Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
File: GpvZxsEozNlD9_dyKSLGb2a07dU.mft (raw, json)
Hash identifier: 2AwrZ4smxs90QQweo+7XTcyWLaOiG5p8P0IIvU0zPd0=
Subject key identifier: 44:E4:76:59:BC:C0:C5:E9:96:F3:94:EC:28:F4:84:4E:92:61:2B:17
Authority key identifier: 1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
Certificate issuer: /CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Certificate serial: 01A0D0EDD29E896D8DE75C259DA711972C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
Manifest number: 0300
Signing time: Thu 24 Sep 2026 01:00:41 +0000
Manifest this update: Thu 24 Sep 2026 01:00:41 +0000
Manifest next update: Fri 25 Sep 2026 01:00:41 +0000
Files and hashes: 1: 1-oyfhNLyYue13tRFCKo0IPxmM24.roa (hash: oPm09IIbFaa5Ai2vo1N5k2H9XoBpkLq4SkDxgfWP1PU=)
2: GaCNO5uvEPZSSwfLA86l-W_3H7o.roa (hash: Q+4U2eLN8lYe4XRd9553vr9mNVPmss4+izmTxQVodwk=)
3: GpvZxsEozNlD9_dyKSLGb2a07dU.crl (hash: HyNdNrF/JfAxKLKmUyvqBiFwuJ5xRew4EjWVctcBQKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:d2:9e:89:6d:8d:e7:5c:25:9d:a7:11:97:2c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Validity
Not Before: Sep 24 01:00:41 2026 GMT
Not After : Sep 25 01:00:41 2026 GMT
Subject: CN=44e47659bcc0c5e996f394ec28f4844e92612b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:b1:d4:39:c4:be:d2:df:8e:07:55:04:27:
42:b6:e1:b6:08:8a:de:dc:7f:5e:b5:9a:b6:9b:40:
55:34:a7:00:b0:b5:0e:cc:bd:ad:36:1f:ed:1a:b2:
f3:77:f4:1e:30:87:4d:6f:b2:3b:89:35:e6:46:55:
52:36:a1:78:ed:98:d2:0e:58:30:91:63:d6:d7:d4:
9f:d4:7c:36:bd:81:ea:35:93:be:04:c7:68:cc:90:
f3:80:01:8b:f8:e9:91:81:3d:1d:77:33:cd:bf:46:
64:b9:92:60:67:64:cc:e4:85:86:ed:45:ac:cb:a7:
0c:93:39:04:33:94:85:9e:59:0e:6e:6c:4c:ae:36:
e5:ac:7d:d4:11:cd:84:fb:a5:be:9d:87:cc:a0:cc:
bf:ad:d5:b4:de:21:3c:eb:b4:be:23:39:47:9a:40:
b0:ba:aa:ea:73:ac:67:a2:56:dc:64:e0:08:1b:4c:
51:35:70:47:bd:4a:3c:07:62:a3:98:d8:81:14:9b:
a7:69:ec:4f:32:8c:bb:7f:76:b6:66:79:8f:29:81:
2e:4e:1a:a6:ab:e2:ac:11:61:30:76:a7:a4:d1:12:
be:85:61:d5:8d:01:8b:6e:4c:df:2f:16:44:e1:c0:
e5:c8:ee:27:8e:69:53:03:3f:20:aa:49:06:2b:25:
35:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E4:76:59:BC:C0:C5:E9:96:F3:94:EC:28:F4:84:4E:92:61:2B:17
X509v3 Authority Key Identifier:
keyid:1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f8:ae:ec:aa:23:88:d9:20:34:70:6f:69:30:1f:c0:de:65:
