Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json)
Hash identifier: Rj/A/esPOq3OXQZNQJdP6vpMI1PI1LdqAVB0uViBWh0=
Subject key identifier: 16:DF:95:2B:FB:54:3F:BD:3F:24:9D:B8:F6:DB:AC:03:14:F0:71:F4
Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220
Certificate serial: 01A12956561F03BB83A4070D83596A2B35C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
Manifest number: 1031
Signing time: Sun 11 Oct 2026 05:01:26 +0000
Manifest this update: Sun 11 Oct 2026 05:01:26 +0000
Manifest next update: Mon 12 Oct 2026 05:01:26 +0000
Files and hashes: 1: QeR12R9Z_jTNrUpQr1ODF5IR7mc.roa (hash: 8rRLxS0jjdwQyV6rT5Us1y0eR8TYGMlqxEVb79Eceds=)
2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: a58VPAKrfXUwAq4suc0LacQ1XblWMC8Ewd7nZ6MtS5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:56:1f:03:bb:83:a4:07:0d:83:59:6a:2b:35:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220
Validity
Not Before: Oct 11 05:01:26 2026 GMT
Not After : Oct 12 05:01:26 2026 GMT
Subject: CN=16df952bfb543fbd3f249db8f6dbac0314f071f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:36:2c:37:7c:61:00:29:fb:b8:fd:40:20:
e2:1c:0a:08:ed:39:9c:30:05:71:39:5a:2d:17:57:
1c:eb:22:16:c7:bb:16:12:6c:a9:b1:0a:31:93:db:
c7:06:f5:f7:8d:25:b7:ea:72:c4:37:00:91:a5:5a:
4c:91:c8:7c:b3:03:4c:07:a9:3a:dd:0e:67:a0:8e:
9e:2f:62:f0:28:79:d5:f0:d1:93:6c:e2:17:8b:bd:
24:f1:18:d5:a4:be:68:3e:eb:22:3b:60:fd:07:13:
3b:19:8e:54:01:24:e7:ed:b7:e9:66:5c:26:38:66:
85:34:77:54:61:aa:d5:04:84:e2:75:bc:9e:91:27:
14:a0:a6:71:e2:a3:7e:90:a6:a5:34:16:d2:c9:48:
fa:83:9b:c7:5a:c8:2f:3a:52:0f:c0:09:fe:6e:c8:
37:a8:c2:3a:d5:25:15:a5:1e:90:84:0c:dd:79:2a:
4c:1d:4d:18:f5:f1:79:2d:32:75:90:bc:dd:94:5d:
e6:1f:ae:cb:7e:59:8a:63:4d:fb:d6:b7:c9:e9:9c:
3a:6c:2f:d4:3e:6d:eb:7d:4f:13:62:24:b0:74:e1:
a1:da:b4:dd:39:0d:07:5b:8e:1e:75:8c:f4:70:7e:
4f:6f:e4:9c:c9:57:25:3c:8f:13:9a:88:0b:6f:d3:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DF:95:2B:FB:54:3F:BD:3F:24:9D:B8:F6:DB:AC:03:14:F0:71:F4
X509v3 Authority Key Identifier:
keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b2:6c:c3:db:19:05:d0:91:81:ae:13:a5:70:4e:4b:af:c1:
6c:ae:b9:bd:be:23:6e:0a:7a:19:6d:99:9b:d0:79:8b:11:86:
f4:8d:b9:5c:21:75:95:fe:e6:5f:f6:73:3d:a3:56:62:e6:18:
d2:5b:16:f1:a2:c1:d6:6d:c6:f1:d1:35:2f:05:c0:6f:7f:60:
ae:b9:4a:2c:36:be:25:91:28:79:71:00:7e:ee:0c:85:f5:c0:
3d:6e:20:03:82:0a:02:c6:ee:da:ea:2b:dc:ba:61:e9:c6:92:
6d:18:3f:17:d7:3f:80:45:bd:82:ef:f4:60:07:67:20:cf:a6:
ef:54:9a:af:e9:8d:c3:d1:cc:2b:20:5f:b4:69:70:21:9e:76:
29:34:19:79:d0:c6:39:39:0a:05:c1:ac:5f:f1:3f:f8:ae:82:
aa:6d:d9:fa:e3:4b:95:dc:05:18:dc:34:bb:44:79:26:48:86:
b5:16:a5:56:cb:e9:9a:cc:30:2e:26:e3:c2:63:26:e9:95:6e:
a1:9f:81:45:c0:0c:fe:7a:70:2d:87:ef:44:fe:3b:8e:4c:2d:
50:2e:24:d5:fa:a4:c6:93:86:af:02:34:46:2f:b4:91:a8:db:
12:78:01:b1:14:f9:28:60:64:6d:5e:b3:16:18:79:e3:6e:09:
08:a5:fe:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:43:20 2026 by rpki-client