Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
File: GsBs8snpV1N0OXNPBYSoIEp7gxE.mft (raw, json)
Hash identifier: WDxyJjrOuM7hS5qoa0ZJG4JrnnAo0UwPTwkt6/30v+w=
Subject key identifier: 94:3E:48:2E:9D:5E:5C:DD:06:8D:D8:74:9B:BE:3F:DF:D8:F9:1C:1D
Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
Certificate issuer: /CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Certificate serial: 01A180E291E54C40BCE8C689AAB2CC625413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
Manifest number: 1A59
Signing time: Wed 28 Oct 2026 05:01:34 +0000
Manifest this update: Wed 28 Oct 2026 05:01:34 +0000
Manifest next update: Thu 29 Oct 2026 05:01:34 +0000
Files and hashes: 1: GsBs8snpV1N0OXNPBYSoIEp7gxE.crl (hash: +eKSK7AuP3vt390t8QViMjasAdgpOktM+y5JEj5Qj98=)
2: MyfIZj1W2obkPAZygzM9dP9m28U.roa (hash: aXvgs0DUulnqjwtB1M6qdRCY8cRgdrm+A6xw7bBtVwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:91:e5:4c:40:bc:e8:c6:89:aa:b2:cc:62:54:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Validity
Not Before: Oct 28 05:01:34 2026 GMT
Not After : Oct 29 05:01:34 2026 GMT
Subject: CN=943e482e9d5e5cdd068dd8749bbe3fdfd8f91c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:8c:5d:f0:a3:80:ca:74:a9:4a:07:09:d6:
10:e6:a4:53:3a:ea:95:c1:a3:35:92:65:8d:d3:51:
14:11:75:18:cb:32:8b:5a:68:88:6b:3a:a3:c5:8d:
0a:ca:20:f7:6a:7e:36:11:d4:95:51:44:b6:5e:75:
ed:a8:de:70:5c:3f:ad:66:ab:d3:34:0c:69:2f:c9:
6a:c6:ab:b3:31:98:5d:50:9b:b2:b7:bc:fc:e8:15:
d1:8b:de:09:77:30:fc:aa:9a:8b:de:0b:5d:f3:2d:
1d:27:e9:54:2c:4c:a3:b0:4b:dc:22:6b:94:1c:c0:
5d:f7:96:1d:8f:c4:26:a9:4a:5e:50:de:1a:67:92:
a2:8d:6a:00:83:2f:d4:dc:ac:e5:c7:9c:3b:15:a3:
55:1d:fb:be:78:d1:c3:a7:5c:ac:cc:ae:57:d7:fe:
cb:ca:24:4f:32:19:9c:50:cb:13:73:7f:3e:01:08:
72:8b:a0:19:c2:49:ff:47:78:30:58:cc:51:cf:60:
3f:6a:de:d2:39:68:8d:8f:b5:cb:54:c8:b3:98:14:
97:b5:b0:4e:2e:9f:31:d3:7f:bd:3b:5b:70:97:ad:
c0:5d:6a:3f:dd:af:9b:d0:c7:0c:44:ee:78:5c:99:
9d:25:cb:39:2a:02:f0:70:dd:bb:0a:9c:53:eb:e1:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3E:48:2E:9D:5E:5C:DD:06:8D:D8:74:9B:BE:3F:DF:D8:F9:1C:1D
X509v3 Authority Key Identifier:
keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c7:ac:d3:21:21:04:be:fe:df:72:63:41:16:1b:39:41:72:
e9:9f:db:66:87:9b:fa:bf:eb:44:58:d4:bf:40:34:d7:b1:e3:
35:bf:47:96:c0:2b:73:f4:d8:93:3e:00:45:6d:e9:4a:40:1c:
f2:ed:2b:ed:65:ca:31:00:dc:4a:0e:63:d3:ec:6a:0b:6f:c8:
93:71:ec:b2:b0:a2:bd:c9:78:69:a4:b3:92:cd:2d:9f:13:0a:
4e:07:35:33:ff:1c:6b:47:4e:7d:dd:68:cd:ba:1e:3d:63:b2:
02:13:fa:0e:49:ec:ee:c0:49:72:23:23:9d:42:1e:8c:7e:3a:
f2:a1:81:b4:c8:da:bd:9d:c5:70:a2:f9:f5:ab:4f:7b:d6:4c:
92:73:4e:dc:3b:e7:07:3f:d0:4f:42:28:82:22:b1:bf:f3:9b:
bb:54:56:d3:12:82:21:3a:9d:60:7f:eb:2c:2c:b0:d9:4c:6c:
5b:0e:b7:fa:f6:7d:26:eb:55:ed:b1:28:aa:0e:e8:a5:53:2d:
6c:fd:0b:65:33:82:39:62:b4:2b:a1:3d:09:e9:63:89:4c:4a:
f7:3b:33:91:17:4c:0d:84:b8:fa:c5:33:48:0b:9e:d9:d0:ea:
b3:ec:ae:ea:8f:62:0d:34:e5:b2:f6:d5:67:8b:52:8b:0c:53:
b4:fe:f1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:43:44 2026 by rpki-client