Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
File: GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json)
Hash identifier: y/NY45YsKaOOKISEwjZlaEgHOFxSxj67/lHb168Qe8E=
Subject key identifier: 9F:C6:24:33:81:B4:35:1D:87:93:B3:B8:2A:E9:F6:B4:98:3F:5A:F1
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial: 01A13FDE38B95558A7C81DF7E5274B3A552D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
Manifest number: 0DB7
Signing time: Thu 15 Oct 2026 14:01:30 +0000
Manifest this update: Thu 15 Oct 2026 14:01:30 +0000
Manifest next update: Fri 16 Oct 2026 14:01:30 +0000
Files and hashes: 1: 1v1j_9V79CfDRyy5ITVwKULcKzs.roa (hash: IW+E0tn+3P5yQ6WEdmWbMLqIHQmOymBM/uiaqJuBrqM=)
2: 89tYEoKSEhkjFD9jKwdbx6DCSsk.roa (hash: jkHDlzCm8Ga5tOZ62sKtqXC1nnGOHeix+ItJDowlAi8=)
3: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: LhnapH5KPU1DP9mEs1CGm39WUenEgqBTZlVmT/YWVI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:38:b9:55:58:a7:c8:1d:f7:e5:27:4b:3a:55:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
Validity
Not Before: Oct 15 14:01:30 2026 GMT
Not After : Oct 16 14:01:30 2026 GMT
Subject: CN=9fc6243381b4351d8793b3b82ae9f6b4983f5af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:22:62:a8:2c:91:69:37:f9:e5:15:29:e1:
2c:01:ca:89:e8:dd:8d:ea:44:c5:e9:72:da:67:a8:
1a:44:4b:06:fc:8d:e0:04:b2:b8:3b:11:6e:8d:d8:
9f:83:0f:51:df:93:39:48:e8:f3:23:13:83:3c:69:
60:58:74:9a:dd:5f:26:b3:db:28:82:92:61:fd:82:
28:94:43:f2:8a:93:89:b3:98:ba:ad:92:c8:5a:2b:
c6:2c:00:66:ef:b8:c4:b7:c8:b7:98:f8:b3:3d:96:
ee:f4:32:32:99:d1:ee:74:32:4d:76:a1:7c:73:a3:
b7:f4:c7:e4:4e:06:5f:03:81:e1:df:0c:6e:85:15:
32:7f:bd:23:93:1d:28:33:2a:a3:54:30:f2:54:56:
49:6c:fa:62:97:33:34:b3:6b:d5:3f:52:11:14:d8:
13:66:04:fa:70:94:42:65:3c:16:7d:8e:77:6c:b5:
77:10:a4:78:ae:a7:d2:d6:6f:cb:90:76:41:72:0b:
2b:44:06:a2:d3:74:ce:a8:96:3b:64:09:54:e2:51:
ca:22:4c:9f:87:ae:a4:97:0c:5c:0f:c6:7b:a4:63:
52:ab:ca:c4:e0:26:05:b3:dc:8a:79:91:d7:32:f5:
97:84:2e:b5:de:4f:57:f6:85:6b:0c:72:98:aa:9c:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C6:24:33:81:B4:35:1D:87:93:B3:B8:2A:E9:F6:B4:98:3F:5A:F1
X509v3 Authority Key Identifier:
keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:84:0e:99:50:10:f8:1d:1d:cf:e2:36:d4:b1:2d:e2:8c:4e:
09:1e:3c:72:ef:67:d9:6c:12:01:8c:57:cc:b1:a8:84:62:01:
b4:5b:53:fe:ac:2a:f6:5d:2b:0a:97:6f:2d:50:c5:b6:e8:72:
7d:ee:f9:91:9f:d8:79:ae:7d:b8:f2:5f:63:83:15:0a:0c:fe:
48:3a:f7:48:03:cd:66:0b:fd:5f:b8:ed:6e:05:c6:41:b1:de:
d9:f6:53:ab:2f:14:60:a7:3e:92:78:c3:b9:24:a3:e9:76:a4:
ef:82:9b:bf:6b:2d:d3:94:08:80:bf:8e:25:2f:b0:37:1e:4d:
36:6b:2f:cd:2f:59:88:5a:f6:ab:00:79:01:e5:0b:2b:fc:83:
bc:48:4e:96:e1:ba:48:d9:13:d2:32:fb:e5:3d:f9:66:2e:98:
e7:16:09:d8:22:a2:36:09:c7:da:ab:d4:a4:71:a3:12:98:8d:
a4:b6:b7:c1:b6:e6:d3:33:33:43:2e:ef:6e:71:42:c1:5c:39:
18:5a:83:cd:4f:cb:20:c3:32:6b:cd:02:76:fe:c3:89:a4:49:
40:5e:f1:89:07:ee:df:03:11:d3:5e:4c:47:dd:a2:85:d4:4a:
df:0f:5f:72:e7:2b:87:50:10:a7:12:90:9f:44:98:7e:d3:1a:
c8:13:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:37 2026 by rpki-client