Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File: GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier: 5ApZWvhBNFUD2nSLX/zOzAwYOevZsnXKueTFxCG72Ng=
Subject key identifier: D4:CE:AB:9D:C6:08:5A:68:E9:56:BC:3C:33:B6:42:31:69:8D:B3:FA
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer: /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial: 01A0C5FC7EBB30C50502592A2DA4AAFA224D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number: 19F9
Signing time: Mon 21 Sep 2026 22:00:53 +0000
Manifest this update: Mon 21 Sep 2026 22:00:53 +0000
Manifest next update: Tue 22 Sep 2026 22:00:53 +0000
Files and hashes: 1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: hXzqqT+6Bzj6tzhw2YcpAJdy7CunghOx/CFzr14iIxw=)
2: O1x05-HbZz9z_RAG_UsW8fq9KnQ.roa (hash: RqXyqzQCK+VpxYKPTIZPxW8p4AdlK8gMbx5a8aqVV1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:7e:bb:30:c5:05:02:59:2a:2d:a4:aa:fa:22:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Validity
Not Before: Sep 21 22:00:53 2026 GMT
Not After : Sep 22 22:00:53 2026 GMT
Subject: CN=d4ceab9dc6085a68e956bc3c33b64231698db3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:b7:3d:e6:ce:e0:e2:e6:2f:44:97:d0:5b:
41:d0:b2:68:71:68:3f:df:5f:2b:af:dc:34:51:54:
24:97:be:5d:fd:90:eb:49:cd:13:a8:02:15:fa:35:
da:55:4e:3c:d8:9b:6c:00:47:b1:ca:21:5a:8e:a2:
15:c1:e0:09:ac:c6:09:c6:0c:77:dc:37:5c:76:10:
a5:71:f4:23:a6:88:d7:21:65:18:96:73:09:8b:19:
15:41:0d:49:14:a2:2b:1a:3d:40:9b:45:05:2f:fa:
0f:fb:fa:ef:ae:ee:bd:16:fc:94:98:5f:46:b4:62:
c4:fc:81:33:eb:cd:6e:32:7d:e7:ea:3e:4e:08:57:
76:e5:42:a5:74:20:cc:a7:d3:f2:ab:d6:33:64:14:
a6:07:92:81:76:81:a9:b5:7f:74:88:4e:f2:b6:e7:
93:74:02:d7:6e:80:35:81:03:8d:91:6a:8c:b0:28:
9b:f0:e2:85:2c:3f:05:78:9a:3b:89:22:53:9d:32:
00:1a:a4:e3:70:3a:c1:67:7e:da:06:15:84:5f:df:
86:bd:08:da:d5:37:08:34:d4:c3:38:95:6a:72:16:
3e:a1:cd:41:1a:1c:55:5d:de:03:0f:a2:8e:41:74:
95:f5:50:1d:6f:29:3e:eb:e9:24:84:17:7e:fb:8f:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CE:AB:9D:C6:08:5A:68:E9:56:BC:3C:33:B6:42:31:69:8D:B3:FA
X509v3 Authority Key Identifier:
keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:00:da:75:a1:21:99:3d:71:b6:c9:99:dc:2f:ff:84:8e:a2:
88:b6:e8:ff:e1:81:ea:6b:e2:de:55:45:29:4d:2a:4e:77:6e:
3b:52:58:e6:e5:43:b0:7f:30:ce:e4:ce:da:4b:75:6b:eb:af:
68:51:6a:18:c9:bb:77:73:94:53:7c:18:aa:9e:2b:ed:da:79:
01:25:0d:62:77:bd:9b:87:cf:37:b9:8b:2f:03:6f:e6:3a:1c:
6f:f8:18:d7:cd:a0:23:81:1f:5f:65:33:e1:0e:0b:b7:4c:04:
bb:eb:db:46:fb:9b:71:e2:b3:a2:8e:e4:1d:f8:ce:51:11:9d:
2a:de:e7:c1:9b:fb:e7:28:22:09:e8:4d:35:78:06:97:90:fd:
19:a0:e8:cf:7a:16:f9:ae:66:c0:11:1e:7f:cb:47:f9:ee:f3:
fe:7c:ae:13:05:c4:41:2f:20:ff:8f:16:4d:fa:cb:dc:27:9c:
11:b6:ad:0f:ab:7f:f9:4c:6f:61:d1:8e:21:64:39:e8:32:0a:
99:66:d9:f7:dd:d1:32:2f:c9:d4:d5:89:f6:05:97:13:fa:00:
1b:b6:c2:eb:5e:e0:f5:36:e4:5f:44:78:a7:7c:dc:6b:52:99:
ab:71:08:bb:13:91:ab:b7:6e:d3:c2:9a:a5:75:96:8e:a0:fe:
09:17:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:35:32 2026 by rpki-client