Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: 55kbzHIIsdM8fZA38dcl89JRKfNSS4mB926y+7VVQME=
Subject key identifier: 58:C3:19:66:E3:B2:EA:4E:CA:6A:BA:67:65:DF:D9:CA:AC:D2:A9:33
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 01A0DD60A3C2ED752C5C78E6FE6E39B2D14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 11:01:33 +0000
Manifest this update: Sat 26 Sep 2026 11:01:33 +0000
Manifest next update: Sun 27 Sep 2026 11:01:33 +0000
Files and hashes: 1: _gHdc_o1Sg4bPmajOZmaGT6ZXNU.roa (hash: fbP0Eisnj7ta1eL91x/ykjZ4/I+oNZYVlLK/j2viYek=)
2: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: bLGb56RNB/olOz55/pAap6QvG4QpdJ6oTC/HEljh58k=)
3: xfg6ND62VE_NEsRerQpNDEtguWY.roa (hash: jV8up19wMmKrYo3rkVmGEitD0urDFX1Xvcb39PAZzRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:a3:c2:ed:75:2c:5c:78:e6:fe:6e:39:b2:d1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Sep 26 11:01:33 2026 GMT
Not After : Sep 27 11:01:33 2026 GMT
Subject: CN=58c31966e3b2ea4eca6aba6765dfd9caacd2a933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:4e:88:17:64:62:2f:8e:7d:47:9f:5d:e1:
4a:9f:ed:01:f7:9a:ff:08:76:b9:dd:7c:44:5b:1f:
88:ab:d3:4b:7f:7a:59:ef:89:e0:85:7f:01:38:50:
0a:54:ef:a1:a7:d2:2c:1f:e1:d3:0a:bc:5b:7c:ed:
6c:8c:fb:ef:9f:b5:57:a0:ac:4e:bd:9d:92:9a:7e:
09:41:dc:f8:96:2d:14:7b:3e:66:d7:62:5b:d3:fc:
e7:3a:3b:2b:39:7d:77:7d:fd:23:4e:b8:b8:9f:97:
cf:3b:d6:06:f2:ad:ad:8e:15:15:84:38:a0:79:39:
5b:1f:f5:b9:a2:46:e3:eb:79:bb:0c:f2:21:34:89:
7c:3c:0b:d2:6f:45:1b:25:8e:9f:be:40:67:6c:cc:
aa:7a:b3:c7:22:37:a4:26:71:3f:64:59:71:22:f7:
bb:4f:f5:51:1b:6d:c8:47:f4:1a:ac:af:fc:a9:e5:
52:86:6e:4d:13:30:4a:18:2f:ae:98:f1:fc:16:85:
98:a9:f7:16:2e:e3:01:c9:14:5c:38:1d:25:a6:b4:
37:83:58:b2:40:ca:39:72:cb:dc:3d:aa:84:d1:57:
41:f2:1d:7a:c1:3a:e6:fe:2a:32:81:70:cd:3e:c6:
50:80:e9:85:e7:b4:e1:ff:ff:57:08:94:43:46:5b:
29:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:19:66:E3:B2:EA:4E:CA:6A:BA:67:65:DF:D9:CA:AC:D2:A9:33
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3a:a0:6f:94:c9:e3:e0:7e:2e:22:d5:e5:4e:39:f1:49:59:
f2:06:96:95:6e:ff:29:b0:ce:a0:83:f6:db:76:c5:39:82:e3:
16:21:f9:ce:9d:54:52:80:9c:a2:ca:62:49:0a:98:41:c1:eb:
5e:d7:c7:8b:7b:43:b9:57:6a:0d:d6:83:0d:dd:dc:b1:59:16:
d1:47:fc:cd:85:a0:10:e0:11:de:02:a7:39:1e:9e:f0:92:b0:
9f:5d:82:92:3f:6e:7f:72:8e:c1:16:17:fb:82:38:85:9c:11:
86:d7:e2:d2:b7:93:cd:4f:41:b0:36:fa:99:14:42:e4:b2:8c:
72:7f:7a:08:b3:60:b1:89:4d:89:9e:04:9f:9b:2c:92:ba:26:
21:5c:32:73:70:8d:71:c0:06:c8:5a:37:f4:09:7e:ee:b7:35:
36:a7:22:de:ce:6b:1b:c5:55:e7:60:1d:37:bf:bd:09:d6:73:
50:fc:9f:f8:8c:1f:60:7b:b6:c6:7f:0a:a1:c0:aa:94:c7:7e:
e3:f8:44:d8:8b:66:3d:f7:7a:c1:1a:4e:b9:ee:a6:9f:05:ec:
1d:d9:ab:2a:f6:ed:54:6f:b5:3f:3b:e0:26:f5:31:fd:45:8d:
ab:ba:d4:b6:3b:c3:f6:81:65:15:61:dc:fc:ac:8f:e1:27:86:
97:14:41:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:29:16 2026 by rpki-client