Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
File: 1-GSAgviI1Al6xM26hGYLkw91A18.mft (raw, json)
Hash identifier: 6ck8/I6jmkSaiQ6hfLSblhQcsU51Zg6kts42Vp2tpR0=
Subject key identifier: 33:24:4D:83:44:83:01:D0:E9:B1:F3:C3:3A:50:0C:0F:9B:D3:F4:E0
Authority key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
Certificate issuer: /CN=f8648082f888d4097ac4cdba84660b930f75035f
Certificate serial: 01A1735D19F5D51C6E8F35CCFDDC8FBD7CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
Manifest number: 0376
Signing time: Sun 25 Oct 2026 14:00:43 +0000
Manifest this update: Sun 25 Oct 2026 14:00:43 +0000
Manifest next update: Mon 26 Oct 2026 14:00:43 +0000
Files and hashes: 1: 1-GSAgviI1Al6xM26hGYLkw91A18.crl (hash: 89Bd7SzIGEuNXY89tWaXQJqe3Qreq5lah+U3k/L4pCU=)
2: Ld1IptB75UF1wrERs5D-utW7pW8.roa (hash: qkhGZ0ztjC9ORXPQw0r6Rit5ibpjpCY4xiHV/vyohFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:5d:19:f5:d5:1c:6e:8f:35:cc:fd:dc:8f:bd:7c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8648082f888d4097ac4cdba84660b930f75035f
Validity
Not Before: Oct 25 14:00:43 2026 GMT
Not After : Oct 26 14:00:43 2026 GMT
Subject: CN=33244d83448301d0e9b1f3c33a500c0f9bd3f4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:27:b6:45:c6:24:0a:a3:1a:0d:fe:cb:e3:
9c:3d:a1:26:26:33:5d:0c:05:bb:78:07:49:d4:2c:
6f:39:44:ef:9f:b9:b0:ce:7e:a2:68:fb:b6:2d:ab:
11:e3:4d:23:24:a0:1f:37:a2:39:c0:86:37:57:2d:
cf:b7:00:07:f1:93:53:5b:70:38:77:f0:5c:e4:d7:
0c:da:e4:80:15:1a:59:68:ea:88:38:47:2c:80:08:
0d:19:b3:d1:e8:4c:a1:f0:74:a9:63:fd:48:24:62:
3b:43:3c:53:a6:17:c1:37:00:df:4e:62:a1:85:99:
02:da:23:95:db:98:5f:3c:5a:e7:b0:aa:70:2d:4b:
d1:54:48:79:cf:47:60:e8:94:57:a2:a6:04:3b:28:
0c:01:a3:c9:e4:6e:18:5a:dc:5c:e6:8e:f8:3c:27:
ed:cc:23:31:24:07:04:17:01:bc:31:0f:33:6a:97:
2f:ff:66:70:5d:da:cc:67:a9:d7:50:93:66:82:54:
fe:a6:d2:3f:e8:53:0b:84:53:7d:49:28:cb:b2:af:
04:3a:54:7c:c7:1b:86:f3:6f:f4:a3:77:ce:a3:a8:
5f:84:96:39:6a:35:d6:52:16:f2:e3:9c:40:21:1f:
96:94:a2:8e:9e:50:00:0e:0c:ab:34:bb:6f:f7:3f:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:24:4D:83:44:83:01:D0:E9:B1:F3:C3:3A:50:0C:0F:9B:D3:F4:E0
X509v3 Authority Key Identifier:
keyid:F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3f:2a:90:b9:99:c3:3c:78:dc:86:83:9b:31:a9:1e:f4:97:
28:49:21:07:e8:44:94:92:03:5f:8e:79:84:c4:d9:d2:0c:7d:
