Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
File: 1GbRcMgQujTELpIOhNQmKEWXf4U.mft (raw, json)
Hash identifier: 6tzh5qRfMVvHV5kopXcSDhvmrslgM7VzLIz95g26Dsk=
Subject key identifier: 7D:D5:97:EF:35:30:B8:7E:63:F0:96:08:73:B5:BA:F3:05:6A:F5:1C
Authority key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
Certificate issuer: /CN=d466d170c810ba34c42e920e84d4262845977f85
Certificate serial: 01A0ECD3E1A384810D95B665A6D57E85819F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
Manifest number: 098E
Signing time: Tue 29 Sep 2026 11:01:43 +0000
Manifest this update: Tue 29 Sep 2026 11:01:43 +0000
Manifest next update: Wed 30 Sep 2026 11:01:43 +0000
Files and hashes: 1: 1GbRcMgQujTELpIOhNQmKEWXf4U.crl (hash: NwZbAxP5kGReTNSfGffpACBcp6EV4FgGS13dV6J+JbA=)
2: XyvlakrX669O27yJ8vUEJgcOTBA.roa (hash: bXnP/tpzRgnQjjCGNcc58oyJ9DS3aNnplVA7Ww2qw84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:e1:a3:84:81:0d:95:b6:65:a6:d5:7e:85:81:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d466d170c810ba34c42e920e84d4262845977f85
Validity
Not Before: Sep 29 11:01:43 2026 GMT
Not After : Sep 30 11:01:43 2026 GMT
Subject: CN=7dd597ef3530b87e63f0960873b5baf3056af51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:74:59:f6:fe:b8:fd:a7:c3:2c:09:e2:0e:
04:65:f5:ed:31:4d:92:a0:8c:a0:7d:54:d5:0d:49:
5f:8d:67:e3:86:f8:bf:0e:97:8e:b3:2f:57:49:6c:
f2:f5:bd:a0:ba:af:4b:fe:2b:44:f2:87:eb:f9:95:
3c:2c:12:79:53:b6:78:62:e9:dd:84:08:0b:bc:7b:
87:f4:99:13:db:89:ac:60:0f:17:53:ea:30:5a:a6:
ba:61:d4:08:a3:df:92:45:26:7b:4f:e5:5a:50:f3:
12:5a:15:66:3f:b5:74:5c:1e:d8:58:83:fc:4b:f2:
6d:06:bb:a9:94:a1:cf:33:a4:67:ca:e5:5a:62:44:
05:e8:80:9b:dd:e9:df:1a:af:6b:9f:17:b7:f1:e6:
02:54:d1:67:5a:82:db:cc:5c:f3:08:51:a9:b4:b1:
4a:97:c9:ec:c9:c2:f3:9f:f0:38:ca:22:5a:20:db:
43:eb:51:b8:a6:52:c6:79:ee:a5:10:29:4f:2f:f9:
84:c4:2a:ac:c7:4f:41:4c:44:37:c8:ea:d8:55:f8:
a8:7b:5c:49:ef:71:c3:01:45:27:79:1e:d3:10:47:
ed:4b:b7:77:93:8f:56:ea:b9:91:30:5b:4c:15:bb:
42:ae:2a:b3:7b:85:56:d8:b3:cd:1d:9d:76:d0:f4:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D5:97:EF:35:30:B8:7E:63:F0:96:08:73:B5:BA:F3:05:6A:F5:1C
X509v3 Authority Key Identifier:
keyid:D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b4:7e:c6:40:cb:e9:42:4e:f3:2f:ba:d8:79:58:3a:28:46:
d5:62:6a:b2:91:23:69:86:e4:2a:a3:6b:93:e9:fb:a9:dd:b4:
8e:a7:dc:50:a5:6e:3b:10:87:5f:29:82:67:b4:ad:2f:2b:1c:
ea:0b:1e:4a:59:bd:15:70:b9:28:27:d9:74:e7:5c:80:a2:19:
43:48:e6:f1:c1:11:96:85:40:1b:8d:06:81:99:c3:36:61:7d:
82:08:24:19:ee:60:03:d9:c9:da:8e:5d:42:75:50:e7:1b:76:
b9:f1:65:f8:43:f2:22:d6:4a:7c:ee:82:c9:5e:95:cd:6e:97:
66:2b:34:68:a5:e6:86:15:43:85:66:e2:f1:b7:ed:98:ce:f7:
e8:22:f4:ce:5d:e7:bc:40:3a:80:ef:59:3d:22:75:c0:15:20:
d4:93:c5:2f:0b:49:17:9b:1d:2d:69:40:e6:1e:d0:69:2f:c4:
7a:b8:5a:c2:5b:4b:e8:9b:ac:5a:15:4b:64:52:37:7e:31:a7:
1c:bc:0c:cb:8c:d7:60:b9:22:03:88:7e:43:a8:10:cf:a3:8a:
9d:05:0d:2d:1b:c7:4e:1a:23:a8:90:45:fa:96:68:f0:22:ad:
24:8f:9f:54:1f:01:ed:09:12:61:24:29:01:37:80:55:5e:eb:
46:8d:6a:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDs0+GjhIENlbZlptV+hYGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjZkMTcwYzgxMGJhMzRjNDJlOTIwZTg0ZDQyNjI4NDU5
NzdmODUwHhcNMjYwOTI5MTEwMTQzWhcNMjYwOTMwMTEwMTQzWjAzMTEwLwYDVQQD
Eyg3ZGQ1OTdlZjM1MzBiODdlNjNmMDk2MDg3M2I1YmFmMzA1NmFmNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW90Wfb+uP2nwywJ4g4EZfXtMU2S
oIygfVTVDUlfjWfjhvi/DpeOsy9XSWzy9b2guq9L/itE8ofr+ZU8LBJ5U7Z4Yund
hAgLvHuH9JkT24msYA8XU+owWqa6YdQIo9+SRSZ7T+VaUPMSWhVmP7V0XB7YWIP8
S/JtBruplKHPM6RnyuVaYkQF6ICb3enfGq9rnxe38eYCVNFnWoLbzFzzCFGptLFK
l8nsycLzn/A4yiJaINtD61G4plLGee6lEClPL/mExCqsx09BTEQ3yOrYVfioe1xJ
73HDAUUneR7TEEftS7d3k49W6rmRMFtMFbtCriqze4VW2LPNHZ120PTsHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3Vl+81MLh+Y/CWCHO1uvMFavUcMB8GA1UdIwQY
MBaAFNRm0XDIELo0xC6SDoTUJihFl3+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yMzA2ZjYtNmNjMC00OTgyLWE1MjMt
MTY4NDJiZGFkOTI1LzEvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8yMzA2ZjYtNmNjMC00OTgyLWE1MjMtMTY4NDJiZGFkOTI1
LzEvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7R+xkDL
6UJO8y+62HlYOihG1WJqspEjaYbkKqNrk+n7qd20jqfcUKVuOxCHXymCZ7StLysc
6gseSlm9FXC5KCfZdOdcgKIZQ0jm8cERloVAG40GgZnDNmF9gggkGe5gA9nJ2o5d
QnVQ5xt2ufFl+EPyItZKfO6CyV6VzW6XZis0aKXmhhVDhWbi8bftmM736CL0zl3n
vEA6gO9ZPSJ1wBUg1JPFLwtJF5sdLWlA5h7QaS/EerhawltL6JusWhVLZFI3fjGn
HLwMy4zXYLkiA4h+Q6gQz6OKnQUNLRvHThojqJBF+pZo8CKtJI+fVB8B7QkSYSQp
ATeAVV7rRo1qvw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:36:25 2026 by rpki-client