Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: 2NRkuFtcgumX4fROORC4+NGvOXhNn73CR7LyFbdP2n0=
Subject key identifier: D0:22:33:C3:F7:77:7D:4A:7F:46:40:5A:85:AA:B1:53:00:99:BA:6E
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 01A1A9712167EC8D095BE7BDA3F5C23B4B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0CC1
Signing time: Thu 05 Nov 2026 02:02:05 +0000
Manifest this update: Thu 05 Nov 2026 02:02:05 +0000
Manifest next update: Fri 06 Nov 2026 02:02:05 +0000
Files and hashes: 1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: OVPCl0CezrGoLRF83bjiUzApWD1VcfMQGM9wZoucFRA=)
3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:71:21:67:ec:8d:09:5b:e7:bd:a3:f5:c2:3b:4b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Nov 5 02:02:05 2026 GMT
Not After : Nov 6 02:02:05 2026 GMT
Subject: CN=d02233c3f7777d4a7f46405a85aab1530099ba6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:da:36:78:1a:8c:5d:36:68:8e:6b:45:01:
1e:0a:71:2b:c6:bd:e5:fd:d6:f5:b6:bf:2a:ee:cf:
7a:f7:36:08:57:ce:48:22:bd:a7:be:77:5e:f2:d7:
54:63:d2:72:bc:c0:f2:c3:4a:12:4a:de:32:f5:b5:
ef:95:08:cd:41:35:8a:06:c3:b4:3c:92:2e:58:68:
74:2d:66:74:30:33:88:b9:2e:84:11:80:75:69:37:
3f:47:a5:b8:1c:6d:36:ca:96:3d:a2:34:72:27:9b:
69:aa:48:d8:18:92:fd:a3:2f:46:9a:f2:5f:82:ca:
b4:dc:d4:19:ca:8e:70:87:14:a4:82:e9:8f:9b:32:
ee:7e:5c:b6:2c:87:02:09:ca:4d:b1:95:df:6c:ef:
9e:45:76:9d:ca:e8:d6:68:f6:d7:47:6d:7b:9e:2b:
24:bc:4b:19:40:8c:0b:3a:04:61:d4:ae:44:39:65:
a3:ab:1a:1c:03:6a:37:8b:be:32:84:6f:91:d3:dd:
52:94:b1:df:1e:7f:56:de:b0:ff:8f:31:b5:95:4c:
73:4d:b6:a9:b1:d3:d7:20:c8:c7:4e:7e:9f:5b:39:
0a:16:1a:ee:70:b6:1c:a2:b8:36:92:cb:26:11:dd:
fb:bf:a7:95:c9:1a:2d:57:b5:af:73:aa:a5:39:6e:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:22:33:C3:F7:77:7D:4A:7F:46:40:5A:85:AA:B1:53:00:99:BA:6E
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a2:ac:2f:a6:ce:37:b8:f1:a9:c8:4c:33:ef:0a:91:06:b9:
fc:b5:8d:e8:65:16:4d:70:fa:b6:55:90:fb:69:3e:be:bb:9a:
4b:9a:37:2b:81:ec:18:b5:de:60:de:61:8a:3c:c2:3a:4f:7a:
d3:16:4e:53:eb:08:a6:49:09:e1:fd:80:93:31:cf:82:f3:61:
2f:3c:12:b1:36:51:7f:94:bb:3d:e3:6a:ce:db:75:ab:28:3c:
94:4d:41:12:51:57:f3:87:3c:df:44:25:17:b6:30:50:50:b4:
99:70:18:fd:73:cd:d6:a3:78:bc:d8:fe:91:07:77:60:78:77:
00:a0:27:93:79:3b:18:04:64:47:6a:a3:e8:6b:f5:e3:88:6e:
8c:76:30:30:5c:24:79:5d:d4:1d:da:4d:76:bc:19:88:e9:52:
0c:c4:cc:9f:a6:38:08:e2:5e:e1:78:7d:39:8e:ee:71:5f:33:
a3:fc:5d:35:07:8c:be:2e:cf:39:e5:3b:d6:56:f6:04:6e:61:
89:c0:be:ca:47:37:96:7c:56:ea:7f:97:bc:2f:8e:8f:a6:9e:
4b:4d:bf:68:a4:9c:58:41:70:b1:9b:2f:4b:31:1b:ba:88:fe:
19:d4:d7:cd:ac:37:7d:5b:b6:94:d2:1c:0f:96:91:a3:c6:22:
70:73:4a:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGpcSFn7I0JW+e9o/XCO0s1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMzFkY2E4ODdkOGJlNjA2MDE5ZDBhMTU5M2ExNmZmZDM5
ZmQ2OTIwHhcNMjYxMTA1MDIwMjA1WhcNMjYxMTA2MDIwMjA1WjAzMTEwLwYDVQQD
EyhkMDIyMzNjM2Y3Nzc3ZDRhN2Y0NjQwNWE4NWFhYjE1MzAwOTliYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHLaNngajF02aI5rRQEeCnErxr3l
/db1tr8q7s969zYIV85IIr2nvnde8tdUY9JyvMDyw0oSSt4y9bXvlQjNQTWKBsO0
PJIuWGh0LWZ0MDOIuS6EEYB1aTc/R6W4HG02ypY9ojRyJ5tpqkjYGJL9oy9GmvJf
gsq03NQZyo5whxSkgumPmzLufly2LIcCCcpNsZXfbO+eRXadyujWaPbXR217nisk
vEsZQIwLOgRh1K5EOWWjqxocA2o3i74yhG+R091SlLHfHn9W3rD/jzG1lUxzTbap
sdPXIMjHTn6fWzkKFhrucLYcorg2kssmEd37v6eVyRotV7Wvc6qlOW6UnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAiM8P3d31Kf0ZAWoWqsVMAmbpuMB8GA1UdIwQY
MBaAFBox3KiH2L5gYBnQoVk6Fv/Tn9aSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEt
OTBjOTk5ZDM1ZWQ4LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEtOTBjOTk5ZDM1ZWQ4
LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKKsL6bO
N7jxqchMM+8KkQa5/LWN6GUWTXD6tlWQ+2k+vruaS5o3K4HsGLXeYN5hijzCOk96
0xZOU+sIpkkJ4f2AkzHPgvNhLzwSsTZRf5S7PeNqztt1qyg8lE1BElFX84c830Ql
F7YwUFC0mXAY/XPN1qN4vNj+kQd3YHh3AKAnk3k7GARkR2qj6Gv144hujHYwMFwk
eV3UHdpNdrwZiOlSDMTMn6Y4COJe4Xh9OY7ucV8zo/xdNQeMvi7POeU71lb2BG5h
icC+ykc3lnxW6n+XvC+Oj6aeS02/aKScWEFwsZsvSzEbuoj+GdTXzaw3fVu2lNIc
D5aRo8YicHNKSA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 12:40:35 2026 by rpki-client