Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: KHCEVXyPTMF8OhponmkjS4oWK0uuafHb9OEJvQyP6Mw=
Subject key identifier: 0A:48:20:F6:63:74:FC:0A:55:D0:E2:B1:F1:48:3B:9C:11:67:D4:FE
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 01A176CC05055BBF9E9AFB1F3A1C91699394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 1279
Signing time: Mon 26 Oct 2026 06:00:44 +0000
Manifest this update: Mon 26 Oct 2026 06:00:44 +0000
Manifest next update: Tue 27 Oct 2026 06:00:44 +0000
Files and hashes: 1: 1-w__FgVbYGEvZzX5G7Wv6WpQMFc.roa (hash: YyyT93IM4vslKyEiZRnugviu0gDWs5kVRFPzXEYy/e4=)
2: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: 3/dc4Um5IQBpHMT2k3oz+b7TF7URqmXp9CZR6YhNDmw=)
3: Sy_QSnV4oKxcnxQ4UaY7HAFaAQY.roa (hash: mPfUVg1yW0xKUezEUlUR8Yt63tdbh4K/MBcEri0pjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cc:05:05:5b:bf:9e:9a:fb:1f:3a:1c:91:69:93:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Oct 26 06:00:44 2026 GMT
Not After : Oct 27 06:00:44 2026 GMT
Subject: CN=0a4820f66374fc0a55d0e2b1f1483b9c1167d4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:cd:7d:1e:6d:7c:cd:6c:a6:71:33:cb:36:
1d:61:1d:8e:cb:96:df:9b:1a:5d:b0:30:da:9d:37:
e2:02:3f:67:a8:20:a3:2d:8c:3f:90:b8:f2:1d:97:
63:f2:d7:6b:71:a7:9c:dc:55:82:9f:fa:50:29:c6:
4a:e3:5f:1e:66:f3:7f:82:7c:04:fc:6c:ef:21:1a:
e5:b5:3f:2a:e1:ec:66:0d:15:05:e8:67:b1:71:d0:
93:80:cd:24:e4:fb:e3:cb:d7:8a:c1:c5:a8:19:37:
b4:db:51:f8:08:bc:95:c2:ec:ba:ee:85:74:7e:82:
89:bb:9d:2e:ed:17:eb:cb:1c:b8:92:24:9f:01:56:
b7:81:df:d6:6f:62:cb:c0:43:39:02:00:dd:af:22:
e0:26:26:79:5b:b6:09:de:ba:63:11:72:04:70:64:
ef:91:99:08:bc:79:9e:2c:5f:aa:39:d6:15:4f:c4:
b5:21:5c:65:90:f4:9d:07:c5:d5:d4:a2:3d:33:a5:
a0:bf:9b:42:c1:15:32:91:84:d0:86:e4:57:7a:c3:
86:81:9c:ec:06:2f:91:b1:8e:ea:89:c3:31:59:a1:
3a:fd:eb:22:14:c5:3c:e9:26:d8:8a:f2:9b:91:a2:
5f:12:8d:d2:4d:c8:6c:8c:ab:01:6d:2f:09:3e:e9:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:48:20:F6:63:74:FC:0A:55:D0:E2:B1:F1:48:3B:9C:11:67:D4:FE
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:35:e2:dc:22:f0:dd:fc:c6:be:24:37:2e:15:2e:e0:0e:1a:
ea:70:d1:59:c6:50:d1:67:97:b3:29:50:7a:ee:bb:09:25:2a:
64:87:35:10:8f:1c:58:9d:7f:cb:b6:48:4a:ff:13:0d:ac:81:
d3:fd:05:0c:fa:f5:5b:a9:dc:39:8c:77:8c:09:1d:b2:56:df:
6d:a2:4c:05:92:b3:06:33:2f:37:79:0c:b0:fa:0b:11:d9:0a:
c8:11:ef:1b:1c:f1:56:48:ca:35:d1:41:63:b6:8e:d2:ad:4e:
5b:d7:b5:6f:c9:de:81:c4:bc:c0:6a:88:6f:dc:d6:96:37:9e:
96:c0:ce:81:d8:0a:bb:eb:22:ba:55:db:8a:38:f3:58:bc:b2:
53:7a:56:18:b0:74:61:c0:e4:aa:55:c8:55:f5:a0:95:11:b4:
ee:23:01:42:31:7c:12:52:ac:dd:be:0b:1a:fc:de:82:1d:bb:
e6:e7:d9:d1:13:89:2e:74:c7:dd:0b:b4:cc:3d:33:85:2a:31:
67:ba:50:e4:dc:4e:d9:4a:76:8c:1d:8f:aa:21:62:d3:02:5e:
35:89:58:0b:96:59:77:08:b6:57:5e:c4:f0:ca:a8:58:43:b7:
eb:26:da:02:ea:2c:40:35:2d:7b:ca:3c:2d:d8:af:61:af:51:
69:dd:8c:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2zAUFW7+emvsfOhyRaZOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYTBhMzI4YzZmZTBmMWJjYTVlNjU5OTA0MmRmZjU5ZTUx
M2IyNWQwHhcNMjYxMDI2MDYwMDQ0WhcNMjYxMDI3MDYwMDQ0WjAzMTEwLwYDVQQD
EygwYTQ4MjBmNjYzNzRmYzBhNTVkMGUyYjFmMTQ4M2I5YzExNjdkNGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnjNfR5tfM1spnEzyzYdYR2Oy5bf
mxpdsDDanTfiAj9nqCCjLYw/kLjyHZdj8tdrcaec3FWCn/pQKcZK418eZvN/gnwE
/GzvIRrltT8q4exmDRUF6GexcdCTgM0k5Pvjy9eKwcWoGTe021H4CLyVwuy67oV0
foKJu50u7Rfryxy4kiSfAVa3gd/Wb2LLwEM5AgDdryLgJiZ5W7YJ3rpjEXIEcGTv
kZkIvHmeLF+qOdYVT8S1IVxlkPSdB8XV1KI9M6Wgv5tCwRUykYTQhuRXesOGgZzs
Bi+RsY7qicMxWaE6/esiFMU86SbYivKbkaJfEo3STchsjKsBbS8JPukgKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApIIPZjdPwKVdDisfFIO5wRZ9T+MB8GA1UdIwQY
MBaAFBqgoyjG/g8byl5lmQQt/1nlE7JdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUt
MzhlODQ2MTQ4Yzc4LzEvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUtMzhlODQ2MTQ4Yzc4
LzEvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzXi3CLw
3fzGviQ3LhUu4A4a6nDRWcZQ0WeXsylQeu67CSUqZIc1EI8cWJ1/y7ZISv8TDayB
0/0FDPr1W6ncOYx3jAkdslbfbaJMBZKzBjMvN3kMsPoLEdkKyBHvGxzxVkjKNdFB
Y7aO0q1OW9e1b8negcS8wGqIb9zWljeelsDOgdgKu+siulXbijjzWLyyU3pWGLB0
YcDkqlXIVfWglRG07iMBQjF8ElKs3b4LGvzegh275ufZ0ROJLnTH3Qu0zD0zhSox
Z7pQ5NxO2Up2jB2PqiFi0wJeNYlYC5ZZdwi2V17E8MqoWEO36ybaAuosQDUte8o8
LdivYa9Rad2M+w==
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:21:39 2026 by rpki-client