Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
File: GpvZxsEozNlD9_dyKSLGb2a07dU.mft (raw, json)
Hash identifier: lm1k987LeDEo6YsWvEzUNzjiFv86XTaCpIpb6Kdm+GY=
Subject key identifier: 6B:09:92:65:50:68:9C:64:5F:C9:CC:5C:7E:57:56:9F:95:99:9A:7C
Authority key identifier: 1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
Certificate issuer: /CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Certificate serial: 01A15251E1394DAE5FB3842FCEC42E241EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
Manifest number: 0343
Signing time: Mon 19 Oct 2026 04:00:59 +0000
Manifest this update: Mon 19 Oct 2026 04:00:59 +0000
Manifest next update: Tue 20 Oct 2026 04:00:59 +0000
Files and hashes: 1: 1-oyfhNLyYue13tRFCKo0IPxmM24.roa (hash: oPm09IIbFaa5Ai2vo1N5k2H9XoBpkLq4SkDxgfWP1PU=)
2: GaCNO5uvEPZSSwfLA86l-W_3H7o.roa (hash: Q+4U2eLN8lYe4XRd9553vr9mNVPmss4+izmTxQVodwk=)
3: GpvZxsEozNlD9_dyKSLGb2a07dU.crl (hash: EJtoPoyJSZVPD3mPL9dj7mFC3tctIVWDs1S85QWG4gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:51:e1:39:4d:ae:5f:b3:84:2f:ce:c4:2e:24:1e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Validity
Not Before: Oct 19 04:00:59 2026 GMT
Not After : Oct 20 04:00:59 2026 GMT
Subject: CN=6b09926550689c645fc9cc5c7e57569f95999a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:ba:5d:a6:9a:04:96:36:68:0a:a5:89:21:
c5:5f:a7:ad:d3:e8:e9:85:3c:b3:54:f0:32:54:52:
f8:54:47:26:2d:4a:1f:63:21:d5:98:16:58:33:54:
23:a8:00:0a:18:f2:1e:55:8e:d3:2b:28:d1:2d:38:
07:f1:e0:1c:3c:9b:49:f9:2d:bb:b6:63:df:fb:89:
f1:61:28:ef:f5:76:56:1d:8e:4c:c8:5f:41:ee:bb:
37:70:93:be:1c:cc:f0:4a:b3:ba:59:b6:6d:69:2b:
3b:a3:23:4b:dc:c4:24:d1:03:aa:7b:6e:11:b2:fd:
fd:ff:6e:47:dc:8f:ac:94:70:e7:e8:93:1c:a7:22:
da:2b:9f:7b:6a:ee:83:9b:46:f3:fb:80:b6:d7:8e:
77:07:01:3a:a1:a2:08:4f:9b:a2:b9:32:62:5e:52:
fe:06:40:a4:d6:a3:05:3c:ff:80:e6:b7:33:8d:44:
ad:41:16:3b:07:b0:9d:1d:31:fe:97:b2:fb:46:3a:
eb:da:fd:68:1e:ad:d3:5a:d5:cd:c6:81:f8:ed:33:
72:ee:69:88:52:82:e2:7d:cb:b3:e4:18:f3:f2:31:
a8:e8:16:18:22:3c:e2:a9:94:0b:ff:76:e5:43:3c:
2d:e0:ba:f0:44:ef:7f:58:ed:5e:02:d9:ef:14:30:
53:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:09:92:65:50:68:9C:64:5F:C9:CC:5C:7E:57:56:9F:95:99:9A:7C
X509v3 Authority Key Identifier:
keyid:1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b3:cd:a3:4f:7d:59:79:74:e1:a0:7d:3c:e9:01:49:d8:2f:
19:a0:e3:c8:c3:ba:8d:51:a7:fb:95:ff:ee:d5:3b:0d:f4:54:
2f:b3:92:a8:0c:ae:2c:cf:a2:ce:e0:fa:d3:a0:ee:95:62:0d:
47:4b:40:ce:82:bf:fe:1d:8f:21:11:4d:89:74:31:71:8a:0e:
36:89:3f:5c:dc:8e:4f:3d:9f:09:2e:f9:45:c2:bd:9b:d7:85:
43:18:16:04:5d:9a:e4:37:67:ad:1f:f2:19:f9:91:d2:12:97:
31:71:67:59:5f:2b:18:b0:e0:7b:49:22:25:ac:3b:f1:00:d7:
37:13:a0:a3:00:6a:2a:38:d7:ef:7d:a5:fa:0c:19:46:72:7c:
ad:c8:4c:0b:ba:f7:65:01:d6:ed:a5:44:dc:17:c6:07:43:0b:
ca:24:b7:13:e0:47:80:d3:81:a8:2a:06:8f:88:bf:de:f9:5c:
b2:2c:f7:06:3f:9c:02:b6:97:b9:34:b7:5a:46:dc:fd:18:ec:
c4:5a:c1:1e:2e:a7:fc:f0:01:7a:12:a6:ed:94:6a:25:e1:1b:
25:d5:55:45:88:41:5b:3c:95:58:49:da:ee:3c:a2:6b:20:4b:
81:04:56:fc:f7:9e:7f:0c:c9:75:66:9f:e0:11:64:5f:7e:36:
fb:99:2b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:30:21 2026 by rpki-client