Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
File: GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json)
Hash identifier: ULyM/8s83P1CvkVkB96L5RQL4T1upqMCXA2MN3BvWIs=
Subject key identifier: EF:19:DC:E1:3E:09:3B:3E:87:07:C2:B3:2E:A1:69:73:42:33:AA:94
Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
Certificate issuer: /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Certificate serial: 01A135232BFA6810302994C7506BF20DB7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
Manifest number: 17D5
Signing time: Tue 13 Oct 2026 12:00:59 +0000
Manifest this update: Tue 13 Oct 2026 12:00:59 +0000
Manifest next update: Wed 14 Oct 2026 12:00:59 +0000
Files and hashes: 1: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: Sb8x1TBMr+SnuxEnTCw8aRhFwzdog51iuZ/hmhXfZ5w=)
2: UqEuoQpjxBtIURq4ob163Ouybdc.roa (hash: ev1UNGyTahVLyeoggfYIhIctJOvLu/cQr0+ArcEASVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:2b:fa:68:10:30:29:94:c7:50:6b:f2:0d:b7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Validity
Not Before: Oct 13 12:00:59 2026 GMT
Not After : Oct 14 12:00:59 2026 GMT
Subject: CN=ef19dce13e093b3e8707c2b32ea169734233aa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:0e:df:82:fd:40:74:e9:70:84:0d:3b:c5:
8a:b0:61:79:b7:45:96:d6:47:9e:3a:b6:19:84:c4:
47:1b:a1:f0:5a:4d:01:2f:35:0b:c6:5e:ff:85:b2:
44:20:4e:4b:2f:24:ed:e2:36:0e:5f:42:d0:a1:f4:
5a:3e:6d:85:b7:c7:84:7e:e3:56:29:8e:3f:14:4b:
02:06:c8:01:a6:cf:a2:7f:89:4b:3f:a1:68:e2:1f:
db:89:db:19:16:30:37:79:08:96:a2:19:45:55:33:
0f:c4:be:ad:8c:23:63:3a:44:f0:88:d4:42:3d:8d:
e1:a5:70:32:75:a3:94:a4:87:a8:73:03:ce:5c:5d:
4b:5a:89:45:a9:9b:9f:f3:99:b8:e0:20:8a:28:b6:
88:91:bc:89:4b:1e:2f:29:90:28:14:94:a7:40:bd:
d5:16:b3:5d:39:aa:79:92:8d:05:be:43:0c:dc:4b:
61:31:d4:63:76:41:30:eb:da:43:1d:b7:ca:fd:37:
2d:60:00:07:e1:4b:5c:95:49:e1:10:4f:3e:ca:cf:
d8:24:ef:75:85:36:65:94:b9:f7:95:c2:d5:bd:ca:
7d:b9:6c:c7:97:ae:d4:24:8c:26:b3:e3:10:87:1f:
87:09:f4:bf:9f:97:6f:fd:73:71:6f:40:bb:f6:17:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:19:DC:E1:3E:09:3B:3E:87:07:C2:B3:2E:A1:69:73:42:33:AA:94
X509v3 Authority Key Identifier:
keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ef:f4:1f:81:c3:a1:b4:28:b6:63:30:83:1d:26:41:d1:83:
f1:40:d8:5d:0f:c7:52:10:d2:5c:d3:9f:26:9f:0a:0e:1a:73:
b5:20:fd:b8:99:0c:98:fa:e1:f7:ba:0d:19:3b:47:45:9c:63:
f7:e7:e7:81:fa:c7:e8:ce:3d:ee:36:1a:d5:c2:5b:fb:c9:a5:
3d:c5:21:c4:7a:8f:98:50:a6:ef:a3:fd:99:19:70:5f:53:c7:
20:72:fe:36:5d:9b:1c:85:a2:47:f0:b6:8d:df:11:f4:9e:8f:
21:f2:bc:82:26:9b:ce:6b:bb:2e:f4:46:66:f3:14:10:7c:ce:
9c:36:3d:82:25:eb:32:3d:88:64:56:5e:c9:eb:b8:d0:65:b1:
08:8b:4b:f1:da:ea:7f:8d:a5:bd:22:32:98:5a:c1:64:ad:c3:
64:10:b9:b4:5d:d6:fc:26:d0:79:0b:53:3e:79:a9:f6:0e:99:
6f:90:47:1d:fe:c3:35:1a:d7:bd:07:1e:6e:81:88:34:45:74:
13:2d:04:56:77:55:1a:66:ad:63:e8:b4:32:77:c6:0d:dd:5f:
27:13:de:ae:5b:51:d6:62:ad:ef:c6:8d:65:bb:c3:35:fe:d8:
96:44:12:f0:bd:eb:99:95:58:20:67:fc:c1:bf:ad:e3:cb:fb:
cc:0c:86:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:46:46 2026 by rpki-client