Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier: dLjDVJA84Am7DPLpOcJYNea84XIg2Zf0ALbiLXKE0ZQ=
Subject key identifier: 1C:B0:42:FA:86:19:C3:95:56:0E:96:4F:E0:21:8E:E1:D5:5D:3E:2F
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 01A1363617F0B02CB11A9B9FD4FE9782AE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number: 1AA8
Signing time: Tue 13 Oct 2026 17:01:17 +0000
Manifest this update: Tue 13 Oct 2026 17:01:17 +0000
Manifest next update: Wed 14 Oct 2026 17:01:17 +0000
Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: ihBbhraNU8PMhuOP+ck5MF8M1igygnQrd3T8iivXcCQ=)
2: cXNWLJ-fheZVPTHqnxKr5qEyQiI.roa (hash: X4rdPWY18bogslRUxkmtUVkAapWRBduOj/tJgoCH118=)
3: hwehb2jiu3a77T6FcjmviTy6QbQ.roa (hash: /bg0v2TYmrbSPAxogweq6+6+Nt4ijd19YXkzkd2haPo=)
4: i220VObPvHT4HgCF-uOpmI807FY.roa (hash: s9QayADVhAmQKcOJ9dlrMCwrdZV1G0CVNvgi0G197E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:36:17:f0:b0:2c:b1:1a:9b:9f:d4:fe:97:82:ae:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Oct 13 17:01:17 2026 GMT
Not After : Oct 14 17:01:17 2026 GMT
Subject: CN=1cb042fa8619c395560e964fe0218ee1d55d3e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:3c:d1:c3:61:b8:c9:62:1f:ad:a9:dc:f6:
c3:52:f6:c7:11:f5:35:7e:35:b7:cf:28:73:8b:09:
99:89:65:19:48:3a:bc:42:53:d8:3f:7f:f1:71:c5:
62:f5:34:75:ef:0e:83:af:41:37:28:a6:3b:5e:fb:
fe:e9:f6:62:e8:70:49:1a:ef:1b:0e:54:8f:b0:a4:
c2:4a:d9:91:69:e6:de:fe:85:64:cb:69:c5:7c:e1:
82:06:f5:14:18:1b:31:62:67:b9:86:d1:49:5b:af:
b5:92:fe:b2:d2:65:4d:1e:c0:66:03:ef:56:0a:98:
9a:24:0b:0b:0e:73:6c:ff:8b:cb:93:54:d6:c5:88:
07:56:98:18:6f:92:55:68:00:e6:1a:8c:1a:9b:0e:
ef:09:7f:14:09:96:e1:15:ce:8a:60:e1:d1:e3:36:
39:fd:53:db:36:a4:4c:63:11:25:b7:d6:51:b0:85:
2e:f1:63:d3:fc:9a:d2:fc:2c:e8:fc:84:1b:77:ab:
81:3d:92:4c:dd:0f:6e:29:7a:15:2f:b1:ba:09:7b:
8e:d2:0f:f7:a8:39:92:d8:dc:14:23:e7:5e:7b:c8:
76:ff:fa:c0:06:b7:fe:8b:2e:df:08:ab:03:79:12:
f8:f9:74:f7:c2:91:5d:e3:6a:f7:1a:d4:46:25:02:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B0:42:FA:86:19:C3:95:56:0E:96:4F:E0:21:8E:E1:D5:5D:3E:2F
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:bf:11:db:0a:03:7e:84:38:5e:7a:02:46:88:c8:a4:72:8f:
40:91:d1:ef:4c:01:1a:59:dd:bc:a4:3c:a1:f6:d7:df:b4:83:
ee:69:ef:0f:ba:38:61:ea:aa:81:e4:56:b3:8d:7c:0c:ff:2a:
0d:cf:36:2f:c2:9f:ce:31:ff:fa:68:4b:ec:f3:f4:45:a4:32:
24:6b:e6:5e:8e:ab:b8:1f:e0:6f:cc:06:82:9f:d4:fa:4d:1b:
15:f8:a6:e7:58:90:10:4e:2d:f5:c5:82:41:54:2a:0f:d8:0f:
04:fc:1f:f8:de:92:be:5b:e1:b7:fa:b8:94:38:79:7e:b9:10:
ba:da:2c:cc:5b:a3:bc:5b:8b:06:5e:8c:e1:17:79:e8:87:4c:
c0:34:9b:ae:e8:cc:8b:c2:b1:f3:c2:40:ad:7d:6a:20:6a:23:
a2:74:68:a5:eb:ee:cc:e9:ab:88:4d:7d:1c:8c:0c:c1:ba:1c:
2e:72:bc:14:b1:f3:ea:b3:21:0f:9a:a8:96:61:5a:65:49:55:
71:22:d3:a7:21:63:54:0f:63:03:2d:20:b1:fe:9a:4d:87:65:
c8:e6:c6:96:8f:af:6b:3d:18:36:2b:e6:a4:70:da:a5:d4:9a:
c7:e5:35:17:b0:ba:b2:ed:b9:28:46:fe:a0:79:48:7c:2a:a9:
e7:81:1b:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE2NhfwsCyxGpuf1P6Xgq4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YWNmMDdmMTM1MjIyMjY1OGI3ODllNGZlNDBlYTM4YThh
YTcxZGYwHhcNMjYxMDEzMTcwMTE3WhcNMjYxMDE0MTcwMTE3WjAzMTEwLwYDVQQD
EygxY2IwNDJmYTg2MTljMzk1NTYwZTk2NGZlMDIxOGVlMWQ1NWQzZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0880cNhuMliH62p3PbDUvbHEfU1
fjW3zyhziwmZiWUZSDq8QlPYP3/xccVi9TR17w6Dr0E3KKY7Xvv+6fZi6HBJGu8b
DlSPsKTCStmRaebe/oVky2nFfOGCBvUUGBsxYme5htFJW6+1kv6y0mVNHsBmA+9W
CpiaJAsLDnNs/4vLk1TWxYgHVpgYb5JVaADmGowamw7vCX8UCZbhFc6KYOHR4zY5
/VPbNqRMYxElt9ZRsIUu8WPT/JrS/Czo/IQbd6uBPZJM3Q9uKXoVL7G6CXuO0g/3
qDmS2NwUI+dee8h2//rABrf+iy7fCKsDeRL4+XT3wpFd42r3GtRGJQK0CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBywQvqGGcOVVg6WT+AhjuHVXT4vMB8GA1UdIwQY
MBaAFBms8H8TUiImWLeJ5P5A6jioqnHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMt
NzE2YzAzNDdhYTc2LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMtNzE2YzAzNDdhYTc2
LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsL8R2woD
foQ4XnoCRojIpHKPQJHR70wBGlndvKQ8ofbX37SD7mnvD7o4YeqqgeRWs418DP8q
Dc82L8KfzjH/+mhL7PP0RaQyJGvmXo6ruB/gb8wGgp/U+k0bFfim51iQEE4t9cWC
QVQqD9gPBPwf+N6Svlvht/q4lDh5frkQutoszFujvFuLBl6M4Rd56IdMwDSbrujM
i8Kx88JArX1qIGojonRopevuzOmriE19HIwMwbocLnK8FLHz6rMhD5qolmFaZUlV
cSLTpyFjVA9jAy0gsf6aTYdlyObGlo+vaz0YNivmpHDapdSax+U1F7C6su25KEb+
oHlIfCqp54EbWA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:59:30 2026 by rpki-client