Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
File: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json)
Hash identifier: 8rRfAkXo5s7DGm6oKdC2Y0TBmQP30JeglIax7MrgGjA=
Subject key identifier: 54:0D:40:4C:38:B5:C8:83:DF:2D:62:6E:6E:35:87:2D:FC:B7:82:CD
Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
Certificate issuer: /CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Certificate serial: 01A14D99F8CFC23631ECFFEF1B3A95E6C062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
Manifest number: 1AAB
Signing time: Sun 18 Oct 2026 06:01:38 +0000
Manifest this update: Sun 18 Oct 2026 06:01:38 +0000
Manifest next update: Mon 19 Oct 2026 06:01:38 +0000
Files and hashes: 1: Iu9PnHVM0LSwUFID8vLNCNKzD-U.roa (hash: tU7O1VjjD0lcgYnwOxVPASyTAKDrVm8qOBVH6F4eICY=)
2: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: E1/eYPMetLpsMMXJpT7xdPu7WG531P/3yQ53Lzz5czU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:99:f8:cf:c2:36:31:ec:ff:ef:1b:3a:95:e6:c0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Validity
Not Before: Oct 18 06:01:38 2026 GMT
Not After : Oct 19 06:01:38 2026 GMT
Subject: CN=540d404c38b5c883df2d626e6e35872dfcb782cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:8e:8e:66:72:1d:a1:a9:ed:9e:1d:05:5d:
63:bc:e1:65:04:1e:ad:d4:95:76:b6:5d:e2:8c:10:
61:27:79:53:23:70:27:0f:55:f2:88:94:d8:e8:a2:
a5:58:c2:01:20:2d:e8:54:b4:4d:df:7f:e0:ca:72:
af:fe:49:5a:e8:cd:b5:7e:10:77:56:f2:b5:88:a7:
f1:19:f0:1c:07:51:87:ed:4f:c6:e6:c0:a2:0a:12:
62:07:1e:31:9c:4a:d9:19:0b:ea:ce:e1:ce:90:13:
72:64:ac:e8:1d:93:28:24:8e:03:42:15:96:25:f3:
a5:c7:a6:34:af:4e:bb:89:93:c1:ab:9e:e4:92:66:
f6:ee:db:83:80:13:ed:c3:82:b7:9e:70:24:ee:9a:
45:c4:a8:91:fa:c3:8b:80:b3:0e:df:be:4f:75:13:
09:d5:d4:b1:f8:df:ae:9a:d1:63:72:79:68:3f:66:
3b:de:04:33:4b:48:64:6b:16:49:1f:3f:f2:a4:03:
65:e7:8a:47:1b:7e:10:ca:8e:4f:25:3e:cd:f8:a8:
f7:b0:87:84:88:2d:23:70:b9:dc:06:de:1b:4c:92:
91:f2:f8:81:9c:fa:d7:81:96:bb:39:2e:5e:9a:2b:
0b:27:59:c2:7e:08:68:df:05:a7:65:8c:3f:d0:37:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0D:40:4C:38:B5:C8:83:DF:2D:62:6E:6E:35:87:2D:FC:B7:82:CD
X509v3 Authority Key Identifier:
keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:29:e5:b3:54:00:e1:9d:a7:17:10:9a:90:27:fa:09:02:df:
71:16:16:e7:d5:a6:71:2b:fd:30:df:0a:a2:7e:c0:6e:1d:50:
05:47:4f:8b:f3:98:83:60:aa:3a:b3:7e:e6:01:7c:96:53:50:
eb:67:c0:f2:61:c2:5f:d4:22:86:3d:ff:f0:e4:a4:ff:b0:b3:
ce:c7:0a:bd:88:bd:0e:2c:2c:c7:37:11:76:fc:1c:fb:5f:7f:
5d:f5:22:c7:98:c3:2a:0a:14:89:01:28:41:50:91:45:45:20:
a5:7c:6e:be:58:13:58:5c:ab:57:d4:03:b3:41:53:64:2d:28:
52:de:a7:6c:37:ea:8d:7f:0e:d3:5d:58:83:cf:d9:81:b2:20:
c3:2f:13:22:0d:a7:72:b5:27:d6:27:d3:12:28:81:48:34:77:
0b:b3:5b:31:3d:25:c8:85:05:9e:e6:85:30:27:2e:58:1e:5a:
63:27:9f:74:44:02:53:60:37:1b:25:31:52:2b:72:99:ba:79:
0a:36:bc:ea:09:e0:47:77:5d:1a:e8:41:1e:c8:32:2d:80:8b:
dc:0a:13:14:c5:b3:b4:f5:65:23:e1:11:f2:6d:bd:70:81:9a:
5e:46:ff:bd:9f:9f:12:be:ed:47:a4:5e:8d:21:c7:48:7f:09:
55:78:17:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFNmfjPwjYx7P/vGzqV5sBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDA5OTZjMDg4OTBiZDVlMWU2ZGQwNTI4MjE3ZDI4Zjlk
MDkzNTUwHhcNMjYxMDE4MDYwMTM4WhcNMjYxMDE5MDYwMTM4WjAzMTEwLwYDVQQD
Eyg1NDBkNDA0YzM4YjVjODgzZGYyZDYyNmU2ZTM1ODcyZGZjYjc4MmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeGOjmZyHaGp7Z4dBV1jvOFlBB6t
1JV2tl3ijBBhJ3lTI3AnD1XyiJTY6KKlWMIBIC3oVLRN33/gynKv/kla6M21fhB3
VvK1iKfxGfAcB1GH7U/G5sCiChJiBx4xnErZGQvqzuHOkBNyZKzoHZMoJI4DQhWW
JfOlx6Y0r067iZPBq57kkmb27tuDgBPtw4K3nnAk7ppFxKiR+sOLgLMO375PdRMJ
1dSx+N+umtFjcnloP2Y73gQzS0hkaxZJHz/ypANl54pHG34Qyo5PJT7N+Kj3sIeE
iC0jcLncBt4bTJKR8viBnPrXgZa7OS5emisLJ1nCfgho3wWnZYw/0DdBKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQNQEw4tciD3y1ibm41hy38t4LNMB8GA1UdIwQY
MBaAFIMAmWwIiQvV4ebdBSghfSj50JNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jMDEzMDYtNjZmNS00MjA5LThjODgt
MmRiNjkxYjFkNGFiLzEvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jMDEzMDYtNjZmNS00MjA5LThjODgtMmRiNjkxYjFkNGFi
LzEvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0inls1QA
4Z2nFxCakCf6CQLfcRYW59WmcSv9MN8Kon7Abh1QBUdPi/OYg2CqOrN+5gF8llNQ
62fA8mHCX9Qihj3/8OSk/7CzzscKvYi9DiwsxzcRdvwc+19/XfUix5jDKgoUiQEo
QVCRRUUgpXxuvlgTWFyrV9QDs0FTZC0oUt6nbDfqjX8O011Yg8/ZgbIgwy8TIg2n
crUn1ifTEiiBSDR3C7NbMT0lyIUFnuaFMCcuWB5aYyefdEQCU2A3GyUxUitymbp5
Cja86gngR3ddGuhBHsgyLYCL3AoTFMWztPVlI+ER8m29cIGaXkb/vZ+fEr7tR6Re
jSHHSH8JVXgXSQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 11:35:28 2026 by rpki-client