Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
File: 1-GSAgviI1Al6xM26hGYLkw91A18.mft (raw, json)
Hash identifier: MY5ROyjNrdW5R6fpBaBu24Nm1TQy9hfHoJVHzxks7jc=
Subject key identifier: 7E:3B:79:5C:DB:09:A6:66:06:04:69:A1:2A:10:72:73:20:4E:B7:6D
Authority key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
Certificate issuer: /CN=f8648082f888d4097ac4cdba84660b930f75035f
Certificate serial: 01A152889E41E12626529F76F1D562C807C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
Manifest number: 0365
Signing time: Mon 19 Oct 2026 05:00:47 +0000
Manifest this update: Mon 19 Oct 2026 05:00:47 +0000
Manifest next update: Tue 20 Oct 2026 05:00:47 +0000
Files and hashes: 1: 1-GSAgviI1Al6xM26hGYLkw91A18.crl (hash: aLPAy0W0B1R+H/+RTw/uxcb6PI8nEw5OFd3TgoENvZE=)
2: Ld1IptB75UF1wrERs5D-utW7pW8.roa (hash: qkhGZ0ztjC9ORXPQw0r6Rit5ibpjpCY4xiHV/vyohFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:88:9e:41:e1:26:26:52:9f:76:f1:d5:62:c8:07:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8648082f888d4097ac4cdba84660b930f75035f
Validity
Not Before: Oct 19 05:00:47 2026 GMT
Not After : Oct 20 05:00:47 2026 GMT
Subject: CN=7e3b795cdb09a666060469a12a107273204eb76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:1b:48:6e:c7:5e:a4:7f:da:60:0e:73:84:
b3:c8:82:a6:27:b1:7d:b9:c2:32:07:a4:fc:bd:da:
7c:80:49:18:9b:ef:37:86:d9:1e:2f:67:59:1a:8f:
09:78:4d:37:21:4a:14:72:ed:e1:fe:40:58:08:a0:
5a:be:1f:04:0c:be:de:a8:f3:b2:36:83:43:ec:ae:
0d:ff:6e:32:da:85:54:c6:8d:6d:07:a5:60:82:54:
28:e7:69:60:fe:d0:5f:67:29:a8:6a:37:9f:a1:6e:
4a:c9:8b:50:35:86:78:00:23:69:91:4d:a8:89:68:
50:67:2f:33:8a:f0:c7:97:3e:0c:c8:2b:82:0e:a7:
72:65:44:ec:06:2d:b3:64:0f:69:76:85:ca:5c:5b:
40:5c:bc:cc:75:0c:ea:f4:00:34:f5:0f:db:25:0a:
eb:e3:7a:25:dd:cf:83:bb:19:c8:d6:97:95:6b:37:
46:ff:fa:73:7a:7f:40:3f:62:bd:33:81:c9:16:c5:
cc:e9:fc:b0:a9:2c:f3:c7:0d:72:1c:e7:98:f7:40:
32:fa:b0:37:cb:47:8c:5c:0b:bf:5c:f0:fd:22:f8:
c9:02:a9:0d:5e:60:81:c6:ca:c4:c5:f8:d1:5b:1f:
99:7f:c7:af:26:e1:6a:b0:78:d4:df:bc:cc:6b:12:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3B:79:5C:DB:09:A6:66:06:04:69:A1:2A:10:72:73:20:4E:B7:6D
X509v3 Authority Key Identifier:
keyid:F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7e:82:a6:0f:07:f6:03:96:9e:27:c0:70:94:f9:44:40:0f:
96:4e:27:f7:17:93:3c:b9:3b:98:64:2c:a9:5d:4f:33:49:32:
06:4b:d6:56:5f:c2:e2:58:55:d4:6b:06:36:2b:55:a8:56:ba:
