Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: l9jy+x41fOB8dXvv0of0GWgr+GijgkquTeQbkWdShRQ=
Subject key identifier: 38:9A:E8:E5:63:78:6D:A7:B3:70:39:56:2C:52:1B:F2:CF:FE:F4:BC
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 01A13447AB48495AAE77589358B7AE9DBA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 1A9F
Signing time: Tue 13 Oct 2026 08:01:14 +0000
Manifest this update: Tue 13 Oct 2026 08:01:14 +0000
Manifest next update: Wed 14 Oct 2026 08:01:14 +0000
Files and hashes: 1: _gHdc_o1Sg4bPmajOZmaGT6ZXNU.roa (hash: fbP0Eisnj7ta1eL91x/ykjZ4/I+oNZYVlLK/j2viYek=)
2: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: NX92cFboZhZLmFasAl6t86m1irll+2xeoBWsYFHgkkQ=)
3: xfg6ND62VE_NEsRerQpNDEtguWY.roa (hash: jV8up19wMmKrYo3rkVmGEitD0urDFX1Xvcb39PAZzRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:47:ab:48:49:5a:ae:77:58:93:58:b7:ae:9d:ba:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Oct 13 08:01:14 2026 GMT
Not After : Oct 14 08:01:14 2026 GMT
Subject: CN=389ae8e563786da7b37039562c521bf2cffef4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:77:c1:96:a1:00:49:36:04:47:50:3e:43:
f2:de:ce:1b:2b:fb:46:05:c1:8c:50:d6:fa:f1:5f:
cd:d4:b5:ec:3a:fa:c4:b0:1c:ab:af:e5:79:0b:73:
0d:60:e1:6e:17:f0:77:c6:05:af:a5:6d:f0:89:69:
09:76:5c:ac:ed:2f:7f:89:aa:62:8b:e8:4f:0c:ce:
80:74:dd:fb:88:0f:c0:ef:a9:8b:28:0d:2c:73:75:
38:a2:28:70:8c:d2:03:6d:6a:d8:08:69:b8:5f:2d:
d1:5d:16:58:5f:1c:31:48:c7:ee:90:ce:e7:f3:17:
30:20:e6:04:b2:43:ad:fb:a5:c4:29:c8:31:21:56:
cf:5a:14:39:f1:64:95:48:c7:c0:6b:01:b5:74:0c:
d9:9b:0c:a5:0c:dd:dd:22:09:c6:01:f5:0e:65:b4:
8f:fe:35:30:38:a7:0d:a6:1f:6b:b4:27:8f:97:48:
9a:d5:c0:bd:6c:03:91:0c:2c:6d:fa:c7:b6:2d:e1:
11:74:dd:18:4e:a2:88:13:52:4e:e8:0e:af:31:f6:
2c:a3:1b:e8:d7:f6:95:af:df:f2:e3:c4:f2:0f:21:
d6:0b:2a:2f:1a:c4:25:8b:c6:e2:b3:0e:61:1c:f8:
83:b3:e2:a9:f8:df:e8:dd:09:a5:ee:96:c0:40:e6:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9A:E8:E5:63:78:6D:A7:B3:70:39:56:2C:52:1B:F2:CF:FE:F4:BC
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5a:2c:d5:38:cc:6b:fc:9c:30:b4:e1:7b:04:c0:52:c8:a8:
5f:37:44:a8:ea:5f:27:f0:0c:30:d8:46:7b:1f:e6:f7:04:99:
58:99:aa:16:0c:fb:d2:f0:dc:aa:c8:4b:fc:0d:94:f9:9d:5a:
a1:a7:02:7c:fe:bd:bc:5c:92:9a:5a:10:91:07:b2:ef:01:10:
7b:fa:78:4c:28:ba:90:3b:b5:da:c2:33:8f:68:d5:a3:7a:c8:
8a:49:02:7d:61:97:47:74:b1:2a:60:49:e5:18:ce:32:e9:ad:
53:45:bc:c0:ad:1b:09:85:ab:54:d4:0e:8d:3c:76:c0:41:63:
3c:b0:47:be:77:1f:4e:c6:88:91:1d:c9:52:2c:da:17:43:cc:
24:1e:a6:f9:fe:4a:f6:3f:a8:91:0a:15:69:a7:58:2c:6c:6b:
81:e9:08:61:1c:6e:c3:35:76:e7:8b:4c:74:34:91:6f:b1:24:
5b:13:57:ce:d1:87:31:b9:1c:ad:5d:53:3b:ef:08:ef:6a:c8:
23:84:7d:43:dc:09:36:f7:05:aa:77:98:5a:36:a1:2b:bd:bb:
49:df:e9:ef:7b:a1:4a:cb:58:ac:b9:b0:92:55:93:e7:2d:dc:
f5:a9:de:2f:3e:04:72:52:f5:6a:53:81:f8:07:69:38:43:34:
e3:a5:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:48:01 2026 by rpki-client