsEozNlD9_dyKSLGb2a07dU.mft (raw, json)
Hash identifier: h3iJAZfa9MHKFcYHmEEVRY195boItHblG1NWCAMLaJQ=
Subject key identifier: 15:6D:9E:2A:75:D2:01:D7:C2:A4:71:F6:0C:8A:84:34:06:5E:66:F0
Authority key identifier: 1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
Certificate issuer: /CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Certificate serial: 01A1562F123A3F44A9D297A692632FDB010D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
Manifest number: 0345
Signing time: Mon 19 Oct 2026 22:01:27 +0000
Manifest this update: Mon 19 Oct 2026 22:01:27 +0000
Manifest next update: Tue 20 Oct 2026 22:01:27 +0000
Files and hashes: 1: 1-oyfhNLyYue13tRFCKo0IPxmM24.roa (hash: oPm09IIbFaa5Ai2vo1N5k2H9XoBpkLq4SkDxgfWP1PU=)
2: GaCNO5uvEPZSSwfLA86l-W_3H7o.roa (hash: Q+4U2eLN8lYe4XRd9553vr9mNVPmss4+izmTxQVodwk=)
3: GpvZxsEozNlD9_dyKSLGb2a07dU.crl (hash: 6cRsnL/RAzk9q4IQl0tAd3nDkWu8+q3lcyped3AE8GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:2f:12:3a:3f:44:a9:d2:97:a6:92:63:2f:db:01:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Validity
Not Before: Oct 19 22:01:27 2026 GMT
Not After : Oct 20 22:01:27 2026 GMT
Subject: CN=156d9e2a75d201d7c2a471f60c8a8434065e66f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:a8:a9:9c:75:a3:0a:98:e8:2e:30:bb:2f:
14:9d:20:22:3f:b2:8d:45:fc:df:26:03:6c:6a:c5:
1a:2a:7e:b7:4c:a4:bb:2b:d3:92:02:68:93:5c:79:
9b:2e:4e:a0:19:f6:8a:1a:c6:e5:17:72:ab:7d:0f:
76:96:de:bb:bb:f5:d7:06:2b:9c:82:ad:f3:06:f9:
ad:26:10:61:37:6a:af:dd:86:8b:d3:c3:12:55:9f:
eb:3b:bb:fc:1e:a4:69:77:b5:df:8c:cb:3b:36:ad:
e7:c7:38:96:13:34:6f:61:1f:41:23:f0:19:66:dd:
a8:f3:a6:38:54:37:47:7d:51:c1:ec:53:97:c4:aa:
a2:45:2f:44:47:d8:c2:23:b1:be:1a:be:f4:f8:66:
b1:c1:05:ff:b9:7c:27:02:41:d8:3c:0f:58:17:f8:
aa:21:1a:e5:fa:ad:44:bf:29:60:4f:8f:ac:bf:20:
d4:93:73:78:d3:73:d7:98:58:10:06:a4:45:67:8b:
31:d7:74:09:1c:ed:b5:e2:ea:5a:c8:36:10:68:55:
1d:6b:50:27:4a:5d:a9:24:e6:de:da:81:59:ec:24:
2c:35:72:3b:59:93:73:82:54:2f:91:d5:33:48:31:
6d:40:de:29:59:9d:69:a3:c2:e0:5a:a3:46:cd:86:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:9E:2A:75:D2:01:D7:C2:A4:71:F6:0C:8A:84:34:06:5E:66:F0
X509v3 Authority Key Identifier:
keyid:1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b5:c6:53:fa:3c:ad:f8:c8:4c:74:45:0f:c5:6b:18:67:af:
ff:2a:aa:1a:69:f0:0d:14:1e:45:9d:ee:b5:a4:79:c1:66:3e:
da:6c:94:52:b2:d5:1b:d6:53:c3:e4:46:d6:ae:14:38:79:3c:
1c:0e:d7:c6:45:36:a4:7d:58:62:89:f2:ea:dc:ea:86:2f:d4:
57:a4:7f:ae:94:33:29:37:41:5a:3d:d5:24:ed:92:8c:98:92:
f8:39:08:41:05:ee:e6:90:f0:e6:b9:c2:89:ba:f9:d0:85:66:
d6:2f:82:1a:99:4e:06:a7:1d:32:92:ca:26:9d:2f:4e:b6:cd:
11:1a:9f:81:67:a6:70:2b:fa:93:a0:67:98:fa:c5:51:f5:17:
03:09:7e:f3:49:b3:fb:84:20:19:44:f1:2e:f1:85:42:eb:ad:
31:16:a5:0a:07:5d:44:93:00:70:84:bc:ba:bf:ed:ec:a6:10:
81:e3:4c:71:93:2d:7b:d3:98:70:f9:fc:96:c4:4a:28:93:07:
b7:bb:83:08:7b:28:6d:0e:1e:1d:bc:7d:3e:56:40:92:db:0c:
b9:ce:45:3c:61:45:51:a8:da:d2:94:1d:0c:53:94:1a:71:dd:
f8:ec:92:d8:01:fa:43:79:9a:54:30:83:9a:2c:6d:2d:8e:13:
31:34:14:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:04:18 2026 by rpki-client