Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: +kOb28BPugVTr55Cw9fBqTHAxIiQ3eaaYxiIuWiihO4=
Subject key identifier: 96:47:84:81:CD:69:F1:C4:A3:E0:C2:EC:DD:EE:5E:94:D9:68:73:3F
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 019E205A7600FE0E71114473439FFCFBB707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 08:00:59 +0000
Manifest this update: Wed 13 May 2026 08:00:59 +0000
Manifest next update: Thu 14 May 2026 08:00:59 +0000
Files and hashes: 1: _gHdc_o1Sg4bPmajOZmaGT6ZXNU.roa (hash: fbP0Eisnj7ta1eL91x/ykjZ4/I+oNZYVlLK/j2viYek=)
2: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: ORERxamKG9x8bZSiyr1hYECcEwOd7K1KaNzSY6cQ4OY=)
3: xfg6ND62VE_NEsRerQpNDEtguWY.roa (hash: jV8up19wMmKrYo3rkVmGEitD0urDFX1Xvcb39PAZzRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:76:00:fe:0e:71:11:44:73:43:9f:fc:fb:b7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: May 13 08:00:59 2026 GMT
Not After : May 14 08:00:59 2026 GMT
Subject: CN=96478481cd69f1c4a3e0c2ecddee5e94d968733f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:a9:b1:0d:c9:97:c9:2e:69:8b:3e:ae:a8:
ef:8b:99:21:63:e1:32:54:9b:0e:16:23:56:f8:ea:
6e:24:41:7a:a6:57:d1:0f:f3:7b:b9:d0:9a:60:82:
36:1e:40:21:5d:6c:7c:cc:43:99:4f:f4:67:81:ce:
12:f2:c8:09:27:b9:4b:bc:6c:df:0d:c0:53:ff:f0:
bb:69:28:74:f4:0f:2a:63:a6:de:3c:95:a8:95:4c:
cd:f7:2b:16:ab:87:dd:f2:24:49:22:1c:38:72:de:
f0:ac:8b:8b:e9:a9:93:ff:3a:f4:79:d7:3c:97:e5:
a7:6a:e9:c8:4f:03:3e:ce:fc:f4:24:ff:6a:4c:a7:
37:d2:33:68:77:0b:54:09:e3:fb:e1:ba:2e:d7:47:
bc:bd:2a:c2:3f:40:18:6b:78:3c:75:8a:8f:57:e5:
1c:e7:4e:ca:5a:85:5f:1a:53:04:4c:e4:a5:a3:5b:
ae:6e:3e:8d:aa:f0:0a:50:67:13:9d:1d:1a:4e:30:
5c:f3:fa:64:cc:c8:83:eb:6a:03:0e:40:fe:d7:fc:
9c:a6:68:77:01:17:da:7e:51:bf:2e:2a:54:fb:60:
62:45:e4:0f:23:ed:28:e4:59:99:22:20:c0:27:17:
de:f5:fd:db:03:63:aa:ad:6d:ca:b4:cb:f9:ac:11:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:47:84:81:CD:69:F1:C4:A3:E0:C2:EC:DD:EE:5E:94:D9:68:73:3F
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7e:76:25:14:b5:66:83:ea:65:10:e9:1c:86:8c:e9:7c:a7:
16:7a:9d:b5:c3:02:19:3d:f7:0f:2b:28:60:92:6d:ed:42:ba:
f4:cb:db:15:32:6d:f2:4b:92:03:e3:2c:7b:0c:6b:1d:e9:3d:
69:92:7b:69:56:68:2e:23:92:b9:16:fb:57:29:08:d8:83:ab:
30:fd:00:e1:67:dd:2a:f6:2f:ff:67:2a:a9:af:47:57:97:db:
db:ee:73:5a:8e:9c:b9:dd:59:90:97:fc:d7:75:8e:fc:e2:f9:
d1:42:0b:77:60:01:ed:2f:d1:3e:19:23:f5:fd:d7:ed:78:05:
ed:95:b2:e8:22:2f:47:cf:4b:01:97:92:00:5f:cd:4f:8a:d3:
a7:4e:26:f9:53:18:40:68:92:ae:de:e2:02:23:99:5e:79:80:
5b:4e:fe:2a:54:40:df:e8:ee:b8:da:62:cd:c7:06:df:14:d7:
73:d7:8c:19:5c:80:8a:60:0b:1f:8f:57:4f:f4:f6:14:ad:c8:
cc:ad:33:e9:da:d3:34:59:d2:63:50:48:f4:4f:9c:b0:7e:dd:
0c:9f:d4:96:de:9b:a6:b1:32:fa:4f:eb:a0:f7:37:ce:5f:1b:
15:cc:02:0c:72:10:29:d5:aa:1a:03:19:70:e3:92:0d:b9:78:
7e:56:bf:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWnYA/g5xEURzQ5/8+7cHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMmIzMGQ4OWIxYmNmZjY5OWY2NDFmODgwMjY5NDJkMTZh
NzJiY2MwHhcNMjYwNTEzMDgwMDU5WhcNMjYwNTE0MDgwMDU5WjAzMTEwLwYDVQQD
Eyg5NjQ3ODQ4MWNkNjlmMWM0YTNlMGMyZWNkZGVlNWU5NGQ5Njg3MzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH2psQ3Jl8kuaYs+rqjvi5khY+Ey
VJsOFiNW+OpuJEF6plfRD/N7udCaYII2HkAhXWx8zEOZT/Rngc4S8sgJJ7lLvGzf
DcBT//C7aSh09A8qY6bePJWolUzN9ysWq4fd8iRJIhw4ct7wrIuL6amT/zr0edc8
l+WnaunITwM+zvz0JP9qTKc30jNodwtUCeP74bou10e8vSrCP0AYa3g8dYqPV+Uc
507KWoVfGlMETOSlo1uubj6NqvAKUGcTnR0aTjBc8/pkzMiD62oDDkD+1/ycpmh3
ARfaflG/LipU+2BiReQPI+0o5FmZIiDAJxfe9f3bA2OqrW3KtMv5rBHSDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZHhIHNafHEo+DC7N3uXpTZaHM/MB8GA1UdIwQY
MBaAFIIrMNibG8/2mfZB+IAmlC0WpyvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEt
OTE0ZDVkYzUxOTdmLzEvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEtOTE0ZDVkYzUxOTdm
LzEvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhn52JRS1
ZoPqZRDpHIaM6XynFnqdtcMCGT33DysoYJJt7UK69MvbFTJt8kuSA+MsewxrHek9
aZJ7aVZoLiOSuRb7VykI2IOrMP0A4WfdKvYv/2cqqa9HV5fb2+5zWo6cud1ZkJf8
13WO/OL50UILd2AB7S/RPhkj9f3X7XgF7ZWy6CIvR89LAZeSAF/NT4rTp04m+VMY
QGiSrt7iAiOZXnmAW07+KlRA3+juuNpizccG3xTXc9eMGVyAimALH49XT/T2FK3I
zK0z6drTNFnSY1BI9E+csH7dDJ/Ult6bprEy+k/roPc3zl8bFcwCDHIQKdWqGgMZ
cOOSDbl4fla/fA==
-----END CERTIFICATE-----
Generated at Wed May 13 13:51:49 2026 by rpki-client