Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
File: GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft (raw, json)
Hash identifier: XwZg+jxLGpoMjz7ei2Nf2bjmeE3hgHNbqS3qTDe17Jc=
Subject key identifier: B3:A0:3F:9B:4A:30:A0:5A:37:14:53:B1:03:DB:86:56:13:6B:28:DE
Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
Certificate issuer: /CN=197fc930e4aa59b0303459f755698e8f998f471e
Certificate serial: 01A149F38B62AC9D67236E407F45DD943FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
Manifest number: 1A3E
Signing time: Sat 17 Oct 2026 13:01:00 +0000
Manifest this update: Sat 17 Oct 2026 13:01:00 +0000
Manifest next update: Sun 18 Oct 2026 13:01:00 +0000
Files and hashes: 1: GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl (hash: QHq3pFECfJWFmAhrxXZgRn1mRauZhAToYX+tVteUICU=)
2: MHMvD25G98q_oVHMD53RxUdicb4.roa (hash: CO102pNtY2jOCZp4RkxFW2Le3E7HSzkT6HgrXcYHB9s=)
3: Zxga6O5B6uWj5ovSd6ojGTRvTQk.roa (hash: B5IjyWOTGquDtIk33USdJO3jmFl66T5rjOlw+iwqVn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:f3:8b:62:ac:9d:67:23:6e:40:7f:45:dd:94:3f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e
Validity
Not Before: Oct 17 13:01:00 2026 GMT
Not After : Oct 18 13:01:00 2026 GMT
Subject: CN=b3a03f9b4a30a05a371453b103db8656136b28de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:b0:f6:0e:d3:b2:c5:c9:23:65:ce:03:c6:
34:0b:3f:0a:14:c9:25:dd:e4:cf:25:29:96:30:c1:
e7:57:bd:ca:33:f1:50:22:f8:60:b2:53:64:fa:4b:
f8:e9:07:d5:3f:3a:1b:a1:45:26:a5:08:85:bc:32:
05:b1:04:39:dc:32:26:94:f2:ef:0a:68:ac:14:17:
2f:81:25:5f:60:b1:b7:5d:13:d8:1a:29:80:e2:39:
16:96:0f:a0:a6:6f:d9:e9:83:97:9f:ee:e8:a8:e4:
ca:47:2c:ab:50:f8:5d:80:97:2c:f3:fe:ec:57:02:
bc:46:a7:32:b3:a8:ef:ad:e1:9d:4b:24:5e:69:f8:
95:9b:40:d1:6a:6a:2d:30:f4:55:d2:70:37:b5:90:
25:cb:aa:e0:e7:94:5c:f2:b1:30:83:50:f5:5e:60:
8c:39:4b:77:85:e7:85:09:19:d4:42:28:ba:6c:7a:
09:5c:b6:6c:c3:b3:71:95:d3:b3:3e:c8:28:99:b5:
96:68:29:31:af:2c:87:28:24:24:8c:59:68:b6:a4:
9a:5d:0a:30:a8:1c:ee:cb:c5:cc:96:cb:ff:e6:3b:
07:e1:b7:b4:5b:59:c9:77:9f:10:3a:92:f3:4f:63:
cd:c3:fd:54:a5:4c:d5:89:c0:b7:9c:dc:cc:cb:3a:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A0:3F:9B:4A:30:A0:5A:37:14:53:B1:03:DB:86:56:13:6B:28:DE
X509v3 Authority Key Identifier:
keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3f:d6:cc:67:7b:a2:f8:be:ae:20:6a:4e:f7:bd:f3:6f:08:
e0:e9:db:cc:15:c9:45:65:9a:8f:8f:2f:cf:dd:bc:9d:5f:ea:
87:d6:61:31:81:02:1a:c0:40:e0:4e:80:14:2f:c0:db:f2:de:
51:96:8c:88:f9:e3:80:6e:84:43:51:e3:29:e2:cf:4d:75:e9:
a8:b7:80:1a:9c:c0:db:c5:f4:99:88:a7:a6:3c:b0:10:5d:33:
57:b2:36:3f:76:7a:66:40:a9:39:b3:0b:cb:75:e1:31:0f:1c:
35:da:39:0e:c8:0c:b8:e4:05:68:07:75:c7:7f:58:c2:fb:7c:
c3:37:1d:4c:ee:9a:40:13:69:38:96:d5:d1:d0:da:2f:02:eb:
e9:1d:3e:1d:70:e6:61:14:3e:86:ef:64:90:c1:09:e4:fe:6c:
74:74:43:e5:fd:7d:a4:c7:63:57:ce:a9:30:47:66:c6:ac:58:
ee:13:da:0d:91:f3:d9:4b:52:0d:d3:96:d8:27:00:71:30:ae:
f0:87:6b:fb:c5:d7:54:d3:49:f8:8f:07:56:1f:8d:18:e3:e3:
d4:8d:e9:c1:7d:99:cf:d0:f7:ce:4d:99:7d:88:34:dd:79:f8:
a2:ab:19:ed:65:7b:94:14:7c:45:38:2e:1b:ac:e4:3e:19:26:
c4:2f:b7:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFJ84tirJ1nI25Af0XdlD/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5N2ZjOTMwZTRhYTU5YjAzMDM0NTlmNzU1Njk4ZThmOTk4
ZjQ3MWUwHhcNMjYxMDE3MTMwMTAwWhcNMjYxMDE4MTMwMTAwWjAzMTEwLwYDVQQD
EyhiM2EwM2Y5YjRhMzBhMDVhMzcxNDUzYjEwM2RiODY1NjEzNmIyOGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqew9g7TssXJI2XOA8Y0Cz8KFMkl
3eTPJSmWMMHnV73KM/FQIvhgslNk+kv46QfVPzoboUUmpQiFvDIFsQQ53DImlPLv
CmisFBcvgSVfYLG3XRPYGimA4jkWlg+gpm/Z6YOXn+7oqOTKRyyrUPhdgJcs8/7s
VwK8Rqcys6jvreGdSyReafiVm0DRamotMPRV0nA3tZAly6rg55Rc8rEwg1D1XmCM
OUt3heeFCRnUQii6bHoJXLZsw7NxldOzPsgombWWaCkxryyHKCQkjFlotqSaXQow
qBzuy8XMlsv/5jsH4be0W1nJd58QOpLzT2PNw/1UpUzVicC3nNzMyzoTXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOgP5tKMKBaNxRTsQPbhlYTayjeMB8GA1UdIwQY
MBaAFBl/yTDkqlmwMDRZ91Vpjo+Zj0ceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZWEwZTktMjdmNy00ZDcxLWE5MDAt
MjdiZTA5MTE4YzYxLzEvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yZWEwZTktMjdmNy00ZDcxLWE5MDAtMjdiZTA5MTE4YzYx
LzEvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARz/WzGd7
ovi+riBqTve9828I4OnbzBXJRWWaj48vz928nV/qh9ZhMYECGsBA4E6AFC/A2/Le
UZaMiPnjgG6EQ1HjKeLPTXXpqLeAGpzA28X0mYinpjywEF0zV7I2P3Z6ZkCpObML
y3XhMQ8cNdo5DsgMuOQFaAd1x39Ywvt8wzcdTO6aQBNpOJbV0dDaLwLr6R0+HXDm
YRQ+hu9kkMEJ5P5sdHRD5f19pMdjV86pMEdmxqxY7hPaDZHz2UtSDdOW2CcAcTCu
8Idr+8XXVNNJ+I8HVh+NGOPj1I3pwX2Zz9D3zk2ZfYg03Xn4oqsZ7WV7lBR8RTgu
G6zkPhkmxC+3kQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 22:28:55 2026 by rpki-client