Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: njXMID8iqH3Oc0ki4alWWeKv/Hp6A35Sgx3jL+bBTsA=
Subject key identifier: 0F:F1:6B:43:F5:BB:B4:0D:3A:B2:8B:F0:93:72:67:49:5A:B8:91:B4
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 019E1F10F2B03149C03BF0F2115FB2FE7427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 0A9B
Signing time: Wed 13 May 2026 02:01:04 +0000
Manifest this update: Wed 13 May 2026 02:01:04 +0000
Manifest next update: Thu 14 May 2026 02:01:04 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: l4Z63fXwkVoMVRhTF4XtqKx3f5i5+WHLuC5TJqV3ktk=)
2: oeqcCmqzmosVxM-WY8lmXD_44Ic.roa (hash: QSB9wBcelhQw6T6s+EAUaG07z6Fs95UlwbhmHAqSneQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:f2:b0:31:49:c0:3b:f0:f2:11:5f:b2:fe:74:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: May 13 02:01:04 2026 GMT
Not After : May 14 02:01:04 2026 GMT
Subject: CN=0ff16b43f5bbb40d3ab28bf0937267495ab891b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:dc:9d:ac:ff:da:fa:a2:db:98:37:cb:3e:
58:64:83:72:7f:69:1a:ee:7c:68:7f:47:d1:8d:03:
e3:1b:34:72:0b:54:a9:fe:50:e1:ae:61:e0:38:f6:
46:ed:b5:7c:43:1b:af:60:38:98:30:37:05:d0:41:
23:05:f2:42:c5:cb:76:45:30:a3:e7:d4:28:c9:33:
d5:8e:3f:3c:10:ca:59:46:bd:d1:93:04:1f:d1:b2:
be:4a:fe:13:f2:d0:53:26:cc:40:c5:54:f1:79:2e:
7d:df:8a:e1:e9:7a:af:0f:38:f9:e2:49:c0:fe:03:
3a:e1:c2:9d:7d:25:71:e9:51:87:61:66:ef:e4:59:
27:ed:41:99:1e:d8:06:25:55:4d:83:25:47:61:55:
b1:7a:07:31:d3:f3:bc:97:ca:c9:25:80:fd:cf:23:
2c:a4:e6:e4:4f:29:26:31:13:42:90:58:5a:ba:ca:
50:2d:64:92:f1:35:38:07:c3:9b:6c:1b:06:af:a4:
48:f9:b4:70:52:6b:f3:f3:cf:d4:a9:d2:a1:8d:76:
4d:1f:00:72:4c:b7:3e:d4:1a:39:67:71:17:48:78:
af:af:c0:f9:29:d5:c1:ea:d8:61:f5:32:15:51:59:
3d:4a:b1:59:98:ff:fb:64:b8:ca:60:ef:e4:4a:11:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F1:6B:43:F5:BB:B4:0D:3A:B2:8B:F0:93:72:67:49:5A:B8:91:B4
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9c:e5:fa:3d:94:45:16:35:ab:36:3b:01:e9:b7:36:47:a5:
c7:81:1a:2d:e5:4b:5a:3f:dd:cd:3d:08:b7:e3:06:36:a8:ec:
df:ff:7d:88:99:6b:5e:06:9e:b5:6b:ea:63:cc:6e:13:8c:32:
65:e2:11:55:5e:b9:64:db:96:40:31:dc:5b:53:3e:5e:a1:1b:
66:97:62:11:14:f4:dd:f3:da:7b:4e:79:37:d8:9b:8e:30:1b:
41:5a:63:54:f8:d9:4c:65:10:85:78:fa:ce:a4:48:d5:95:71:
be:a9:48:cd:f2:77:b7:2a:23:75:fb:6f:05:a3:bd:c2:c3:df:
e3:f9:41:6f:90:e4:fd:aa:bb:ce:be:48:05:79:d9:d4:98:df:
0e:8e:e0:65:6d:b5:d4:08:84:73:7f:a4:2c:39:a8:08:c1:14:
3f:e6:8c:3a:a5:7a:85:f0:1b:7c:e2:dc:9f:90:72:e6:03:96:
20:b4:24:a4:1d:95:c6:4c:85:04:86:2c:9b:6d:f4:a7:4d:3c:
de:d9:e7:a4:b0:31:7e:64:11:09:3e:ce:5d:2a:d1:7c:73:94:
a7:c1:22:17:2e:f3:8e:a2:e0:af:bc:75:14:56:a7:0f:61:7a:
13:43:08:8c:d7:0e:7a:50:d8:68:52:ef:4e:07:0d:4a:23:1c:
e1:9a:fa:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEPKwMUnAO/DyEV+y/nQnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDU4MDI5Yzk2Y2UyOGFmODAxOGQ1N2Y4ZmE0MDMxMjYx
NTFiZTYwHhcNMjYwNTEzMDIwMTA0WhcNMjYwNTE0MDIwMTA0WjAzMTEwLwYDVQQD
EygwZmYxNmI0M2Y1YmJiNDBkM2FiMjhiZjA5MzcyNjc0OTVhYjg5MWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNbcnaz/2vqi25g3yz5YZINyf2ka
7nxof0fRjQPjGzRyC1Sp/lDhrmHgOPZG7bV8QxuvYDiYMDcF0EEjBfJCxct2RTCj
59QoyTPVjj88EMpZRr3RkwQf0bK+Sv4T8tBTJsxAxVTxeS5934rh6XqvDzj54knA
/gM64cKdfSVx6VGHYWbv5Fkn7UGZHtgGJVVNgyVHYVWxegcx0/O8l8rJJYD9zyMs
pObkTykmMRNCkFhauspQLWSS8TU4B8ObbBsGr6RI+bRwUmvz88/UqdKhjXZNHwBy
TLc+1Bo5Z3EXSHivr8D5KdXB6thh9TIVUVk9SrFZmP/7ZLjKYO/kShGCrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/xa0P1u7QNOrKL8JNyZ0lauJG0MB8GA1UdIwQY
MBaAFBoFgCnJbOKK+AGNV/j6QDEmFRvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wOWUzMjAtYTNiNi00NWNiLTg3YzAt
MjI4Mzk3NjY5NjBhLzEvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wOWUzMjAtYTNiNi00NWNiLTg3YzAtMjI4Mzk3NjY5NjBh
LzEvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpzl+j2U
RRY1qzY7Aem3Nkelx4EaLeVLWj/dzT0It+MGNqjs3/99iJlrXgaetWvqY8xuE4wy
ZeIRVV65ZNuWQDHcW1M+XqEbZpdiERT03fPae055N9ibjjAbQVpjVPjZTGUQhXj6
zqRI1ZVxvqlIzfJ3tyojdftvBaO9wsPf4/lBb5Dk/aq7zr5IBXnZ1JjfDo7gZW21
1AiEc3+kLDmoCMEUP+aMOqV6hfAbfOLcn5By5gOWILQkpB2VxkyFBIYsm230p008
3tnnpLAxfmQRCT7OXSrRfHOUp8EiFy7zjqLgr7x1FFanD2F6E0MIjNcOelDYaFLv
TgcNSiMc4Zr6xg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:03:43 2026 by rpki-client