fb:bb:32:0b:f9:eb:a2:ed:0d:a2:95:32:e3:e4:60:6c:2a:07:
77:8a:69:f9:f6:70:17:ec:b1:e9:48:58:93:92:75:44:4f:23:
d9:e9:46:3e:f8:c4:3c:88:e9:85:89:94:69:da:b3:09:50:d4:
99:4c:38:fe:50:e8:df:8b:be:db:46:0e:a7:e6:db:ac:8c:ca:
bc:e0:1e:60:2e:ad:6c:a4:4d:06:69:5e:c5:7a:c6:c9:5e:31:
c8:f8:71:cf:c7:1f:80:d8:66:e3:7f:6e:6b:a5:07:da:25:82:
40:ed:ea:5f:98:40:22:35:6c:0d:75:7f:47:36:fc:7e:cc:a2:
99:64:fd:3a:eb:3e:39:a1:1a:e2:47:36:14:a9:e5:f0:c0:c2:
92:e0:ea:26:53:3b:0c:02:32:af:b8:58:c6:c4:62:5e:d7:f0:
ba:f5:c8:1e:76:2d:73:a2:57:bf:fd:45:06:2d:26:67:94:b1:
30:c9:36:af:a9:19:e9:1c:1f:57:40:5b:61:e9:53:32:d8:35:
f8:6f:03:97:68:0a:d4:28:86:80:01:07:47:10:d1:12:e7:ab:
51:7c:fe:88:84:bb:82:c5:23:d8:4c:85:db:ab:c2:4c:e2:6d:
ae:db:a0:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7dKeiW2N51wlnacRlyyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOWJkOWM2YzEyOGNjZDk0M2Y3Zjc3MjI5MjJjNjZmNjZi
NGVkZDUwHhcNMjYwOTI0MDEwMDQxWhcNMjYwOTI1MDEwMDQxWjAzMTEwLwYDVQQD
Eyg0NGU0NzY1OWJjYzBjNWU5OTZmMzk0ZWMyOGY0ODQ0ZTkyNjEyYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lCx1DnEvtLfjgdVBCdCtuG2CIre
3H9etZq2m0BVNKcAsLUOzL2tNh/tGrLzd/QeMIdNb7I7iTXmRlVSNqF47ZjSDlgw
kWPW19Sf1Hw2vYHqNZO+BMdozJDzgAGL+OmRgT0ddzPNv0ZkuZJgZ2TM5IWG7UWs
y6cMkzkEM5SFnlkObmxMrjblrH3UEc2E+6W+nYfMoMy/rdW03iE867S+IzlHmkCw
uqrqc6xnolbcZOAIG0xRNXBHvUo8B2KjmNiBFJunaexPMoy7f3a2ZnmPKYEuThqm
q+KsEWEwdqek0RK+hWHVjQGLbkzfLxZE4cDlyO4njmlTAz8gqkkGKyU16wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETkdlm8wMXplvOU7Cj0hE6SYSsXMB8GA1UdIwQY
MBaAFBqb2cbBKMzZQ/f3cikixm9mtO3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3B2WnhzRW96TmxEOV9keUtTTEdiMmEwN2RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iN2IzZjUtNWMwYS00OWY4LTkwZGIt
Yzk2NzBiMmRhMzIwLzEvR3B2WnhzRW96TmxEOV9keUtTTEdiMmEwN2RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iN2IzZjUtNWMwYS00OWY4LTkwZGItYzk2NzBiMmRhMzIw
LzEvR3B2WnhzRW96TmxEOV9keUtTTEdiMmEwN2RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffiu7Koj
iNkgNHBvaTAfwN5l+7syC/nrou0NopUy4+RgbCoHd4pp+fZwF+yx6UhYk5J1RE8j
2elGPvjEPIjphYmUadqzCVDUmUw4/lDo34u+20YOp+bbrIzKvOAeYC6tbKRNBmle
xXrGyV4xyPhxz8cfgNhm439ua6UH2iWCQO3qX5hAIjVsDXV/Rzb8fsyimWT9Ous+
OaEa4kc2FKnl8MDCkuDqJlM7DAIyr7hYxsRiXtfwuvXIHnYtc6JXv/1FBi0mZ5Sx
MMk2r6kZ6RwfV0BbYelTMtg1+G8Dl2gK1CiGgAEHRxDREuerUXz+iIS7gsUj2EyF
26vCTOJtrtugAw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:07:28 2026 by rpki-client