Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: nEK/nL8XGFjtaC4Rtq/epU8lHH/85EOc9Mrr4Z6ifV8=
Subject key identifier: 21:3B:66:97:7A:38:75:5C:B7:2D:D7:F8:AB:8D:0F:AE:F8:AA:FF:4B
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 01A13D13A652009601929E0BCE262092A27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 1255
Signing time: Thu 15 Oct 2026 01:01:00 +0000
Manifest this update: Thu 15 Oct 2026 01:01:00 +0000
Manifest next update: Fri 16 Oct 2026 01:01:00 +0000
Files and hashes: 1: 9PZjCn76gwRRUpq9MvbclVXkdOU.roa (hash: CaqNlJNQ1Ni2aWKqDPfoQcAYDuSQhepNqZ+uo297E2U=)
2: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: Y9XKEFxk3R0vnEH/UIZW5LOM3NZZ4VcaLidmae0101g=)
3: ur76ehndzl2-pGTHmrbh1qcAWBI.roa (hash: Sb+oNrAUwZsJERFHDlGdgS7sblzKLRz12cNiy1csEgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:a6:52:00:96:01:92:9e:0b:ce:26:20:92:a2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Oct 15 01:01:00 2026 GMT
Not After : Oct 16 01:01:00 2026 GMT
Subject: CN=213b66977a38755cb72dd7f8ab8d0faef8aaff4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:de:38:c3:23:21:59:df:b2:e9:f6:73:df:
54:70:32:a7:12:34:59:f2:00:0f:74:63:f2:1e:ea:
41:e4:ec:fe:f4:96:c4:89:c6:48:45:ee:4c:bc:19:
34:4b:30:3f:fc:13:cf:07:7d:84:ba:7e:6f:cd:b4:
5b:44:45:cd:c5:bd:4d:e9:ee:92:33:a1:32:fb:b1:
08:79:3f:dd:af:61:ce:08:16:06:4d:7a:8a:11:6a:
ce:03:d9:e2:14:5f:95:9b:7f:1b:8b:26:ef:1a:db:
2f:14:66:4e:cc:9b:d5:88:d4:ae:e1:d4:ba:66:4c:
a6:4b:8e:4c:e5:9b:6b:b4:4e:d6:4b:d3:f4:27:3f:
15:2c:2a:ac:33:2a:e5:3d:f5:da:e7:f9:a1:c4:f0:
22:25:bb:24:af:a4:3b:68:42:6b:f9:fb:c5:53:3e:
ca:00:bf:3d:99:4b:96:41:ab:bb:4c:c3:34:07:d1:
72:63:fc:57:d5:66:68:22:a5:a0:7e:28:37:b4:5f:
b4:6d:df:f0:63:c3:9b:09:9c:71:0c:a3:c7:09:84:
56:b0:56:4d:20:cb:14:76:e4:bf:0e:06:a8:c1:3d:
b9:13:f8:18:a0:19:79:a7:15:52:d0:d4:9a:22:01:
9c:ec:d3:93:44:40:06:db:9c:e1:f2:86:e4:2e:0f:
1f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3B:66:97:7A:38:75:5C:B7:2D:D7:F8:AB:8D:0F:AE:F8:AA:FF:4B
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:03:48:6e:ab:40:b5:d0:91:28:91:fa:7a:d9:83:83:c7:82:
5b:77:95:6e:be:b4:59:64:ba:5c:2b:40:77:dc:04:0d:10:7b:
3d:9d:b0:bb:87:15:91:6f:2a:f0:ca:73:84:f6:73:b5:c6:e4:
a6:6c:6e:13:dc:f2:b2:67:a7:66:75:2e:1b:59:ea:de:99:ef:
03:7f:60:07:12:1f:91:7c:cc:d6:47:04:6b:33:43:41:a7:29:
82:a3:ca:17:36:c2:00:85:2c:75:66:51:44:13:39:73:f5:66:
33:59:b2:54:66:77:4a:04:3c:02:a0:bf:4b:cf:04:59:75:bc:
d1:ba:49:a2:46:fc:e0:15:93:0d:c6:73:53:b8:52:99:aa:0c:
21:2b:ce:11:35:9d:92:e6:83:f3:2a:07:15:a3:27:f0:bd:18:
2f:c5:f9:e7:03:8a:b6:8f:c6:8e:30:04:c0:38:45:95:e2:b7:
02:26:de:8e:58:68:5e:e6:11:25:42:33:80:bc:64:80:19:a9:
8b:83:1d:c9:dc:24:73:71:32:fe:de:4b:9a:39:9f:98:ae:e9:
4e:39:f2:5e:32:4d:52:91:28:74:8c:13:22:eb:4a:cf:ae:d5:
ac:5d:95:a3:4f:04:8c:ce:f2:23:e4:18:4b:7d:f2:06:d7:4d:
c2:67:13:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9E6ZSAJYBkp4LziYgkqJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YWJhZTBlMWYyMTZhMzIxOTczY2NjOWM2NTM3ZWM2MTk3
ZGFiMTgwHhcNMjYxMDE1MDEwMTAwWhcNMjYxMDE2MDEwMTAwWjAzMTEwLwYDVQQD
EygyMTNiNjY5NzdhMzg3NTVjYjcyZGQ3ZjhhYjhkMGZhZWY4YWFmZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkfeOMMjIVnfsun2c99UcDKnEjRZ
8gAPdGPyHupB5Oz+9JbEicZIRe5MvBk0SzA//BPPB32Eun5vzbRbREXNxb1N6e6S
M6Ey+7EIeT/dr2HOCBYGTXqKEWrOA9niFF+Vm38biybvGtsvFGZOzJvViNSu4dS6
ZkymS45M5ZtrtE7WS9P0Jz8VLCqsMyrlPfXa5/mhxPAiJbskr6Q7aEJr+fvFUz7K
AL89mUuWQau7TMM0B9FyY/xX1WZoIqWgfig3tF+0bd/wY8ObCZxxDKPHCYRWsFZN
IMsUduS/DgaowT25E/gYoBl5pxVS0NSaIgGc7NOTREAG25zh8obkLg8fMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCE7Zpd6OHVcty3X+KuND674qv9LMB8GA1UdIwQY
MBaAFBirrg4fIWoyGXPMycZTfsYZfasYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0t1dURoOGhhaklaYzh6SnhsTi14aGw5cXhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MjE3NDUtY2ZlNS00MTYxLWI0MDUt
MDY5OTk2YzYzMGYwLzEvR0t1dURoOGhhaklaYzh6SnhsTi14aGw5cXhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83MjE3NDUtY2ZlNS00MTYxLWI0MDUtMDY5OTk2YzYzMGYw
LzEvR0t1dURoOGhhaklaYzh6SnhsTi14aGw5cXhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwNIbqtA
tdCRKJH6etmDg8eCW3eVbr60WWS6XCtAd9wEDRB7PZ2wu4cVkW8q8MpzhPZztcbk
pmxuE9zysmenZnUuG1nq3pnvA39gBxIfkXzM1kcEazNDQacpgqPKFzbCAIUsdWZR
RBM5c/VmM1myVGZ3SgQ8AqC/S88EWXW80bpJokb84BWTDcZzU7hSmaoMISvOETWd
kuaD8yoHFaMn8L0YL8X55wOKto/GjjAEwDhFleK3AibejlhoXuYRJUIzgLxkgBmp
i4Mdydwkc3Ey/t5LmjmfmK7pTjnyXjJNUpEodIwTIutKz67VrF2Vo08EjM7yI+QY
S33yBtdNwmcTqg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:25:46 2026 by rpki-client