Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: DdYh7vMXLJP9JvwEegGUukyeGd2918rLApvXYH0XY5Y=
Subject key identifier: 0A:E9:6D:6F:AD:77:C3:FF:5A:BD:3B:F9:44:55:6F:D4:DE:96:B1:6C
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 01A0EAE5282BB2DD26769FE65914D2951F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 0C20
Signing time: Tue 29 Sep 2026 02:01:21 +0000
Manifest this update: Tue 29 Sep 2026 02:01:21 +0000
Manifest next update: Wed 30 Sep 2026 02:01:21 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: G/n3Iw66zqTik6VJD3dbB/F5VahcUYUhNyry0VREG38=)
2: nTSOIsFCXPktLiPKU0rpSqAxP9c.roa (hash: p4pPo4o8ji9IxG+yykgVyf22JPwriVlViBGbSDBIE2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:28:2b:b2:dd:26:76:9f:e6:59:14:d2:95:1f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Sep 29 02:01:21 2026 GMT
Not After : Sep 30 02:01:21 2026 GMT
Subject: CN=0ae96d6fad77c3ff5abd3bf944556fd4de96b16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:6f:7b:c2:d3:64:54:88:75:18:bf:4b:01:
80:27:40:1b:9b:2e:0c:06:15:98:92:23:c9:e6:fe:
48:ea:0f:06:f4:1e:ec:cc:07:6d:95:42:c1:28:2f:
91:25:de:34:b7:be:fe:3d:f5:2e:3f:45:a4:62:ad:
64:f9:f6:59:04:43:10:9e:71:9a:52:a6:f6:01:70:
75:c9:13:2f:bb:38:57:a3:df:0d:45:5a:4a:fc:73:
1d:07:1b:5e:1e:d3:60:cc:17:c3:95:0d:e2:fd:da:
8d:fd:c3:c2:23:13:64:c7:e1:df:c4:52:f4:4b:4f:
96:a3:9f:cb:cd:56:52:a3:06:97:bf:52:e8:df:62:
01:a0:57:d9:c7:c1:d9:09:24:55:46:9f:bd:97:64:
64:5f:ec:de:f6:52:de:c5:21:ef:48:a0:e4:e7:85:
b1:6e:23:19:f7:c4:f7:c0:8f:8f:73:70:ed:1f:34:
a7:13:72:04:2b:fb:92:84:04:27:b5:ca:e4:00:fa:
ca:d1:7a:54:3c:07:d3:27:89:a6:b9:e7:22:dc:05:
99:d1:51:00:4f:11:fd:5b:22:73:c0:f6:0f:f6:18:
b6:b9:70:1e:92:f3:c5:78:b5:7d:2f:61:82:5b:33:
c1:55:a7:3e:6f:e5:df:ee:63:94:59:49:4b:81:95:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E9:6D:6F:AD:77:C3:FF:5A:BD:3B:F9:44:55:6F:D4:DE:96:B1:6C
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:08:4d:b6:f1:d9:93:20:64:de:38:c1:5c:71:57:9f:e4:26:
1f:92:50:49:22:fc:25:27:e1:0b:f0:14:f5:18:be:ea:53:c6:
d1:d3:a4:a3:2b:93:7b:e2:74:8c:1a:55:15:27:25:9b:01:34:
9d:12:8d:e9:22:25:15:40:45:10:f0:b0:cc:56:29:82:03:cf:
17:f9:88:a6:2f:c7:56:ef:25:ae:7c:6e:74:95:0d:fb:79:e7:
7d:11:74:ec:18:69:a4:f9:78:ca:9d:a0:76:6a:63:f6:1b:77:
1f:71:2a:ed:1b:79:ff:15:66:51:a0:49:46:7e:d2:7f:0b:8e:
50:93:d0:7b:8f:1f:f9:98:ec:94:b7:45:19:41:41:1c:c0:89:
3e:07:f1:19:02:ab:bf:1a:1f:87:b8:3e:a7:a9:84:75:75:9a:
17:be:b1:bf:ab:e2:70:38:ea:e7:9c:e3:db:c3:ea:44:de:97:
e7:9f:4c:94:b9:f3:75:2c:c5:d0:2a:bb:fe:14:13:54:cb:f5:
35:e1:21:66:12:84:fa:f0:d5:d2:a3:82:13:a3:dc:ee:12:90:
15:85:e9:d9:05:0f:db:df:0e:d7:34:6a:cd:c6:47:59:d3:ca:
e1:8b:1b:f1:5c:72:65:85:0c:d8:28:a3:81:f2:bd:d2:fb:84:
68:ce:2b:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDq5Sgrst0mdp/mWRTSlR8cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZGMyMzUyMTE3NjAyMzIyZDc0MWM1MTM2OGNhOGI4ZGQx
YTNlYWEwHhcNMjYwOTI5MDIwMTIxWhcNMjYwOTMwMDIwMTIxWjAzMTEwLwYDVQQD
EygwYWU5NmQ2ZmFkNzdjM2ZmNWFiZDNiZjk0NDU1NmZkNGRlOTZiMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTxve8LTZFSIdRi/SwGAJ0Abmy4M
BhWYkiPJ5v5I6g8G9B7szAdtlULBKC+RJd40t77+PfUuP0WkYq1k+fZZBEMQnnGa
Uqb2AXB1yRMvuzhXo98NRVpK/HMdBxteHtNgzBfDlQ3i/dqN/cPCIxNkx+HfxFL0
S0+Wo5/LzVZSowaXv1Lo32IBoFfZx8HZCSRVRp+9l2RkX+ze9lLexSHvSKDk54Wx
biMZ98T3wI+Pc3DtHzSnE3IEK/uShAQntcrkAPrK0XpUPAfTJ4mmueci3AWZ0VEA
TxH9WyJzwPYP9hi2uXAekvPFeLV9L2GCWzPBVac+b+Xf7mOUWUlLgZXg3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArpbW+td8P/Wr07+URVb9TelrFsMB8GA1UdIwQY
MBaAFBjcI1IRdgIyLXQcUTaMqLjdGj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2Mt
ZDdjMGU5MzkzZWEwLzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2MtZDdjMGU5MzkzZWEw
LzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAhNtvHZ
kyBk3jjBXHFXn+QmH5JQSSL8JSfhC/AU9Ri+6lPG0dOkoyuTe+J0jBpVFSclmwE0
nRKN6SIlFUBFEPCwzFYpggPPF/mIpi/HVu8lrnxudJUN+3nnfRF07BhppPl4yp2g
dmpj9ht3H3Eq7Rt5/xVmUaBJRn7SfwuOUJPQe48f+ZjslLdFGUFBHMCJPgfxGQKr
vxofh7g+p6mEdXWaF76xv6vicDjq55zj28PqRN6X559MlLnzdSzF0Cq7/hQTVMv1
NeEhZhKE+vDV0qOCE6Pc7hKQFYXp2QUP298O1zRqzcZHWdPK4Ysb8VxyZYUM2Cij
gfK90vuEaM4rLQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:25:56 2026 by rpki-client