e3:9e:91:a9:db:e7:40:3a:0f:8a:c7:19:11:9b:e7:c2:b4:f8:
ef:ad:1a:7b:44:92:11:a6:12:e5:f7:c4:be:30:6e:1e:34:5b:
4d:31:73:9e:6d:e9:53:61:fe:ce:a4:cf:09:8f:d3:ff:b0:48:
16:de:cf:58:7a:97:f0:1e:7d:e7:6f:9f:b4:5a:a1:90:27:8b:
1f:0e:30:e6:8f:05:64:60:ef:fc:dc:06:a7:25:b7:5a:84:d1:
ed:a5:45:7d:57:b4:47:09:5c:97:4e:d9:64:41:dd:3d:8c:8b:
94:c7:dc:8b:b3:46:9d:c9:6f:39:7e:ae:dd:71:68:51:24:f5:
c7:88:d3:e3:43:e1:5b:c1:98:e9:14:aa:c3:d5:9c:39:57:69:
15:62:63:70:e0:9d:51:dd:e0:c0:87:c7:7f:50:1c:10:4a:9a:
d1:9b:ec:44:1b:c4:85:dd:48:0e:f0:65:c7:72:d4:11:d5:ee:
17:a5:c1:8f:38:e4:48:97:6e:0c:43:fb:35:9f:00:3c:40:bb:
75:39:a8:a5:48:6c:38:26:7d:bf:d4:06:2a:f5:69:3b:1b:fe:
a7:9c:c0:0d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaFzXRn11RxujzXM/dyPvXzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjQ4MDgyZjg4OGQ0MDk3YWM0Y2RiYTg0NjYwYjkzMGY3
NTAzNWYwHhcNMjYxMDI1MTQwMDQzWhcNMjYxMDI2MTQwMDQzWjAzMTEwLwYDVQQD
EygzMzI0NGQ4MzQ0ODMwMWQwZTliMWYzYzMzYTUwMGMwZjliZDNmNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGwntkXGJAqjGg3+y+OcPaEmJjNd
DAW7eAdJ1CxvOUTvn7mwzn6iaPu2LasR400jJKAfN6I5wIY3Vy3PtwAH8ZNTW3A4
d/Bc5NcM2uSAFRpZaOqIOEcsgAgNGbPR6Eyh8HSpY/1IJGI7QzxTphfBNwDfTmKh
hZkC2iOV25hfPFrnsKpwLUvRVEh5z0dg6JRXoqYEOygMAaPJ5G4YWtxc5o74PCft
zCMxJAcEFwG8MQ8zapcv/2ZwXdrMZ6nXUJNmglT+ptI/6FMLhFN9SSjLsq8EOlR8
xxuG82/0o3fOo6hfhJY5ajXWUhby45xAIR+WlKKOnlAADgyrNLtv9z8Z0QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDMkTYNEgwHQ6bHzwzpQDA+b0/TgMB8GA1UdIwQY
MBaAFPhkgIL4iNQJesTNuoRmC5MPdQNfMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HU0FndmlJMUFsNnhNMjZoR1lMa3c5MUExOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvYjY2MTJiLTk1M2UtNGM2Yy1hYWQw
LTNhZjlhNGIwYTg3My8xLzEtR1NBZ3ZpSTFBbDZ4TTI2aEdZTGt3OTFBMTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRmL2I2NjEyYi05NTNlLTRjNmMtYWFkMC0zYWY5YTRiMGE4
NzMvMS8xLUdTQWd2aUkxQWw2eE0yNmhHWUxrdzkxQTE4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATD8q
kLmZwzx43IaDmzGpHvSXKEkhB+hElJIDX455hMTZ0gx9456RqdvnQDoPiscZEZvn
wrT4760ae0SSEaYS5ffEvjBuHjRbTTFznm3pU2H+zqTPCY/T/7BIFt7PWHqX8B59
52+ftFqhkCeLHw4w5o8FZGDv/NwGpyW3WoTR7aVFfVe0Rwlcl07ZZEHdPYyLlMfc
i7NGnclvOX6u3XFoUST1x4jT40PhW8GY6RSqw9WcOVdpFWJjcOCdUd3gwIfHf1Ac
EEqa0ZvsRBvEhd1IDvBlx3LUEdXuF6XBjzjkSJduDEP7NZ8APEC7dTmopUhsOCZ9
v9QGKvVpOxv+p5zADQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 22:19:07 2026 by rpki-client