Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: Jprln86bI+NIeSM/jBSgzKWO8Jo/ApR74fBoszZy3TQ=
Subject key identifier: F6:33:B1:10:FA:68:7E:14:0E:18:A1:6B:91:82:45:92:1D:D1:23:17
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 019EB6FC7351B38706CDBC99EE350B5A3836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 14:00:58 +0000
Manifest this update: Thu 11 Jun 2026 14:00:58 +0000
Manifest next update: Fri 12 Jun 2026 14:00:58 +0000
Files and hashes: 1: _gHdc_o1Sg4bPmajOZmaGT6ZXNU.roa (hash: fbP0Eisnj7ta1eL91x/ykjZ4/I+oNZYVlLK/j2viYek=)
2: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: T1Syu1oLT6L8d7juc8w8X4bS5adTcWvIfrQvgQXKbeY=)
3: xfg6ND62VE_NEsRerQpNDEtguWY.roa (hash: jV8up19wMmKrYo3rkVmGEitD0urDFX1Xvcb39PAZzRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:73:51:b3:87:06:cd:bc:99:ee:35:0b:5a:38:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Jun 11 14:00:58 2026 GMT
Not After : Jun 12 14:00:58 2026 GMT
Subject: CN=f633b110fa687e140e18a16b918245921dd12317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:ce:05:79:41:18:99:b1:74:06:8d:26:08:
34:a4:56:6a:02:3d:ee:3e:93:37:c3:8e:56:e2:5f:
35:4e:0e:0d:43:ba:18:f0:b0:fd:ac:bd:18:17:b8:
be:88:cd:f0:02:94:c7:3f:1c:39:fc:e2:08:c7:e6:
6c:c7:3a:34:90:0e:21:52:12:6e:bb:76:47:66:15:
53:1c:80:fc:92:53:57:78:d3:8b:43:55:ca:bc:90:
1d:5c:fe:b6:53:4c:8e:a8:6a:0c:3a:24:92:aa:c8:
a4:a7:dc:d1:f0:9c:e1:b0:b0:ec:97:53:32:c6:19:
8e:ea:f8:7a:72:75:48:7c:75:53:61:9b:5a:26:1e:
20:f0:e9:26:64:0c:88:d2:6a:c2:80:58:c4:c6:d4:
f6:c2:10:b9:6c:18:2c:ba:6d:57:db:cb:78:69:46:
75:ba:ab:4f:65:a7:45:ad:54:af:6d:f2:c2:ec:65:
1a:2d:c3:6b:c9:39:30:36:88:92:23:59:8e:38:1a:
c6:36:57:ec:92:01:fb:de:d7:dd:9f:ce:1b:fd:7c:
12:43:dd:bb:c7:09:66:a8:0c:32:1d:9d:a8:37:45:
1b:8f:1c:76:6d:0c:c8:69:5e:28:18:67:79:ad:28:
7a:44:34:6e:39:d9:2e:b4:52:55:88:47:51:cb:6c:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:33:B1:10:FA:68:7E:14:0E:18:A1:6B:91:82:45:92:1D:D1:23:17
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:14:0e:50:5f:4b:2a:23:1f:b2:9e:bd:f0:f7:a0:47:42:9d:
e2:e3:4e:38:37:75:8d:af:33:e6:fa:b3:ad:4b:b7:b6:eb:66:
79:f9:ef:d3:19:93:dc:5c:6e:93:79:79:51:04:31:bc:e4:67:
f7:7d:e6:54:e8:2b:5c:ed:c8:35:fc:16:10:84:dc:ec:96:38:
28:ab:fb:dc:fa:6e:34:53:a7:d2:36:0b:71:15:ee:41:7c:f5:
0c:8e:92:33:40:2f:13:6b:60:66:ad:da:7d:10:64:73:c4:79:
a5:2b:96:46:fa:59:35:36:14:fb:6f:6a:7a:e6:e5:59:71:69:
5a:31:b3:86:d9:72:8d:b2:f4:df:8b:f5:f4:f9:f8:29:0d:45:
49:8d:ea:6f:e0:d5:a7:f9:0a:8d:1e:d0:43:b2:bd:31:29:ae:
3c:31:13:53:46:9d:d4:d2:05:38:7b:5c:d0:2d:92:00:27:ae:
69:1d:d5:51:0f:e6:c0:29:78:33:65:9c:84:af:cb:04:be:27:
8f:8d:10:3d:d1:a6:73:5d:e0:8b:a2:7c:4c:24:83:b5:64:0f:
4b:90:7c:56:6c:58:ae:f3:eb:c6:38:a9:07:41:89:df:45:4b:
c2:ac:75:19:9b:4d:6c:71:f0:fb:f3:ad:39:5e:d4:64:3a:a0:
67:18:be:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:02:17 2026 by rpki-client