Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json)
Hash identifier: rtVrnlKjz13m4eeEzmt5Ghl1cK5LG6TuwgCyTq/HLC8=
Subject key identifier: A7:40:BE:43:CD:64:78:3E:51:F1:50:93:5F:DA:A0:7F:85:3F:80:26
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01A10625FC7EBE8FEC06B137083041C8A8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
Manifest number: 0ECD
Signing time: Sun 04 Oct 2026 09:01:54 +0000
Manifest this update: Sun 04 Oct 2026 09:01:54 +0000
Manifest next update: Mon 05 Oct 2026 09:01:54 +0000
Files and hashes: 1: 8JSZWhyUYpRy8aBCdNPv83OhLzE.roa (hash: cRifW1LmyHI9b6LIEF+DhKfqeLjA5tpM2Wwz0m3WPJE=)
2: DBuCDMr-eMpkAR_hikUInL2urKQ.roa (hash: kBMh2uve9H6ZGJ+wBBoi4Snq4VxIhSy8cm7vuFkDv3U=)
3: GiB2XPgzfAZoK37GjE41zRNuwfw.roa (hash: kt4wF2f4rJfLJ5yt1aN/zDgxy1rqy/Zyxyd2CL/+BiY=)
4: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: r15ZQdmYJYZsIY20KLkgMLwKBLt2wSL52MAhRJUR9G4=)
5: iVDK6PCtMfpuZKgZWoFycnHMVRw.roa (hash: GeJfT/LpcdK0hbYcqcrlMnAuUaNLyo2x8WoLR5cuzUY=)
6: lx_DhApBbepgoPXpAWVMZkHOy4M.roa (hash: uguPsOnPbZyPw2Mv7U8Fmu1LMUcIDj3qTCfJ/Uhauy4=)
7: ohLWgfGRLPEKw04h0DLfOIlNhog.roa (hash: K98aaZcn2W9HA9Zia29dMsLJX/i+ewGU4FK1Pvj0Z10=)
8: oyaoJP_-oRrikeFzcx4wX4DNZNc.roa (hash: tT9qKyAULqzBtDWH2BB9KDYx0XdnjR7kUjgqU8anAsM=)
9: w9-s1rg8ZZyOOyxtduxCw6s1Z18.roa (hash: SjJ+kgcVTjrARPsmt0o25UIbqtkMvNHn5HJI2G5k1Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:fc:7e:be:8f:ec:06:b1:37:08:30:41:c8:a8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Oct 4 09:01:54 2026 GMT
Not After : Oct 5 09:01:54 2026 GMT
Subject: CN=a740be43cd64783e51f150935fdaa07f853f8026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:1f:d2:df:e8:9b:a7:26:40:b5:df:02:e5:
4c:68:b1:b7:06:ec:e0:24:5a:c2:a6:3c:36:f8:6a:
7e:93:97:83:6d:d0:0c:f4:b7:e9:a4:83:a7:5d:e0:
5a:5d:50:16:22:fc:0a:32:2d:f8:e3:22:92:df:09:
24:46:c9:cd:6c:16:67:27:b7:ae:60:4f:87:2d:80:
41:5e:38:58:30:6f:fb:54:dc:88:a7:43:a9:fd:a9:
0f:c5:10:33:05:79:59:40:04:8e:52:37:19:24:8b:
f1:22:4d:9e:39:92:68:3a:a8:2b:bd:0f:5c:28:ec:
c7:75:38:fb:46:18:9d:e6:46:0d:d4:d4:32:9b:e9:
15:05:86:7a:05:7a:6d:fa:eb:7c:43:59:d7:8a:4a:
0c:04:52:b9:f3:22:d6:a9:d0:67:ff:32:e1:60:e6:
fe:f6:da:2b:48:91:26:c4:ef:a7:c0:0c:81:12:e1:
7c:62:82:69:73:df:83:11:ce:f6:5f:f4:1d:f3:9d:
cc:4c:c0:95:7b:92:dc:d4:41:a3:81:87:96:24:9d:
05:ef:f5:7a:bd:8f:8c:8f:77:97:a8:36:c1:c4:00:
