Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: 099n9TFo6PTdxAhh3MeoIqupCAcxkqDJrB/equCR28E=
Subject key identifier: 3B:6C:BC:8C:E0:50:2F:69:B4:15:72:C5:92:11:5F:37:78:10:0D:C2
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 01A17F98648C99F58A9279CCD91F31839CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 23:00:55 +0000
Manifest this update: Tue 27 Oct 2026 23:00:55 +0000
Manifest next update: Wed 28 Oct 2026 23:00:55 +0000
Files and hashes: 1: _gHdc_o1Sg4bPmajOZmaGT6ZXNU.roa (hash: fbP0Eisnj7ta1eL91x/ykjZ4/I+oNZYVlLK/j2viYek=)
2: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: ixjODjJJ+ifepqkQanGEwxyZ2EfAw5kdQ+xwX1ShHpI=)
3: xfg6ND62VE_NEsRerQpNDEtguWY.roa (hash: jV8up19wMmKrYo3rkVmGEitD0urDFX1Xvcb39PAZzRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:64:8c:99:f5:8a:92:79:cc:d9:1f:31:83:9c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Oct 27 23:00:55 2026 GMT
Not After : Oct 28 23:00:55 2026 GMT
Subject: CN=3b6cbc8ce0502f69b41572c592115f3778100dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:7c:8a:5b:99:03:27:24:1d:e5:7e:48:36:
9b:4e:37:ad:48:42:ea:42:9e:da:42:78:55:8b:e9:
3b:4f:b4:77:93:ab:f4:bc:3b:3e:d4:53:4e:c4:90:
83:ab:36:fb:42:c0:69:43:4f:93:dd:2d:09:48:1b:
ab:0c:88:36:0c:0f:6d:c1:b9:2e:1a:b9:f4:dd:cf:
dc:20:d6:29:2c:d1:ea:bc:3d:35:62:59:5a:aa:c8:
9e:a2:ea:9d:70:ab:67:fd:aa:aa:68:1b:8f:0f:ff:
21:ad:a7:bc:da:17:dd:ed:cc:98:a3:7a:8a:de:aa:
5a:3f:50:2e:e4:a6:20:3f:ea:4c:d7:4e:8c:28:b9:
d1:a7:6f:f9:17:54:5e:23:9d:4d:a3:22:37:ed:e0:
02:37:c6:89:0f:fb:e7:c6:32:9f:6f:25:57:97:c9:
c1:23:f6:a5:60:ee:82:ac:f3:76:f2:f4:82:e7:e6:
c9:8f:a2:67:ad:9e:ef:1e:bb:8c:ad:84:dd:e0:55:
e8:98:df:72:13:40:ff:5d:ea:4d:55:f8:f7:70:c9:
80:08:e6:f5:94:00:04:a9:00:7d:5a:8b:79:a3:75:
41:19:a7:06:53:70:1b:a7:45:ad:4a:44:21:f7:1f:
03:c8:4b:65:57:80:64:cd:9e:bb:df:c7:fd:7f:27:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6C:BC:8C:E0:50:2F:69:B4:15:72:C5:92:11:5F:37:78:10:0D:C2
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:69:d4:3e:e2:6b:b2:8f:7a:62:a7:6b:26:54:2d:ec:0b:12:
b7:0c:dc:d2:e6:30:69:6c:87:3a:ae:2d:89:d3:35:f4:f0:5c:
2d:96:38:b7:01:74:29:f2:49:50:25:a3:7e:88:ab:46:ad:da:
56:b2:2b:90:f7:fc:72:e3:ee:e1:83:49:fd:33:fe:d6:cb:9c:
af:35:fb:7a:69:ed:ae:15:0c:f1:ce:0f:16:84:d8:2e:bc:42:
9a:94:cd:db:70:87:6e:65:c4:69:27:3e:02:5c:d5:dc:a5:c2:
cb:50:82:f7:da:3a:b1:3d:95:34:e7:ab:95:e1:fd:06:6c:f7:
4a:a2:5d:14:5c:85:95:0a:e8:a0:ba:3c:a7:e5:b7:21:71:da:
f5:e5:b2:67:52:c0:f7:3d:d5:6e:53:07:31:79:23:fb:0c:cb:
b7:f9:14:ad:b4:56:e4:23:37:dd:21:6e:32:61:68:28:97:ef:
a5:0e:b7:70:fe:1a:a9:97:c4:7e:75:14:32:80:ed:2a:ba:36:
1a:16:65:2a:dd:10:f9:19:aa:32:2f:cc:e3:79:42:fc:66:0a:
cf:db:17:26:8d:4f:01:bd:45:8d:db:56:8c:ec:9d:09:60:60:
e4:38:c9:64:ba:9c:4a:45:74:16:a6:0b:03:a2:e3:f3:fa:8f:
a1:d2:64:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/mGSMmfWKknnM2R8xg5zJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMmIzMGQ4OWIxYmNmZjY5OWY2NDFmODgwMjY5NDJkMTZh
NzJiY2MwHhcNMjYxMDI3MjMwMDU1WhcNMjYxMDI4MjMwMDU1WjAzMTEwLwYDVQQD
EygzYjZjYmM4Y2UwNTAyZjY5YjQxNTcyYzU5MjExNWYzNzc4MTAwZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyx8iluZAyckHeV+SDabTjetSELq
Qp7aQnhVi+k7T7R3k6v0vDs+1FNOxJCDqzb7QsBpQ0+T3S0JSBurDIg2DA9twbku
Grn03c/cINYpLNHqvD01YllaqsieouqdcKtn/aqqaBuPD/8hrae82hfd7cyYo3qK
3qpaP1Au5KYgP+pM106MKLnRp2/5F1ReI51NoyI37eACN8aJD/vnxjKfbyVXl8nB
I/alYO6CrPN28vSC5+bJj6JnrZ7vHruMrYTd4FXomN9yE0D/XepNVfj3cMmACOb1
lAAEqQB9Wot5o3VBGacGU3Abp0WtSkQh9x8DyEtlV4BkzZ6738f9fyezCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtsvIzgUC9ptBVyxZIRXzd4EA3CMB8GA1UdIwQY
MBaAFIIrMNibG8/2mfZB+IAmlC0WpyvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEt
OTE0ZDVkYzUxOTdmLzEvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEtOTE0ZDVkYzUxOTdm
LzEvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGnUPuJr
so96YqdrJlQt7AsStwzc0uYwaWyHOq4tidM19PBcLZY4twF0KfJJUCWjfoirRq3a
VrIrkPf8cuPu4YNJ/TP+1sucrzX7emntrhUM8c4PFoTYLrxCmpTN23CHbmXEaSc+
AlzV3KXCy1CC99o6sT2VNOerleH9Bmz3SqJdFFyFlQrooLo8p+W3IXHa9eWyZ1LA
9z3VblMHMXkj+wzLt/kUrbRW5CM33SFuMmFoKJfvpQ63cP4aqZfEfnUUMoDtKro2
GhZlKt0Q+RmqMi/M43lC/GYKz9sXJo1PAb1FjdtWjOydCWBg5DjJZLqcSkV0FqYL
A6Lj8/qPodJkiA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:21:43 2026 by rpki-client