Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
File: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json)
Hash identifier: l9j3Bp3VcWKgg8e24SKwVSBw8Atp+aAIMyel102y86s=
Subject key identifier: 74:85:F9:1F:30:EE:E9:49:06:76:C6:75:77:AE:20:33:56:F2:4B:16
Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
Certificate issuer: /CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Certificate serial: 01A10437CFD3C9BEEA857F8A8D477A8FE935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
Manifest number: 1A85
Signing time: Sun 04 Oct 2026 00:02:08 +0000
Manifest this update: Sun 04 Oct 2026 00:02:08 +0000
Manifest next update: Mon 05 Oct 2026 00:02:08 +0000
Files and hashes: 1: Iu9PnHVM0LSwUFID8vLNCNKzD-U.roa (hash: tU7O1VjjD0lcgYnwOxVPASyTAKDrVm8qOBVH6F4eICY=)
2: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: 8meLn7WqlGgk0rJ/cUIJdIKyPDYUjU5aRS3pWWRt35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:cf:d3:c9:be:ea:85:7f:8a:8d:47:7a:8f:e9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Validity
Not Before: Oct 4 00:02:08 2026 GMT
Not After : Oct 5 00:02:08 2026 GMT
Subject: CN=7485f91f30eee9490676c67577ae203356f24b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:be:5e:61:ec:09:99:a9:3f:39:8c:8d:aa:
82:0a:cd:7b:b3:49:1d:24:d2:85:43:2a:2f:3f:5d:
1e:c7:e6:c7:31:e0:23:d8:01:d7:12:b1:be:b7:cb:
5d:55:64:be:f8:16:8c:1c:d3:59:05:ff:ac:08:e5:
61:ce:17:0b:12:1d:92:77:0c:96:58:86:0b:af:c8:
d4:9e:01:91:51:37:c5:cd:15:54:21:0f:d3:39:05:
62:8c:fb:30:9e:8f:e1:20:95:e3:3f:c4:54:1c:6c:
70:ca:1b:5d:3b:83:83:7d:d5:57:34:9c:0b:8d:2c:
a4:47:5f:0d:d9:45:d9:6e:10:5e:b5:04:0c:2a:5d:
b1:b5:81:43:b7:f0:d1:4c:f3:55:16:39:5b:29:c0:
5b:1a:b2:26:7a:58:8c:06:59:33:c5:18:8a:d8:61:
bc:85:b1:6f:49:7a:c0:32:c1:ab:e7:d5:c7:93:63:
0e:00:47:52:48:90:d3:4f:62:10:1c:bf:90:35:8a:
58:40:79:31:8e:75:b7:dc:1f:f0:90:56:af:c4:4f:
73:3b:44:0e:da:04:d4:5e:e9:74:76:35:4f:5b:20:
4a:23:08:33:a8:1d:73:0c:3f:c4:68:33:73:7d:b4:
c4:06:2c:3f:06:9c:6e:b8:ca:c1:52:8e:e8:4b:4b:
62:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:85:F9:1F:30:EE:E9:49:06:76:C6:75:77:AE:20:33:56:F2:4B:16
X509v3 Authority Key Identifier:
keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:86:90:59:67:05:0d:40:70:ce:81:a7:70:b3:1c:e8:ec:94:
f4:5a:a8:f1:14:1d:fb:6d:cf:09:e4:0b:50:a9:09:a4:4b:45:
94:26:5c:f9:a9:81:fb:a1:19:73:50:9a:02:25:79:5b:9d:f8:
2f:cf:26:a3:ca:bf:da:cd:39:79:b9:61:7e:fc:ef:b9:08:39:
0c:d0:13:83:19:ac:43:e1:21:02:ce:5e:1e:29:36:06:42:dd:
24:7f:72:2c:14:4e:c3:37:45:49:db:ed:1a:2c:b9:f2:6b:f9:
3d:f8:c0:56:03:22:a5:31:02:e2:2b:4b:54:fc:51:81:5a:a0:
7b:03:08:70:e5:58:db:b1:be:50:90:da:c1:b1:ed:c5:eb:99:
29:2e:b3:41:c0:d0:7a:4e:ac:f2:ea:d5:15:21:d3:da:f9:dd:
53:83:fe:8b:6b:71:99:54:6d:34:ea:aa:7e:2e:3f:9f:c0:46:
97:04:21:4e:27:65:3c:e0:89:05:a8:3f:66:45:93:27:b0:94:
57:e7:9d:ec:cf:a8:18:48:cf:4a:02:ad:b7:fa:dd:03:7f:78:
86:86:f3:74:04:c2:a9:15:68:4f:57:65:a4:b8:b7:72:ab:e7:
1a:ca:01:25:a5:19:7a:6a:6d:5d:b3:76:d2:ee:54:a0:c4:01:
69:a7:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:25:22 2026 by rpki-client