Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
File: GpvZxsEozNlD9_dyKSLGb2a07dU.mft (raw, json)
Hash identifier: CvVTPCdUxb71k1QPSU37jxndhIXVrNs3sz8c6qvn0Vg=
Subject key identifier: CA:46:48:C4:4D:47:73:15:9F:6D:95:91:F0:F6:C8:D6:76:CC:1E:17
Authority key identifier: 1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
Certificate issuer: /CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Certificate serial: 01A0D8A7DEAEB31518169E9D985BBE8153A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
Manifest number: 0304
Signing time: Fri 25 Sep 2026 13:01:15 +0000
Manifest this update: Fri 25 Sep 2026 13:01:15 +0000
Manifest next update: Sat 26 Sep 2026 13:01:15 +0000
Files and hashes: 1: 1-oyfhNLyYue13tRFCKo0IPxmM24.roa (hash: oPm09IIbFaa5Ai2vo1N5k2H9XoBpkLq4SkDxgfWP1PU=)
2: GaCNO5uvEPZSSwfLA86l-W_3H7o.roa (hash: Q+4U2eLN8lYe4XRd9553vr9mNVPmss4+izmTxQVodwk=)
3: GpvZxsEozNlD9_dyKSLGb2a07dU.crl (hash: V1f+QNk4dGA0HmullS07rfxyjJUZZvEFNltPrUR2k+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a7:de:ae:b3:15:18:16:9e:9d:98:5b:be:81:53:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Validity
Not Before: Sep 25 13:01:15 2026 GMT
Not After : Sep 26 13:01:15 2026 GMT
Subject: CN=ca4648c44d4773159f6d9591f0f6c8d676cc1e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:b6:0b:bf:fe:de:f2:9d:0e:89:ce:07:ce:
1a:40:3b:0f:0e:ae:ac:78:17:ef:1a:b6:95:f5:4b:
7b:bd:8f:23:49:01:0c:0e:33:1d:12:58:93:b4:ff:
53:c8:cd:f3:5e:12:38:f6:f8:fd:d8:b5:ef:62:cc:
6e:b5:b3:6f:fc:fd:5b:54:75:cd:ad:0e:c7:df:ee:
87:c0:a5:0a:f8:66:02:f9:2f:de:b7:43:0b:0f:85:
2a:ae:ad:dd:f1:fa:7e:85:88:a5:e2:30:65:da:b4:
b4:2b:37:c4:56:57:49:a0:14:38:9e:08:96:a3:ae:
46:4d:00:ff:0e:14:f4:41:3b:4a:26:a9:9b:68:37:
57:44:e5:8b:8e:39:68:8e:ac:0b:cb:69:ed:db:85:
59:04:5e:67:90:d0:81:05:e7:8f:9c:ae:bb:7f:5e:
8b:e6:dc:e2:9b:3d:34:33:1c:e1:b0:67:b8:f3:76:
89:83:a4:18:50:47:13:5a:69:2e:95:83:ed:1e:bd:
60:a8:21:4d:61:0c:70:b6:22:e7:05:cf:12:bd:35:
89:91:2e:9e:6f:c7:44:82:8c:c7:52:17:72:28:db:
24:9e:8b:91:50:e7:ac:15:0d:3a:f9:ff:ae:76:e0:
63:52:77:a9:c3:bd:ac:4e:db:c2:38:20:a8:2f:ab:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:46:48:C4:4D:47:73:15:9F:6D:95:91:F0:F6:C8:D6:76:CC:1E:17
X509v3 Authority Key Identifier:
keyid:1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:75:32:79:4f:97:b1:4a:ee:07:03:17:95:36:d9:37:2b:11:
8d:5c:00:8d:40:a7:7b:3c:4c:ff:86:63:81:56:53:f5:be:fc:
74:80:ea:52:ba:8b:65:62:48:72:b1:10:69:d6:68:69:33:13:
b7:3c:51:29:6d:4c:40:81:2b:7c:6c:c3:e1:15:83:cd:36:21:
31:2c:56:d5:aa:30:7f:83:d9:8d:21:af:84:46:ea:81:83:2c:
4a:79:36:89:3e:7b:bd:54:48:ee:76:c1:1d:5f:c9:c6:21:6b:
b6:75:8b:4c:66:79:3f:22:9b:72:6e:70:d2:7c:b8:da:a8:9f:
f4:f7:bf:a2:51:9e:1f:1c:3e:e5:90:1b:86:28:67:5e:5b:14:
3f:de:66:b3:b5:4c:20:b5:ef:5f:37:01:08:5f:8e:6f:04:a7:
6b:52:06:8d:d7:dd:2d:30:36:45:13:8a:9f:6b:67:5e:fd:be:
d0:82:52:af:5c:44:f1:14:db:ed:ab:88:c7:7c:60:0a:6e:ee:
24:c1:0b:79:f5:16:22:d3:74:b9:7e:c7:b3:69:54:c2:61:0a:
14:08:87:c9:23:a2:76:fe:c0:35:2b:19:a7:d0:21:0c:cb:c4:
7d:48:b7:02:ca:9b:3e:e2:1b:a0:49:9e:c4:cf:30:30:97:4a:
de:ac:2d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:15:14 2026 by rpki-client