e2:f8:08:60:52:4b:a6:c1:77:0a:fd:d7:d7:05:5e:
fb:54:67:18:7c:e1:e8:03:ad:59:e9:2d:d3:a2:c8:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:40:BE:43:CD:64:78:3E:51:F1:50:93:5F:DA:A0:7F:85:3F:80:26
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:24:e2:44:2a:3b:5d:67:04:41:04:bf:bb:8d:3a:c5:aa:f5:
58:74:53:fe:d4:67:c4:af:24:74:1a:9a:7e:2e:16:66:a1:a3:
00:3c:0a:d2:59:0b:c7:23:cc:ec:c0:b7:7d:88:90:06:c5:ef:
ab:dd:22:7e:dc:69:3b:bb:e4:ae:63:9f:51:75:d5:e0:69:8d:
ea:f8:68:0b:fa:a2:f8:b2:dc:02:a2:3e:55:5e:65:9a:00:e9:
ee:db:0b:fc:62:f1:aa:c9:97:14:6f:b1:60:38:57:a2:a1:d2:
d7:2e:6b:99:ab:f3:17:5f:7e:98:cd:c4:66:59:a7:a1:15:b1:
b3:d5:b1:3b:58:a5:81:3a:29:b8:65:3b:ca:28:26:1f:00:84:
a3:d4:fb:f9:b0:19:03:2f:27:4b:27:39:3c:ab:86:6b:dc:05:
5b:e8:d0:4e:3c:c4:81:08:e6:e2:9e:df:40:4f:dd:69:c5:01:
87:d4:75:19:99:63:17:19:c6:2c:d4:fb:e3:6c:2f:89:ee:26:
fb:b8:ba:18:4d:99:6c:53:2e:c0:ee:91:a1:3c:1c:f1:d0:cb:
b0:f4:ab:f3:93:a9:84:03:c1:aa:c1:8c:b3:d2:f5:78:ef:69:
a9:f1:15:f2:59:32:bd:23:13:47:a6:31:6f:74:b7:c7:ec:68:
41:ec:fb:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGJfx+vo/sBrE3CDBByKjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk
YzJhZjkwHhcNMjYxMDA0MDkwMTU0WhcNMjYxMDA1MDkwMTU0WjAzMTEwLwYDVQQD
EyhhNzQwYmU0M2NkNjQ3ODNlNTFmMTUwOTM1ZmRhYTA3Zjg1M2Y4MDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK8f0t/om6cmQLXfAuVMaLG3Buzg
JFrCpjw2+Gp+k5eDbdAM9LfppIOnXeBaXVAWIvwKMi344yKS3wkkRsnNbBZnJ7eu
YE+HLYBBXjhYMG/7VNyIp0Op/akPxRAzBXlZQASOUjcZJIvxIk2eOZJoOqgrvQ9c
KOzHdTj7Rhid5kYN1NQym+kVBYZ6BXpt+ut8Q1nXikoMBFK58yLWqdBn/zLhYOb+
9torSJEmxO+nwAyBEuF8YoJpc9+DEc72X/Qd853MTMCVe5Lc1EGjgYeWJJ0F7/V6
vY+Mj3eXqDbBxADi+AhgUkumwXcK/dfXBV77VGcYfOHoA61Z6S3TosjQewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdAvkPNZHg+UfFQk1/aoH+FP4AmMB8GA1UdIwQY
MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt
N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi
LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCTiRCo7
XWcEQQS/u406xar1WHRT/tRnxK8kdBqafi4WZqGjADwK0lkLxyPM7MC3fYiQBsXv
q90iftxpO7vkrmOfUXXV4GmN6vhoC/qi+LLcAqI+VV5lmgDp7tsL/GLxqsmXFG+x
YDhXoqHS1y5rmavzF19+mM3EZlmnoRWxs9WxO1ilgTopuGU7yigmHwCEo9T7+bAZ
Ay8nSyc5PKuGa9wFW+jQTjzEgQjm4p7fQE/dacUBh9R1GZljFxnGLNT742wvie4m
+7i6GE2ZbFMuwO6RoTwc8dDLsPSr85OphAPBqsGMs9L1eO9pqfEV8lkyvSMTR6Yx
b3S3x+xoQez7jw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:04:58 2026 by rpki-client