
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/62a475-860d-4dfd-a46d-72fb962067c0/1/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.mft
File: Gvo5XdbIf8z7m53XxTbWFmbrx0Y.mft (raw, json)
Hash identifier: 33s72/sn0MO4sWSvio2fjs00lBLp4lq5pqk9ZWNTpYM=
Subject key identifier: 23:46:8F:D3:30:AB:06:43:C8:2C:41:CF:D7:EF:BB:86:C6:70:17:44
Authority key identifier: 1A:FA:39:5D:D6:C8:7F:CC:FB:9B:9D:D7:C5:36:D6:16:66:EB:C7:46
Certificate issuer: /CN=1afa395dd6c87fccfb9b9dd7c536d61666ebc746
Certificate serial: 01A0BDD490DDA47FF033BFE026964D6899CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/62a475-860d-4dfd-a46d-72fb962067c0/1/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.mft
Manifest number: 45
Signing time: Sun 20 Sep 2026 08:00:19 +0000
Manifest this update: Sun 20 Sep 2026 08:00:19 +0000
Manifest next update: Mon 21 Sep 2026 08:00:19 +0000
Files and hashes: 1: Gvo5XdbIf8z7m53XxTbWFmbrx0Y.crl (hash: w3tzfFdpKPKYZkPv1DkRQeBDGAJjBcuY2jVckh5d/rc=)
2: Kp2d00RkM82wWvU0FbPeOxzxfns.asa (hash: RsT1yOkqbCoP0FYhie7Km2qUatvykadt7l+94fSyiM0=)
3: oAQJKMK8NgZqtvxbBkzDM7geQKQ.roa (hash: ZaBpVCGnBFmIfoFiVR1I1KP7qEJHmLIIk81K+9Hn9BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/62a475-860d-4dfd-a46d-72fb962067c0/1/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/62a475-860d-4dfd-a46d-72fb962067c0/1/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:90:dd:a4:7f:f0:33:bf:e0:26:96:4d:68:99:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afa395dd6c87fccfb9b9dd7c536d61666ebc746
Validity
Not Before: Sep 20 08:00:19 2026 GMT
Not After : Sep 21 08:00:19 2026 GMT
Subject: CN=23468fd330ab0643c82c41cfd7efbb86c6701744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:43:03:ed:26:c0:57:40:11:3c:b1:8c:56:
ad:58:48:a7:3f:e1:b2:cd:9c:e2:42:05:14:28:69:
19:cd:63:d1:02:66:51:15:1d:59:2b:89:ae:f8:2c:
f9:4d:25:37:61:16:95:8c:86:79:69:6e:ec:21:20:
06:b2:a8:98:74:10:bb:d9:7a:e6:f3:6d:29:19:15:
e9:62:46:46:8f:59:82:ad:fd:19:f0:8e:5e:50:7e:
b8:51:b9:ab:80:8b:58:09:07:42:a2:60:12:9e:ed:
c0:7b:24:b4:08:9e:66:27:12:d6:d8:fa:07:8c:a3:
fe:b5:50:24:72:c6:d0:79:f9:ad:f9:5d:38:9b:01:
70:3e:fe:8f:d0:75:ea:a1:b3:93:9b:6d:ea:f3:fe:
5c:06:ef:fc:0a:8c:bb:95:af:8d:62:e3:83:67:95:
33:5b:93:67:7e:f3:d8:e8:17:06:ff:0a:c5:b5:71:
3b:ff:db:91:bc:12:54:a0:b4:d6:90:e2:36:bd:f4:
27:ad:c8:75:31:0c:79:24:16:3d:4a:00:21:29:b7:
46:13:8c:40:6d:6c:64:0e:52:25:04:c1:42:4f:7c:
bc:89:fe:d1:4a:6f:fc:5f:ed:1c:fb:62:f3:57:6b:
1a:6f:95:2d:fc:ab:40:77:62:99:61:6c:29:01:ed:
50:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:46:8F:D3:30:AB:06:43:C8:2C:41:CF:D7:EF:BB:86:C6:70:17:44
X509v3 Authority Key Identifier:
