Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier: cXVmVoBC0hnL48yN1rvQfXD95SJM6c5D6XXh55siKqc=
Subject key identifier: 65:50:15:4D:C3:49:5C:9A:FA:AA:43:41:3E:52:A3:8C:16:CA:0B:7C
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 01A128B1518AE5A7E9DCB36708A0DCCC32A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number: 1AA1
Signing time: Sun 11 Oct 2026 02:01:11 +0000
Manifest this update: Sun 11 Oct 2026 02:01:11 +0000
Manifest next update: Mon 12 Oct 2026 02:01:11 +0000
Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: iWgSw7aYV45A0HHYyHHpK6EPRc6X8U0rMsFxW2xBen0=)
2: cXNWLJ-fheZVPTHqnxKr5qEyQiI.roa (hash: X4rdPWY18bogslRUxkmtUVkAapWRBduOj/tJgoCH118=)
3: hwehb2jiu3a77T6FcjmviTy6QbQ.roa (hash: /bg0v2TYmrbSPAxogweq6+6+Nt4ijd19YXkzkd2haPo=)
4: i220VObPvHT4HgCF-uOpmI807FY.roa (hash: s9QayADVhAmQKcOJ9dlrMCwrdZV1G0CVNvgi0G197E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b1:51:8a:e5:a7:e9:dc:b3:67:08:a0:dc:cc:32:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Oct 11 02:01:11 2026 GMT
Not After : Oct 12 02:01:11 2026 GMT
Subject: CN=6550154dc3495c9afaaa43413e52a38c16ca0b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:88:0f:2b:c3:63:6b:74:b2:f2:d6:81:98:
60:ee:ef:1e:92:24:ba:2f:81:ed:0f:32:f5:13:9b:
ed:a6:6b:d5:8a:b3:22:dd:0d:51:c4:04:b4:95:9c:
04:09:e0:d5:29:af:26:15:5a:eb:a8:79:f0:54:ce:
ce:66:64:23:71:75:d2:dc:78:e1:b3:64:d3:18:11:
84:c9:b0:50:5d:69:d5:39:06:ee:2a:a1:eb:68:13:
0d:4e:44:4f:77:6b:64:2b:57:6d:4d:3e:4d:5c:38:
e7:1f:db:55:f4:2b:bc:46:7a:81:c7:82:32:96:c4:
6d:c0:25:c9:a9:dc:fe:6e:1e:2f:da:81:94:f8:70:
e2:36:3c:5e:e9:4d:a4:72:24:20:bd:86:8f:5d:9a:
c9:dd:9e:21:a2:0d:4e:20:d5:89:c6:2a:dc:f9:ba:
ba:e5:88:e1:92:15:0b:9c:32:6a:db:27:1c:2f:23:
10:93:a0:f0:0d:1a:89:81:fc:3b:ec:1a:13:db:f2:
f1:b8:92:c3:09:d6:17:75:5d:13:b0:ba:3a:19:1d:
b2:2a:1a:bd:42:bb:53:16:e8:f8:8f:4d:1f:58:70:
7c:a9:43:94:30:27:e2:39:ab:6f:12:6b:cd:f9:09:
75:a3:50:ae:36:79:be:01:26:2f:bc:5a:17:35:90:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:50:15:4D:C3:49:5C:9A:FA:AA:43:41:3E:52:A3:8C:16:CA:0B:7C
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8e:db:d7:53:29:7f:7f:87:cf:da:0f:7f:85:46:f9:6b:6e:
f8:d6:cf:d9:46:4d:7d:00:f2:08:50:ee:55:b2:53:0d:4c:79:
8f:14:4a:8f:b1:bd:51:7f:0d:66:c6:27:46:74:4b:a5:ff:5f:
e2:69:18:47:84:91:f1:16:e8:44:e9:e5:93:27:e8:ae:d9:91:
7e:2b:0e:2a:8f:7c:6a:42:41:95:2f:84:3c:4d:36:34:18:7f:
63:55:21:45:db:16:ea:cf:54:bb:52:d5:8a:aa:75:a3:3f:1e:
65:e9:d7:41:64:88:fb:a0:95:05:ab:99:27:73:24:09:47:e3:
7c:0d:36:37:19:35:22:43:56:95:3a:74:61:66:24:71:5a:37:
d1:c4:bd:e7:9a:e4:77:3e:66:e6:fa:78:85:62:3e:4a:b3:92:
6c:a8:34:31:b3:b8:77:aa:22:f9:5b:a2:d4:7f:a0:e3:54:45:
7c:ab:ba:e9:13:ca:1a:a4:7d:56:66:79:e0:1c:4d:74:35:dc:
35:c3:3c:3c:a5:b9:ab:a3:71:32:01:4e:a1:13:a4:5d:b0:f7:
c8:02:52:46:3c:b8:18:5b:9e:50:4e:fc:39:b6:6b:bb:e9:a2:
1a:4c:44:2e:ea:17:43:42:12:c4:47:61:bc:5e:5b:bc:59:6b:
a3:72:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:17:21 2026 by rpki-client