Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: rYiTxmt96owZfcWo80DRGyGGawFrXOq8k2boOzdebP0=
Subject key identifier: 17:6C:1E:CF:F8:07:72:B3:32:4C:E5:C9:0E:73:E8:3C:9D:E3:C3:A0
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 01A0D2A65996B5223C27CCA555315D8BD5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 1931
Signing time: Thu 24 Sep 2026 09:01:52 +0000
Manifest this update: Thu 24 Sep 2026 09:01:52 +0000
Manifest next update: Fri 25 Sep 2026 09:01:52 +0000
Files and hashes: 1: QDfTLxIL9bTs2IJHGbG9J1JYEvI.roa (hash: gdEjWQnWjf/YDqv1eeE481wpqiSUZPqETZ8kJJFiZJE=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: mait0GiEOJKPO28CWtibJGu4VyGH0TVj6S+v8ezs42k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:59:96:b5:22:3c:27:cc:a5:55:31:5d:8b:d5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Sep 24 09:01:52 2026 GMT
Not After : Sep 25 09:01:52 2026 GMT
Subject: CN=176c1ecff80772b3324ce5c90e73e83c9de3c3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:2f:e8:3a:86:60:09:7b:44:c4:9b:59:87:
bc:09:78:fd:5f:e7:75:8d:1d:71:b4:ad:94:54:72:
d9:aa:7b:b7:f3:6e:d2:13:95:6d:d8:eb:ce:b8:60:
f9:e4:e7:3d:6e:4c:cb:7c:86:8a:53:ec:8e:96:16:
88:f1:5d:5b:74:3b:41:c1:f3:3d:6f:7b:67:a0:9d:
b0:d5:89:83:23:bb:44:30:95:50:20:62:60:3d:09:
9a:16:2b:0d:36:0f:50:60:24:50:d0:e4:63:9b:87:
68:31:ba:cb:aa:7b:2f:05:b5:35:b0:c3:b9:fc:70:
7c:c2:ed:79:c9:64:91:0c:3e:4a:fc:f4:80:f6:01:
77:35:82:46:c3:b8:e8:47:0b:49:4b:68:92:b3:82:
1b:d8:a5:c5:c4:54:e5:23:d0:18:8c:54:ef:19:4f:
fc:b9:60:24:46:bd:54:fe:f2:09:9c:f2:f2:72:21:
ac:0b:17:e4:5e:9b:61:95:d0:40:a7:9d:c1:18:92:
0d:29:a9:84:21:79:1b:df:8f:19:4e:5b:0e:01:8e:
84:e8:ef:1e:ec:14:14:de:73:7c:9d:41:13:49:ac:
13:06:1e:cb:12:b9:bf:9b:e3:c2:db:4d:bc:08:7d:
64:19:e8:ff:3c:29:9d:ce:fd:6c:ab:13:76:f9:87:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6C:1E:CF:F8:07:72:B3:32:4C:E5:C9:0E:73:E8:3C:9D:E3:C3:A0
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:30:7a:06:e8:a2:da:f9:0c:95:60:97:1f:de:11:67:ec:44:
c1:07:e6:b0:03:80:29:dd:52:8c:16:8a:06:61:22:04:64:80:
5a:e4:0a:91:c0:0d:25:99:f0:82:c4:26:b1:c5:50:b5:f8:81:
34:f1:9b:58:16:b4:01:fe:5b:6c:93:c7:91:6a:3b:40:01:f1:
5c:c5:e7:8b:4f:ba:18:07:f2:18:93:ec:36:0c:07:17:b7:01:
d2:da:ba:4b:c5:7d:8b:78:f7:ca:2b:ca:ab:ed:ee:7d:df:63:
67:ea:3a:73:bf:1e:b3:65:50:02:bf:40:d4:97:5f:ff:d4:08:
ab:3a:c2:32:11:12:f2:4c:29:9b:f8:c3:a5:f7:36:07:d0:64:
f8:ad:ed:46:ee:99:08:fb:9c:8b:04:e4:77:6e:1f:9a:90:dc:
74:24:0d:6f:79:dd:7f:96:f4:8f:8b:1b:2b:47:c3:9c:91:95:
2f:05:68:80:86:d8:de:e1:20:33:54:16:1c:73:67:78:89:7b:
8a:c9:7c:d5:d7:fb:7b:a7:2d:6f:6b:0e:2c:7c:93:35:d6:97:
25:f1:0b:d9:07:b4:74:f0:52:50:54:7f:cb:4a:ca:a7:d7:e6:
27:81:5e:51:f2:d6:53:0e:14:3f:a2:cb:f9:dd:c6:29:4e:0c:
fa:10:41:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSplmWtSI8J8ylVTFdi9XuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTkwMWI2NGZlMjI2NTZiOGYyZGIyNjBiNDUzZjI3OTM1
MmI3ZDAwHhcNMjYwOTI0MDkwMTUyWhcNMjYwOTI1MDkwMTUyWjAzMTEwLwYDVQQD
EygxNzZjMWVjZmY4MDc3MmIzMzI0Y2U1YzkwZTczZTgzYzlkZTNjM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgov6DqGYAl7RMSbWYe8CXj9X+d1
jR1xtK2UVHLZqnu3827SE5Vt2OvOuGD55Oc9bkzLfIaKU+yOlhaI8V1bdDtBwfM9
b3tnoJ2w1YmDI7tEMJVQIGJgPQmaFisNNg9QYCRQ0ORjm4doMbrLqnsvBbU1sMO5
/HB8wu15yWSRDD5K/PSA9gF3NYJGw7joRwtJS2iSs4Ib2KXFxFTlI9AYjFTvGU/8
uWAkRr1U/vIJnPLyciGsCxfkXpthldBAp53BGJINKamEIXkb348ZTlsOAY6E6O8e
7BQU3nN8nUETSawTBh7LErm/m+PC2028CH1kGej/PCmdzv1sqxN2+YdUswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdsHs/4B3KzMkzlyQ5z6Dyd48OgMB8GA1UdIwQY
MBaAFIGZAbZP4iZWuPLbJgtFPyeTUrfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMt
NjNkZDI3NTMwMGJjLzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMtNjNkZDI3NTMwMGJj
LzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjB6Buii
2vkMlWCXH94RZ+xEwQfmsAOAKd1SjBaKBmEiBGSAWuQKkcANJZnwgsQmscVQtfiB
NPGbWBa0Af5bbJPHkWo7QAHxXMXni0+6GAfyGJPsNgwHF7cB0tq6S8V9i3j3yivK
q+3ufd9jZ+o6c78es2VQAr9A1Jdf/9QIqzrCMhES8kwpm/jDpfc2B9Bk+K3tRu6Z
CPuciwTkd24fmpDcdCQNb3ndf5b0j4sbK0fDnJGVLwVogIbY3uEgM1QWHHNneIl7
isl81df7e6ctb2sOLHyTNdaXJfEL2Qe0dPBSUFR/y0rKp9fmJ4FeUfLWUw4UP6LL
+d3GKU4M+hBBDQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:26:27 2026 by rpki-client