Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier: OQYaBuV6W2cltYBudx5AEEN+COjU/YXdfLfMz8704Ik=
Subject key identifier: DC:57:5C:A2:3E:8F:8A:44:CA:7B:FB:08:35:B7:C3:C4:F2:3A:89:CF
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer: /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial: 01A0E99B7F96AE7FF80847E5686F4EC0D0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number: 1A7B
Signing time: Mon 28 Sep 2026 20:01:17 +0000
Manifest this update: Mon 28 Sep 2026 20:01:17 +0000
Manifest next update: Tue 29 Sep 2026 20:01:17 +0000
Files and hashes: 1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: RB0WMelOglobaY9YER2Ibqg6psO6Exz0WduuztswGro=)
2: R5kKLGujwVyN11kdJlzsqOL8oRw.roa (hash: cDKxoErZto4JESswwKsE0Hav5uBoVZS9w/0qja84b7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9b:7f:96:ae:7f:f8:08:47:e5:68:6f:4e:c0:d0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Validity
Not Before: Sep 28 20:01:17 2026 GMT
Not After : Sep 29 20:01:17 2026 GMT
Subject: CN=dc575ca23e8f8a44ca7bfb0835b7c3c4f23a89cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:f1:03:e7:e7:cd:65:6e:8e:e7:e4:94:d7:
67:cb:a2:d2:17:cc:90:40:b2:17:46:60:02:25:a1:
2c:85:b9:f0:45:52:7b:89:70:cf:20:4b:45:2f:60:
90:2a:09:b1:38:e6:12:1c:60:be:b4:70:54:0f:b2:
fd:d8:63:77:44:50:79:01:c4:0d:12:99:f5:33:a4:
ea:d7:0c:f3:5c:4b:f6:12:2b:5f:4e:81:73:33:b5:
d4:76:f0:65:68:66:a9:fd:a4:f7:6a:87:ea:72:4f:
f0:c3:c7:ad:aa:44:c1:7b:00:91:f5:fb:31:2a:e6:
40:73:40:49:95:2a:1d:8f:05:15:b9:c8:ba:22:5b:
75:19:6d:71:ab:e3:44:cb:9e:18:8f:40:9d:da:dd:
7d:45:47:99:0f:da:6f:14:d4:55:a2:23:45:57:e2:
99:b2:7a:0c:cd:9d:6a:38:88:88:2c:b8:86:30:41:
14:7c:ea:b4:9d:b0:ae:81:73:d7:42:af:59:c5:82:
72:b2:9b:0b:0b:42:c7:d8:67:07:7e:c1:7d:2e:26:
20:b6:59:ac:99:48:32:ac:45:87:f7:0f:b2:cf:a9:
52:52:5a:59:c5:a0:ba:9f:da:5f:1f:97:c4:45:cf:
3d:d3:a2:c9:b6:0a:0d:b4:4e:d7:5a:00:c1:2a:e4:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:57:5C:A2:3E:8F:8A:44:CA:7B:FB:08:35:B7:C3:C4:F2:3A:89:CF
X509v3 Authority Key Identifier:
keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:39:0f:f0:15:8a:42:82:5f:12:25:85:90:45:71:15:99:09:
13:8a:53:7b:d4:fe:b8:3a:f8:db:bb:8f:ff:97:a8:8e:39:01:
6b:d6:e9:48:85:e1:5a:42:3c:ff:a6:15:cc:85:bf:9c:c3:b1:
74:0d:0f:1f:ce:60:63:83:12:f2:82:eb:62:1a:ea:83:a2:f2:
6d:0d:61:6f:2a:84:0e:55:e3:df:02:90:70:83:8f:20:0a:ba:
da:b5:54:0f:5d:f7:48:5e:f0:0c:9d:00:93:b8:2c:6b:7b:50:
65:87:89:d7:a9:3a:75:2a:af:2b:7d:e2:87:b3:2d:4c:85:38:
27:89:83:30:b9:a1:5c:02:d0:99:aa:78:e6:33:8a:42:2a:29:
4b:5f:5f:a0:c5:42:37:6a:06:82:af:54:75:7e:b2:ae:14:40:
ae:63:c0:f5:54:ed:de:bf:47:f3:20:7e:b9:d1:5e:c6:dd:af:
c8:9d:b8:e4:29:f8:f4:fe:fd:4c:92:e1:28:65:05:ce:15:c6:
f9:cd:66:1b:f3:ce:74:b2:98:4f:63:42:4b:ca:81:f5:1d:b0:
66:32:b4:4a:47:db:0a:c1:38:24:0c:95:ff:8f:e8:6b:a7:52:
64:84:e3:6d:00:70:75:da:d9:0d:88:5a:16:3e:82:b9:b7:a5:
ce:65:82:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpm3+Wrn/4CEflaG9OwNDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhM2U5NzBlZDYyNzcxMzQzYTA5NmZmYjJlZmMyNmFiYjdl
ZDY4YWYwHhcNMjYwOTI4MjAwMTE3WhcNMjYwOTI5MjAwMTE3WjAzMTEwLwYDVQQD
EyhkYzU3NWNhMjNlOGY4YTQ0Y2E3YmZiMDgzNWI3YzNjNGYyM2E4OWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzvxA+fnzWVujufklNdny6LSF8yQ
QLIXRmACJaEshbnwRVJ7iXDPIEtFL2CQKgmxOOYSHGC+tHBUD7L92GN3RFB5AcQN
Epn1M6Tq1wzzXEv2EitfToFzM7XUdvBlaGap/aT3aofqck/ww8etqkTBewCR9fsx
KuZAc0BJlSodjwUVuci6Ilt1GW1xq+NEy54Yj0Cd2t19RUeZD9pvFNRVoiNFV+KZ
snoMzZ1qOIiILLiGMEEUfOq0nbCugXPXQq9ZxYJyspsLC0LH2GcHfsF9LiYgtlms
mUgyrEWH9w+yz6lSUlpZxaC6n9pfH5fERc8906LJtgoNtE7XWgDBKuRXNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxXXKI+j4pEynv7CDW3w8TyOonPMB8GA1UdIwQY
MBaAFBo+lw7WJ3E0Oglv+y78Jqu37WivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUt
ZDQ4OTA5NGM2NjA0LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUtZDQ4OTA5NGM2NjA0
LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjkP8BWK
QoJfEiWFkEVxFZkJE4pTe9T+uDr427uP/5eojjkBa9bpSIXhWkI8/6YVzIW/nMOx
dA0PH85gY4MS8oLrYhrqg6LybQ1hbyqEDlXj3wKQcIOPIAq62rVUD133SF7wDJ0A
k7gsa3tQZYeJ16k6dSqvK33ih7MtTIU4J4mDMLmhXALQmap45jOKQiopS19foMVC
N2oGgq9UdX6yrhRArmPA9VTt3r9H8yB+udFext2vyJ245Cn49P79TJLhKGUFzhXG
+c1mG/POdLKYT2NCS8qB9R2wZjK0SkfbCsE4JAyV/4/oa6dSZITjbQBwddrZDYha
Fj6CubelzmWCMg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:47:42 2026 by rpki-client