Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
File: GpvZxsEozNlD9_dyKSLGb2a07dU.mft (raw, json)
Hash identifier: +WpGJlcoE4YzCmBmN8hhbv8/GwNbGTw86pPp1uKENV0=
Subject key identifier: 13:D1:B1:B2:92:18:12:04:C0:79:36:2A:4A:38:24:A2:F7:C7:71:E4
Authority key identifier: 1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
Certificate issuer: /CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Certificate serial: 01A1DD5E01C3494B43C241A829D6E5EEE2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
Manifest number: 038B
Signing time: Sun 15 Nov 2026 04:01:27 +0000
Manifest this update: Sun 15 Nov 2026 04:01:27 +0000
Manifest next update: Mon 16 Nov 2026 04:01:27 +0000
Files and hashes: 1: 1-oyfhNLyYue13tRFCKo0IPxmM24.roa (hash: oPm09IIbFaa5Ai2vo1N5k2H9XoBpkLq4SkDxgfWP1PU=)
2: GaCNO5uvEPZSSwfLA86l-W_3H7o.roa (hash: Q+4U2eLN8lYe4XRd9553vr9mNVPmss4+izmTxQVodwk=)
3: GpvZxsEozNlD9_dyKSLGb2a07dU.crl (hash: VO63qXggNB3n++5F7DP+5stPq8mYu7XjkqGk2SjPRro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:01:c3:49:4b:43:c2:41:a8:29:d6:e5:ee:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Validity
Not Before: Nov 15 04:01:27 2026 GMT
Not After : Nov 16 04:01:27 2026 GMT
Subject: CN=13d1b1b292181204c079362a4a3824a2f7c771e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:11:f2:7f:57:a0:80:d8:94:17:2e:1e:2e:
f3:16:62:54:47:21:06:14:fd:42:65:c6:a6:3c:09:
05:52:68:7c:50:07:d7:31:42:cb:cc:e9:80:fe:e6:
26:b6:77:99:ed:dd:df:1a:42:f9:b2:6e:5c:cb:52:
f6:8b:70:33:1d:51:3f:15:3b:36:12:45:ab:e0:f7:
59:83:e4:65:9a:c6:9c:af:0a:29:bf:91:50:d8:4d:
ca:87:34:1c:7f:44:b3:c3:68:d3:f3:19:ee:a6:df:
af:5f:b6:eb:5d:e5:b3:cf:e1:b5:7b:e4:45:d6:6a:
e7:f6:4c:4c:09:93:fb:2a:d8:0c:3d:25:e7:be:f7:
4d:1c:4b:12:03:a4:dd:e2:0e:d9:4f:bd:2c:5b:d9:
0a:ce:dc:56:74:b7:6f:2e:33:be:89:f8:14:88:e4:
a3:bd:ba:a1:cb:df:ae:bd:32:3d:4f:1e:a3:aa:45:
b5:c2:a9:d9:b3:71:7e:fe:4c:af:f0:18:f6:3a:8a:
3c:ed:44:c5:b8:c1:32:e5:ab:d4:0f:17:6d:bd:c7:
12:d8:7f:fe:3a:36:1c:dc:7b:a9:df:0e:94:7e:a2:
e4:5c:38:37:b1:b9:1c:be:9f:a5:a9:ce:b9:16:63:
b1:da:69:6d:46:81:a0:c1:16:4e:4c:06:fe:5f:7b:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D1:B1:B2:92:18:12:04:C0:79:36:2A:4A:38:24:A2:F7:C7:71:E4
X509v3 Authority Key Identifier:
keyid:1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:47:fc:47:cc:57:9e:fe:71:79:f5:21:9d:92:ba:26:a4:1e:
ad:8c:87:6b:13:be:e6:6d:21:e3:2a:28:c3:8f:db:ab:5c:6c:
25:f4:35:6a:28:56:5d:35:a7:83:b0:b0:76:28:f8:46:36:24:
67:d7:ca:b6:79:62:39:8d:67:e4:df:92:d4:f5:f1:f8:b1:27:
72:34:62:e4:54:e8:77:19:29:82:6e:1a:a3:04:25:4d:12:92:
5f:ee:20:ab:99:59:69:46:5b:c9:ec:98:16:d2:aa:0c:8d:dc:
74:8d:f1:2b:78:1d:8e:72:39:55:ac:d0:1d:4a:f0:ec:70:64:
25:c5:8e:ae:81:e0:6d:c2:26:6b:43:dc:5d:02:c6:f9:93:f1:
c1:17:d7:5f:40:de:1c:f5:a1:12:79:e7:51:0a:24:f5:d5:7d:
b3:ee:d0:f9:2a:6f:0e:28:d0:78:2c:a9:01:6f:6b:07:48:09:
85:80:ea:9b:b8:3f:98:58:00:73:23:49:4d:32:cd:e0:c8:c2:
91:3b:90:4a:5e:e9:4e:65:b8:db:76:82:17:b2:b1:f1:e7:e4:
30:19:9a:21:a6:72:25:6a:9c:56:db:8c:c6:7d:f3:4d:f8:f2:
33:fa:59:a2:71:74:34:bb:c1:49:d6:d5:86:d3:01:97:d7:9e:
41:4f:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:23:25 2026 by rpki-client