Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: sjPBzovK7/d+LTELYOU7IGy6FX1q4vOutqT4p8w+8Hk=
Subject key identifier: 64:01:F6:6D:0E:3B:4F:97:B6:FB:0F:0F:CD:16:AF:90:F2:D1:F4:6E
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 01A0ECD336C53964B86E8A6499E4F9DD63F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 1314
Signing time: Tue 29 Sep 2026 11:01:00 +0000
Manifest this update: Tue 29 Sep 2026 11:01:00 +0000
Manifest next update: Wed 30 Sep 2026 11:01:00 +0000
Files and hashes: 1: JAzqT-1i6473RmwqyvfoRU9VLkw.asa (hash: 25jfvXdrTMOEDVc4X728q//3lY8GOSHtbJIe1scysq8=)
2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: b6yqgpcXXZVjiSNAtg/4f9AF0sUs6+nvKj6xBpDM3AA=)
3: mUnV3dYN_qeWwC8rqMT4riEQibQ.roa (hash: 75xxrtZ9E9pazY/FnBGbJQiK0CExU3XWygpO2I3T0rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:36:c5:39:64:b8:6e:8a:64:99:e4:f9:dd:63:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Sep 29 11:01:00 2026 GMT
Not After : Sep 30 11:01:00 2026 GMT
Subject: CN=6401f66d0e3b4f97b6fb0f0fcd16af90f2d1f46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:43:31:04:d9:c3:90:c6:5e:fd:b5:a2:cb:
1a:91:40:be:28:c9:23:19:b5:d1:46:60:c7:22:ca:
ce:51:d5:c5:52:da:0b:03:c4:e5:f1:7c:3d:ce:d4:
61:5b:de:14:ac:f5:52:99:d6:0d:db:ad:0f:ad:e5:
4f:5b:25:df:d2:bc:6d:1e:94:46:7d:df:e9:5e:97:
f8:39:33:e3:b4:58:43:fe:ad:17:6a:92:d8:0e:5d:
c9:12:9e:d7:91:4c:3a:e2:52:c7:57:9d:3b:54:1f:
69:98:9a:b9:ff:fa:fb:e1:2f:12:92:93:2f:3d:5e:
c3:5d:4e:29:0c:c0:73:75:f8:3f:e4:25:b3:a0:4a:
d8:aa:9f:d6:03:8e:49:f0:59:b5:ca:1b:28:e4:e3:
63:89:05:c5:7c:d2:14:58:97:ae:5a:be:0d:e3:63:
e5:fc:ab:0f:49:2c:1c:55:ea:71:69:97:e6:87:a4:
84:79:d8:b5:41:a6:a8:d3:b2:1b:cb:dd:0d:e9:83:
44:70:15:53:cc:cc:35:68:20:0c:d1:92:4c:d9:22:
51:b6:88:81:13:45:d9:43:db:9f:25:f7:b6:90:c2:
ec:87:9d:39:cd:d3:4a:4d:b7:6c:9b:53:e8:7f:cb:
8e:bf:e2:8c:78:fb:cd:14:c7:dd:e1:a6:b5:07:94:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:F6:6D:0E:3B:4F:97:B6:FB:0F:0F:CD:16:AF:90:F2:D1:F4:6E
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ee:a5:16:86:9e:a4:9d:56:ff:2b:85:2e:1b:85:ab:1a:00:
bd:ec:bf:be:22:97:54:af:9c:ea:5a:d5:c0:15:ab:b3:c9:a0:
7b:72:66:f9:22:a6:b8:f6:1d:cf:0b:62:08:dd:37:7d:79:e4:
8d:de:2d:10:6e:1c:0a:8e:ba:a5:5c:1e:3e:a4:4b:95:97:7e:
4f:77:75:13:f1:0a:dd:b1:f7:ce:e9:80:b7:69:af:3f:42:6f:
7f:00:2e:1a:63:a6:b3:8e:af:10:63:b8:63:93:58:f5:b5:31:
a5:34:c4:52:bc:b7:99:21:55:5f:48:77:de:f3:1f:3a:69:4a:
b8:60:c1:16:e2:55:c0:40:ad:79:f5:ac:68:3f:f3:bc:b6:21:
a0:5c:14:29:4c:92:09:16:a0:6b:67:8f:ad:45:19:76:af:3d:
44:a3:ff:0c:92:f7:6f:e7:29:56:93:5f:76:b6:98:06:96:81:
86:08:af:b9:a7:da:ac:7b:b4:8c:90:f5:a5:1f:4b:f3:1a:18:
9f:a6:7c:6b:9a:7c:d5:31:8a:9e:f8:b2:ba:1c:8a:e9:f0:98:
28:c5:35:b7:16:f8:58:1d:ae:0c:93:62:fc:b3:e7:5a:5f:63:
d8:f0:44:2b:13:0f:be:f3:6d:f9:1a:d6:74:23:db:dc:ef:23:
d2:8f:42:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDs0zbFOWS4bopkmeT53WPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDIzYjM5NzA1YjM0NWE4NmVmZjNmMTRlZjZiMWU0ZGI0
NTkzOWUwHhcNMjYwOTI5MTEwMTAwWhcNMjYwOTMwMTEwMTAwWjAzMTEwLwYDVQQD
Eyg2NDAxZjY2ZDBlM2I0Zjk3YjZmYjBmMGZjZDE2YWY5MGYyZDFmNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G9DMQTZw5DGXv21ossakUC+KMkj
GbXRRmDHIsrOUdXFUtoLA8Tl8Xw9ztRhW94UrPVSmdYN260PreVPWyXf0rxtHpRG
fd/pXpf4OTPjtFhD/q0XapLYDl3JEp7XkUw64lLHV507VB9pmJq5//r74S8SkpMv
PV7DXU4pDMBzdfg/5CWzoErYqp/WA45J8Fm1yhso5ONjiQXFfNIUWJeuWr4N42Pl
/KsPSSwcVepxaZfmh6SEedi1Qaao07Iby90N6YNEcBVTzMw1aCAM0ZJM2SJRtoiB
E0XZQ9ufJfe2kMLsh505zdNKTbdsm1Pof8uOv+KMePvNFMfd4aa1B5QW/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQB9m0OO0+XtvsPD80Wr5Dy0fRuMB8GA1UdIwQY
MBaAFIMCOzlwWzRahu/z8U72seTbRZOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYt
M2I4ZmJmZmY1MzQyLzEvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYtM2I4ZmJmZmY1MzQy
LzEvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoO6lFoae
pJ1W/yuFLhuFqxoAvey/viKXVK+c6lrVwBWrs8mge3Jm+SKmuPYdzwtiCN03fXnk
jd4tEG4cCo66pVwePqRLlZd+T3d1E/EK3bH3zumAt2mvP0JvfwAuGmOms46vEGO4
Y5NY9bUxpTTEUry3mSFVX0h33vMfOmlKuGDBFuJVwECtefWsaD/zvLYhoFwUKUyS
CRaga2ePrUUZdq89RKP/DJL3b+cpVpNfdraYBpaBhgivuafarHu0jJD1pR9L8xoY
n6Z8a5p81TGKnviyuhyK6fCYKMU1txb4WB2uDJNi/LPnWl9j2PBEKxMPvvNt+RrW
dCPb3O8j0o9C6A==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:06:52 2026 by rpki-client