Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: vd9FzIb7zvjD0470oJ0a2WToCihiDs5z/kM1X+qiqDc=
Subject key identifier: 88:63:B6:E8:47:49:33:EF:A1:65:35:22:BF:7C:5C:32:6C:D0:4E:04
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 01A123C1EF9BEB69022C512C3D10EDC2696B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 03:01:14 +0000
Manifest this update: Sat 10 Oct 2026 03:01:14 +0000
Manifest next update: Sun 11 Oct 2026 03:01:14 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: UVHEzYXbXwTuokCGeSA9smFD1OWTCrlggLO2eHtX8CQ=)
2: _LIMNGBB_bM1l_RNh7Jn1ke8Z1Q.roa (hash: Y1Vdc4Bk2253+dyiXjTYX2rbKWMSURyUVb6exyc6X4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:c1:ef:9b:eb:69:02:2c:51:2c:3d:10:ed:c2:69:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Oct 10 03:01:14 2026 GMT
Not After : Oct 11 03:01:14 2026 GMT
Subject: CN=8863b6e8474933efa1653522bf7c5c326cd04e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:44:1c:11:b5:34:5a:bf:2f:de:98:99:64:
de:32:eb:3f:bc:5e:0d:ea:5a:44:45:99:9d:5e:2c:
67:5f:3d:aa:44:0e:94:dd:e4:00:9c:30:e9:9f:89:
e7:7f:ef:99:f6:1a:9f:05:6f:f6:25:df:b2:5a:af:
35:c6:ec:c6:e3:83:be:91:2c:f9:e8:c0:05:79:e9:
b2:ac:56:58:d1:b7:90:27:98:ad:e2:f9:03:2d:f4:
0b:95:12:f0:8b:b0:1b:7e:d7:8a:60:de:bf:f5:5e:
59:48:8c:45:0b:e7:22:3e:3e:90:66:b7:0f:6e:c0:
49:84:41:db:ae:1f:a7:54:0f:57:ae:16:5e:ba:44:
44:6e:cf:55:53:2a:d5:6f:5a:bc:92:30:9f:7c:d0:
42:db:86:78:36:9c:f9:b4:22:27:7c:7d:ba:68:a9:
f7:03:e4:de:73:f8:e5:fb:73:e2:5e:92:b0:43:8b:
e8:8d:58:59:02:28:62:73:00:57:42:9b:f1:4f:ab:
78:17:dc:3d:cf:c3:b3:f8:50:d8:ff:12:b3:d1:69:
b0:0b:c4:3d:0e:a6:e4:2f:37:37:08:a0:7a:b7:5e:
6f:b3:0b:58:79:68:e6:14:b1:a1:77:4f:90:46:a9:
83:f4:27:6f:a4:35:2f:39:e5:c0:54:02:f8:87:f5:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:63:B6:E8:47:49:33:EF:A1:65:35:22:BF:7C:5C:32:6C:D0:4E:04
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:24:71:ac:ee:cb:d5:ad:e9:8f:31:30:7e:22:54:aa:bd:e1:
e6:f6:34:18:cd:64:10:1f:0e:6a:b5:cc:a4:01:e6:46:09:75:
ad:f0:fd:8f:60:bd:b5:64:41:90:c5:5b:41:25:52:4e:e3:2e:
c9:b3:5e:b9:b7:0f:6a:41:b5:75:64:f8:ff:0d:8a:0d:af:7a:
5b:56:5c:78:61:8f:cb:34:9a:97:2a:6f:9d:30:7c:30:49:b0:
98:98:c9:a8:3a:fe:f2:a5:9d:d4:b7:3d:f0:da:84:97:5f:6f:
2d:e5:2b:d1:92:13:0f:e6:8a:87:1f:07:9b:d4:b6:a7:66:4a:
3c:6b:bc:db:c0:fb:40:d1:b7:0d:df:06:d6:96:51:be:7c:ba:
7d:d2:b5:e3:4c:19:89:64:7a:ad:fc:4a:56:41:0c:05:11:0a:
34:e2:24:36:02:36:73:21:ee:c8:8d:48:1e:b6:81:51:fe:ea:
b8:af:4c:a5:da:fb:bd:e8:f4:c2:d0:a4:a5:70:04:ad:9d:44:
fb:de:a7:b4:50:48:10:29:c4:c6:c8:0d:c4:b5:96:62:c6:62:
53:15:22:70:cd:24:cb:70:ea:0d:fe:cd:d3:12:d9:83:68:e0:
48:8e:a1:10:bb:57:d4:47:93:f5:ae:ba:16:85:ee:1d:11:c5:
34:a8:8b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEjwe+b62kCLFEsPRDtwmlrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMjliMmE0NWRlMDEzNmZlYWJiZmFlNGJhYTcwMTcyYWE4
NjYxOWIwHhcNMjYxMDEwMDMwMTE0WhcNMjYxMDExMDMwMTE0WjAzMTEwLwYDVQQD
Eyg4ODYzYjZlODQ3NDkzM2VmYTE2NTM1MjJiZjdjNWMzMjZjZDA0ZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArABEHBG1NFq/L96YmWTeMus/vF4N
6lpERZmdXixnXz2qRA6U3eQAnDDpn4nnf++Z9hqfBW/2Jd+yWq81xuzG44O+kSz5
6MAFeemyrFZY0beQJ5it4vkDLfQLlRLwi7AbfteKYN6/9V5ZSIxFC+ciPj6QZrcP
bsBJhEHbrh+nVA9XrhZeukREbs9VUyrVb1q8kjCffNBC24Z4Npz5tCInfH26aKn3
A+Tec/jl+3PiXpKwQ4vojVhZAihicwBXQpvxT6t4F9w9z8Oz+FDY/xKz0WmwC8Q9
DqbkLzc3CKB6t15vswtYeWjmFLGhd0+QRqmD9CdvpDUvOeXAVAL4h/UxbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhjtuhHSTPvoWU1Ir98XDJs0E4EMB8GA1UdIwQY
MBaAFBopsqRd4BNv6rv65LqnAXKqhmGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1Mzgt
YTk1MWYyMDBmNjUyLzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1MzgtYTk1MWYyMDBmNjUy
LzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCRxrO7L
1a3pjzEwfiJUqr3h5vY0GM1kEB8OarXMpAHmRgl1rfD9j2C9tWRBkMVbQSVSTuMu
ybNeubcPakG1dWT4/w2KDa96W1ZceGGPyzSalypvnTB8MEmwmJjJqDr+8qWd1Lc9
8NqEl19vLeUr0ZITD+aKhx8Hm9S2p2ZKPGu828D7QNG3Dd8G1pZRvny6fdK140wZ
iWR6rfxKVkEMBREKNOIkNgI2cyHuyI1IHraBUf7quK9Mpdr7vej0wtCkpXAErZ1E
+96ntFBIECnExsgNxLWWYsZiUxUicM0ky3DqDf7N0xLZg2jgSI6hELtX1EeT9a66
FoXuHRHFNKiL7g==
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:56:41 2026 by rpki-client