keyid:1A:FA:39:5D:D6:C8:7F:CC:FB:9B:9D:D7:C5:36:D6:16:66:EB:C7:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/62a475-860d-4dfd-a46d-72fb962067c0/1/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/62a475-860d-4dfd-a46d-72fb962067c0/1/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f0:0a:f8:21:33:5b:60:a1:88:df:9c:1b:2b:64:63:19:26:
1b:d5:a7:91:7e:25:f8:74:99:a6:7a:98:32:9f:b6:60:06:b4:
28:b7:f5:d6:34:47:56:db:4a:c3:e2:48:0e:e2:6f:85:8f:67:
f9:d6:2d:f3:83:4f:35:e4:de:d4:da:42:ba:c2:a1:13:f3:8d:
68:3a:ee:87:32:99:62:9f:86:17:21:27:0f:ec:1a:bb:18:39:
82:64:ad:26:3f:01:83:51:02:40:34:e4:d6:b3:ee:04:05:21:
44:96:f2:2a:36:67:12:ea:c0:35:6e:d8:43:ed:51:b7:d9:b2:
86:19:cf:cc:07:8d:07:53:2c:dd:fe:dd:80:d0:58:8e:ea:63:
45:97:60:9c:c7:dd:9a:1e:b9:6c:22:ed:48:9f:34:bd:be:7f:
ad:d8:36:fb:51:c0:ac:fa:30:35:00:a4:55:84:f0:1e:b6:f5:
56:34:6e:16:16:0d:6b:22:af:9c:1d:ef:35:d9:ca:c0:b4:68:
22:c0:11:c2:18:62:73:2f:d2:4f:16:11:e0:f2:6e:9c:94:18:
f9:7d:61:d3:f5:89:1e:43:dd:b6:2e:98:fc:d1:45:9c:74:4b:
57:8c:f8:c7:13:5c:29:6c:e8:8b:d0:d3:3d:23:59:be:8d:1d:
3f:d0:6c:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC91JDdpH/wM7/gJpZNaJnOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZmEzOTVkZDZjODdmY2NmYjliOWRkN2M1MzZkNjE2NjZl
YmM3NDYwHhcNMjYwOTIwMDgwMDE5WhcNMjYwOTIxMDgwMDE5WjAzMTEwLwYDVQQD
EygyMzQ2OGZkMzMwYWIwNjQzYzgyYzQxY2ZkN2VmYmI4NmM2NzAxNzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseJDA+0mwFdAETyxjFatWEinP+Gy
zZziQgUUKGkZzWPRAmZRFR1ZK4mu+Cz5TSU3YRaVjIZ5aW7sISAGsqiYdBC72Xrm
820pGRXpYkZGj1mCrf0Z8I5eUH64UbmrgItYCQdComASnu3AeyS0CJ5mJxLW2PoH
jKP+tVAkcsbQefmt+V04mwFwPv6P0HXqobOTm23q8/5cBu/8Coy7la+NYuODZ5Uz
W5NnfvPY6BcG/wrFtXE7/9uRvBJUoLTWkOI2vfQnrch1MQx5JBY9SgAhKbdGE4xA
bWxkDlIlBMFCT3y8if7RSm/8X+0c+2LzV2sab5Ut/KtAd2KZYWwpAe1QYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNGj9MwqwZDyCxBz9fvu4bGcBdEMB8GA1UdIwQY
MBaAFBr6OV3WyH/M+5ud18U21hZm68dGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3ZvNVhkYklmOHo3bTUzWHhUYldGbWJyeDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC82MmE0NzUtODYwZC00ZGZkLWE0NmQt
NzJmYjk2MjA2N2MwLzEvR3ZvNVhkYklmOHo3bTUzWHhUYldGbWJyeDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC82MmE0NzUtODYwZC00ZGZkLWE0NmQtNzJmYjk2MjA2N2Mw
LzEvR3ZvNVhkYklmOHo3bTUzWHhUYldGbWJyeDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/AK+CEz
W2ChiN+cGytkYxkmG9WnkX4l+HSZpnqYMp+2YAa0KLf11jRHVttKw+JIDuJvhY9n
+dYt84NPNeTe1NpCusKhE/ONaDruhzKZYp+GFyEnD+wauxg5gmStJj8Bg1ECQDTk
1rPuBAUhRJbyKjZnEurANW7YQ+1Rt9myhhnPzAeNB1Ms3f7dgNBYjupjRZdgnMfd
mh65bCLtSJ80vb5/rdg2+1HArPowNQCkVYTwHrb1VjRuFhYNayKvnB3vNdnKwLRo
IsARwhhicy/STxYR4PJunJQY+X1h0/WJHkPdti6Y/NFFnHRLV4z4xxNcKWzoi9DT
PSNZvo0dP9BsgA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:30 2026 by rpki-client