Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier: vxCGRPSS+4Ej19UwnZuHJK48Jkv9o1r/p+yiojdkhzU=
Subject key identifier: 73:AF:F8:7F:7E:F8:8B:C8:58:2A:0B:FE:22:15:AA:3E:A1:9B:F9:7F
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 01A13DEF012D1233EA60EC3320931C401A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number: 1AAC
Signing time: Thu 15 Oct 2026 05:00:35 +0000
Manifest this update: Thu 15 Oct 2026 05:00:35 +0000
Manifest next update: Fri 16 Oct 2026 05:00:35 +0000
Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: hSwtNk6O+QUFbiaBtJCKkCUlZo1BKHj2BasCK9Xh1wk=)
2: cXNWLJ-fheZVPTHqnxKr5qEyQiI.roa (hash: X4rdPWY18bogslRUxkmtUVkAapWRBduOj/tJgoCH118=)
3: hwehb2jiu3a77T6FcjmviTy6QbQ.roa (hash: /bg0v2TYmrbSPAxogweq6+6+Nt4ijd19YXkzkd2haPo=)
4: i220VObPvHT4HgCF-uOpmI807FY.roa (hash: s9QayADVhAmQKcOJ9dlrMCwrdZV1G0CVNvgi0G197E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:01:2d:12:33:ea:60:ec:33:20:93:1c:40:1a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Oct 15 05:00:35 2026 GMT
Not After : Oct 16 05:00:35 2026 GMT
Subject: CN=73aff87f7ef88bc8582a0bfe2215aa3ea19bf97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:07:6a:fe:04:83:99:d7:14:99:26:7b:bf:
d3:4b:05:1e:c9:fe:f4:94:aa:8d:5d:bc:55:09:28:
47:6e:e1:73:a9:f6:94:35:1e:24:7a:5f:40:18:7f:
fa:c9:b0:bf:cd:53:ba:89:04:8a:05:0d:56:be:b6:
45:17:a3:98:84:02:99:0c:e1:90:43:8c:a3:d9:51:
a0:ea:38:fa:cc:82:8b:8e:04:4b:d1:55:a2:61:ef:
ce:01:c0:21:f2:0e:3e:64:25:db:07:e9:05:7b:a6:
6d:40:0c:29:52:ec:d3:97:17:e4:9c:3a:3f:2e:8d:
b9:c2:44:0b:a5:61:62:d7:2f:4a:27:9f:ff:0c:b4:
dd:d7:ab:09:bc:61:27:a1:59:37:30:cb:d1:c3:15:
e0:5a:10:71:45:b7:39:eb:19:1c:ad:25:a7:e9:83:
02:9e:8b:0b:f8:bb:17:54:79:80:10:f9:28:f6:09:
95:54:2d:de:f8:85:33:48:14:f2:66:69:b9:dd:d7:
a1:9d:b0:44:64:21:a0:21:f7:19:51:5f:34:f4:bd:
6e:d9:bd:3d:bc:b6:de:f7:46:bd:88:39:d7:53:9f:
29:0c:e3:2f:04:00:a0:53:b8:43:6c:52:5a:5b:b2:
73:37:41:ae:c5:20:0a:26:0b:a9:82:37:28:7d:34:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AF:F8:7F:7E:F8:8B:C8:58:2A:0B:FE:22:15:AA:3E:A1:9B:F9:7F
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ec:ee:c0:32:01:68:a2:6f:07:3d:65:b9:92:88:80:37:e7:
a6:56:15:d9:6c:db:76:f9:03:9a:f4:a9:5b:ab:76:a2:0c:54:
c8:76:cd:36:86:15:d7:83:06:f9:2e:74:a6:84:c8:2b:61:09:
14:c4:a7:51:2c:64:76:e4:a2:ed:2e:96:4e:88:6d:88:97:61:
e7:41:9e:b0:bc:59:32:e9:aa:b5:7a:ed:41:6a:c4:a7:1d:56:
4d:0d:c4:d2:bb:93:65:05:1a:47:7f:fd:b1:ca:0b:3b:37:c9:
89:9a:f1:cd:7a:24:0d:89:4e:b8:03:98:2b:f0:ee:2f:64:fb:
13:46:cd:55:fe:50:10:24:3a:5b:42:72:69:20:73:46:9d:c5:
31:a9:d8:e9:fd:04:09:9b:6d:45:76:41:99:4c:36:bb:5c:d9:
61:20:e6:ea:8a:99:1c:56:10:5c:20:62:84:9a:1f:d6:5a:b6:
b9:9f:e0:93:c5:8c:45:44:0f:c5:13:c0:f9:5b:4c:49:71:31:
84:11:a5:66:8f:10:0d:f3:15:5a:fd:88:cf:7c:e3:7f:5a:5d:
77:d1:55:de:bd:c6:d1:32:fa:d0:f1:d9:dd:c1:3d:88:69:f1:
e7:9f:cc:cd:f6:6d:5e:e4:ec:7c:e8:4b:33:47:1b:a5:e0:7a:
15:50:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:12:15 2026 by rpki-client