Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: cI1BnCc/VFSOiLXbvtto+Hf6gVKFV9xFx2/WeQ4YvBQ=
Subject key identifier: 5F:C7:3D:F3:49:7D:DE:7A:98:96:A9:18:4C:1A:D2:06:21:6D:06:15
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 01A16345CD9BB1FE12575E816FCAB4A30DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: 0658
Signing time: Thu 22 Oct 2026 11:01:21 +0000
Manifest this update: Thu 22 Oct 2026 11:01:21 +0000
Manifest next update: Fri 23 Oct 2026 11:01:21 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: PzuIdo6Xd3pO7Q0xPbCDX8vGHij5Kid00WuJEw74RqM=)
2: ps8p5Yxss_yS4gX9BmkqFddX40Q.roa (hash: nYuC3F6vhPJEBCLmfMqrTPfplxmjR9SoiZf1ZnDUcP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:45:cd:9b:b1:fe:12:57:5e:81:6f:ca:b4:a3:0d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: Oct 22 11:01:21 2026 GMT
Not After : Oct 23 11:01:21 2026 GMT
Subject: CN=5fc73df3497dde7a9896a9184c1ad206216d0615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:52:09:09:c9:55:bb:20:a5:1e:58:e1:82:
86:cf:5f:f1:49:e3:9e:dc:b5:11:f8:84:1c:66:20:
4b:cf:6d:1d:52:30:22:b6:81:b0:93:0f:11:47:11:
7f:e5:99:90:2c:1a:c5:db:95:42:b9:4e:d6:04:72:
31:45:49:a8:b1:f6:31:fc:6e:74:55:4d:1c:e5:87:
31:fd:93:60:34:c5:d0:3f:03:9b:04:b0:c9:d1:6c:
b2:84:79:f8:33:a3:90:6c:03:33:64:15:64:39:6c:
f3:1c:73:4f:46:cc:4c:d5:c5:a5:59:80:05:60:55:
7e:b8:62:73:56:4e:27:15:e7:04:1c:04:66:a3:ed:
37:80:df:87:c3:4f:ef:93:24:50:57:b4:5d:96:6c:
74:5f:cb:18:a2:dd:dc:fa:c3:d0:8b:31:e3:c6:b8:
b5:c9:e5:29:3f:d8:ef:b5:ea:ff:77:9a:3b:a5:9f:
e8:ce:35:44:0a:4a:25:64:b7:82:9a:d7:03:2f:5f:
4e:44:2f:a2:7e:1f:6e:13:d6:5c:ee:d8:ac:b1:57:
91:85:23:be:fb:6c:0a:76:75:8f:3f:d6:92:5c:a6:
74:65:b2:80:db:24:0d:d8:00:0a:11:28:4f:99:9e:
18:ad:3c:58:c4:99:1a:e5:3f:2f:13:67:d8:78:e6:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C7:3D:F3:49:7D:DE:7A:98:96:A9:18:4C:1A:D2:06:21:6D:06:15
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bd:7a:98:0b:10:f6:fd:59:68:b3:af:6d:66:ac:32:45:07:
d5:69:32:83:62:9b:0b:0a:d7:ce:e4:7d:9e:0c:19:e6:c1:d0:
b9:07:52:3b:4a:27:f3:8b:a7:95:40:97:1c:f9:87:2b:55:66:
68:5f:c3:ab:64:86:fc:97:a4:10:f0:ad:24:8c:6e:06:4a:6a:
4d:3d:c8:f8:a4:5a:e1:f3:ad:ad:f8:d8:01:32:e0:33:1f:b5:
96:f8:bf:f0:3e:0e:4e:e6:52:05:4c:74:a2:8d:fe:bf:f7:62:
0f:5a:f1:7a:d1:d1:f8:d5:54:4a:aa:bb:6b:3e:55:57:36:5f:
ca:ec:bf:ce:95:2c:78:95:61:69:55:d5:93:3f:83:2f:a3:15:
dd:c9:f0:64:43:99:fd:ed:fc:8a:31:2f:3d:00:77:4e:ce:5d:
01:ad:80:7e:a5:bd:9a:23:e1:89:ad:f7:a1:0b:b7:eb:9c:e7:
fc:3a:ff:d9:e4:4a:b5:99:98:cb:06:1c:ce:98:4f:46:76:48:
0b:56:a3:56:0e:9b:78:2c:8c:e7:36:2d:96:5d:ee:36:48:72:
e8:a6:4b:9e:1e:6a:ad:58:0d:e3:a6:7a:87:87:73:32:f3:57:
5d:3e:1c:c8:0e:90:e3:9f:7b:3e:18:80:77:6a:cf:6b:ed:67:
37:bd:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 14:37:12 2026 by rpki-client