Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: rFEh9bNHgc7eoA2y8EN+MCfYp6XTaVYaBgs0Dkc/04g=
Subject key identifier: 52:F5:F5:22:B3:1A:E2:08:CD:29:56:09:BE:C2:C3:A6:03:13:C4:21
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 01A08C4408E4A33ECA209A04354DDC8266AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 17:01:03 +0000
Manifest this update: Thu 10 Sep 2026 17:01:03 +0000
Manifest next update: Fri 11 Sep 2026 17:01:03 +0000
Files and hashes: 1: _gHdc_o1Sg4bPmajOZmaGT6ZXNU.roa (hash: fbP0Eisnj7ta1eL91x/ykjZ4/I+oNZYVlLK/j2viYek=)
2: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: roKWz7rIWUYSD6Rk/baP7mD3C/QBzYSRuA65Qg+aUU0=)
3: xfg6ND62VE_NEsRerQpNDEtguWY.roa (hash: jV8up19wMmKrYo3rkVmGEitD0urDFX1Xvcb39PAZzRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:08:e4:a3:3e:ca:20:9a:04:35:4d:dc:82:66:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Sep 10 17:01:03 2026 GMT
Not After : Sep 11 17:01:03 2026 GMT
Subject: CN=52f5f522b31ae208cd295609bec2c3a60313c421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:dc:9a:84:73:b8:8e:7e:3f:df:7e:85:36:
2c:54:28:7b:be:28:d8:e6:d1:99:cf:a0:1b:e1:50:
37:c9:b0:5f:26:8b:b4:3f:4a:f2:15:dc:6c:7e:4f:
df:64:95:af:8e:a4:e8:74:c1:d9:17:8e:f0:50:2e:
3d:fc:ef:df:b9:16:64:53:d2:1c:d8:06:7f:3f:50:
f6:b1:67:5c:91:3a:fd:c4:8c:1c:8d:84:1e:ee:8e:
80:d3:ad:e8:07:cd:c4:de:b9:d9:32:d7:fc:c3:bf:
7e:db:0a:dd:70:80:f3:37:82:c9:bc:13:31:23:56:
5a:e0:00:0c:23:1d:71:fb:ac:91:97:93:87:85:42:
11:b6:de:f8:70:02:49:67:0c:60:7c:b6:34:16:16:
8a:d5:48:9b:fd:e7:e5:68:95:75:72:0c:80:54:90:
2c:27:03:f9:ab:87:a4:b0:ac:bf:3d:7e:71:7b:27:
b7:1b:7c:6d:41:4c:e2:b0:90:05:5e:1f:d7:26:57:
4a:50:ed:f5:39:3b:77:76:7f:58:73:4e:a5:f9:2d:
21:28:57:31:56:35:ac:45:04:74:8d:c2:df:46:d4:
ee:8d:bc:af:c9:df:5b:ad:fb:3c:db:87:8e:a7:34:
7e:d1:a2:6c:1c:ba:a7:77:c1:34:d4:33:e8:2f:ec:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:F5:22:B3:1A:E2:08:CD:29:56:09:BE:C2:C3:A6:03:13:C4:21
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e0:9a:ad:b5:17:b1:6e:27:de:55:5b:45:74:65:20:7b:a0:
36:5f:3d:8e:a9:f5:b3:9d:2d:33:6b:70:98:a9:b1:79:9d:7e:
64:ef:81:5c:ff:be:82:1d:ef:78:b0:15:e9:2f:6e:92:fc:d9:
fc:34:c9:7e:7e:aa:cf:82:16:40:7c:07:f3:fe:a2:1d:b1:2d:
6e:0e:fd:9c:c9:ce:c7:a9:97:6e:b5:7e:a8:93:f4:a3:dc:90:
7a:fa:92:c7:20:a0:94:84:cb:06:fa:d7:5f:a1:40:7d:a9:a8:
50:01:90:fc:b8:40:ce:41:90:93:22:23:58:a1:18:d5:94:f6:
ae:45:e0:37:38:6d:f2:94:e1:91:e8:57:ff:77:25:53:a3:b9:
b0:3b:60:6b:8e:55:41:b4:4e:00:60:a1:cf:2a:24:47:c4:e2:
fb:38:ef:48:14:26:67:d4:ca:5a:0b:95:ca:be:5b:84:20:d1:
62:73:fe:0e:06:99:fc:e8:ff:da:b0:dc:48:be:e9:46:ec:00:
9b:f0:35:fa:75:ea:19:c2:51:5f:c3:76:1d:ae:e0:03:0e:29:
dd:5c:27:39:ba:0d:99:59:13:67:ee:19:0c:70:84:ed:38:e1:
ec:db:3c:79:cc:5f:7e:53:24:65:7d:45:64:23:4e:e0:e5:53:
79:2e:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:45:36 2026 by rpki-client