f2:94:d1:88:d2:aa:43:bf:71:da:0e:31:a3:4f:a5:6e:f3:02:
70:dc:95:5e:75:e7:b4:98:1a:1a:71:5d:9f:81:55:2c:e6:63:
c9:12:c4:08:c6:a6:74:87:4b:b7:cb:e1:7f:6b:40:5a:d6:7b:
32:1f:ea:9c:28:f0:22:8c:30:21:24:ba:7c:65:b3:b6:fc:51:
85:9a:91:2c:52:0e:73:65:45:5b:c5:60:84:ee:2b:12:6d:0d:
f1:ad:81:9d:cf:ac:f5:bb:65:1e:21:27:f3:3f:6d:d1:99:e4:
d8:0c:f0:94:d0:72:15:3e:d5:b4:fc:f8:33:2e:78:75:26:ca:
ee:4a:8a:18:fb:e8:aa:35:91:bf:3a:57:58:f3:e7:41:06:a9:
b1:8a:fc:91:fb:cc:a5:8b:b6:85:17:8f:f5:85:d3:0a:92:71:
a4:5f:bd:96:ea:da:a6:13:bd:6e:47:04:34:84:86:9d:75:a7:
a6:3a:b5:59:a4:01:4f:4e:78:cf:bc:1a:7f:a9:56:fb:9a:6c:
5b:72:cb:99
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaFSiJ5B4SYmUp928dViyAfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjQ4MDgyZjg4OGQ0MDk3YWM0Y2RiYTg0NjYwYjkzMGY3
NTAzNWYwHhcNMjYxMDE5MDUwMDQ3WhcNMjYxMDIwMDUwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZTNiNzk1Y2RiMDlhNjY2MDYwNDY5YTEyYTEwNzI3MzIwNGViNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXYbSG7HXqR/2mAOc4SzyIKmJ7F9
ucIyB6T8vdp8gEkYm+83htkeL2dZGo8JeE03IUoUcu3h/kBYCKBavh8EDL7eqPOy
NoND7K4N/24y2oVUxo1tB6VgglQo52lg/tBfZymoajefoW5KyYtQNYZ4ACNpkU2o
iWhQZy8zivDHlz4MyCuCDqdyZUTsBi2zZA9pdoXKXFtAXLzMdQzq9AA09Q/bJQrr
43ol3c+DuxnI1peVazdG//pzen9AP2K9M4HJFsXM6fywqSzzxw1yHOeY90Ay+rA3
y0eMXAu/XPD9IvjJAqkNXmCBxsrExfjRWx+Zf8evJuFqsHjU37zMaxIEeQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFH47eVzbCaZmBgRpoSoQcnMgTrdtMB8GA1UdIwQY
MBaAFPhkgIL4iNQJesTNuoRmC5MPdQNfMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HU0FndmlJMUFsNnhNMjZoR1lMa3c5MUExOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvYjY2MTJiLTk1M2UtNGM2Yy1hYWQw
LTNhZjlhNGIwYTg3My8xLzEtR1NBZ3ZpSTFBbDZ4TTI2aEdZTGt3OTFBMTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRmL2I2NjEyYi05NTNlLTRjNmMtYWFkMC0zYWY5YTRiMGE4
NzMvMS8xLUdTQWd2aUkxQWw2eE0yNmhHWUxrdzkxQTE4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAln6C
pg8H9gOWnifAcJT5REAPlk4n9xeTPLk7mGQsqV1PM0kyBkvWVl/C4lhV1GsGNitV
qFa68pTRiNKqQ79x2g4xo0+lbvMCcNyVXnXntJgaGnFdn4FVLOZjyRLECMamdIdL
t8vhf2tAWtZ7Mh/qnCjwIowwISS6fGWztvxRhZqRLFIOc2VFW8VghO4rEm0N8a2B
nc+s9btlHiEn8z9t0Znk2AzwlNByFT7VtPz4My54dSbK7kqKGPvoqjWRvzpXWPPn
QQapsYr8kfvMpYu2hReP9YXTCpJxpF+9luraphO9bkcENISGnXWnpjq1WaQBT054
z7waf6lW+5psW3LLmQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 10:15:33 2026 by rpki-client