Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: 2sUNKmF0hk//NpbD/5IHwnn4iUQ8KfVn/adNcoRYr2c=
Subject key identifier: B8:E4:37:84:91:2F:81:16:E9:64:A1:92:50:5D:7D:62:34:B0:B9:01
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 019D27A8CD307B4B65E9C5FC0D7BA73F76A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 0F6F
Signing time: Thu 26 Mar 2026 01:01:07 +0000
Manifest this update: Thu 26 Mar 2026 01:01:07 +0000
Manifest next update: Fri 27 Mar 2026 01:01:07 +0000
Files and hashes: 1: 0-Du4a3wTcLjHP17S235eocvetM.roa (hash: u4GgqQE96O1hG6gnLUh00BTZ9JVaaf72zWAUZel0hK4=)
2: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: rzD2/9kg5zld/dokdRgqdUA3523S+PyLy2YU1MaelNM=)
3: rw01fr1t_p6yAH6IdbMhs5zW9Xs.roa (hash: xwniHCIPcTk6T6SZ9CnReFPZPS7gn1Cci1vAjNWFN+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:cd:30:7b:4b:65:e9:c5:fc:0d:7b:a7:3f:76:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Mar 26 01:01:07 2026 GMT
Not After : Mar 27 01:01:07 2026 GMT
Subject: CN=b8e43784912f8116e964a192505d7d6234b0b901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:51:c4:d4:55:3e:2a:af:a9:9c:c1:cb:1e:c1:
da:84:db:80:cb:98:17:c3:9b:ad:d6:d1:26:68:69:
9b:ff:3c:0e:31:d8:52:7d:77:ef:43:63:10:e1:4c:
11:aa:ad:63:74:ce:ce:ea:f4:d4:95:2e:4b:72:75:
dd:53:7f:a4:81:c0:bc:5e:f2:be:25:4d:b4:f9:de:
da:35:7c:73:7c:88:7c:95:1f:e6:f8:75:53:e3:f2:
29:a0:65:5c:bd:93:22:67:cb:25:d0:c1:ed:44:4b:
99:a0:71:7e:4a:77:e8:f5:26:4b:0f:02:e1:85:8d:
1c:ea:96:50:bf:bb:04:76:90:8a:51:d4:ee:4a:3f:
f1:b8:83:b2:0f:8e:2f:74:fe:b7:75:21:a0:25:c2:
1e:ce:86:9c:1f:93:24:14:87:47:62:da:24:da:94:
30:3f:52:7b:6d:eb:51:f6:b1:9c:4c:19:e4:78:e7:
82:7f:69:b0:ab:db:72:17:2f:b2:28:d4:dc:94:62:
f0:1c:1d:8c:fa:c3:a0:13:2b:09:02:24:72:e8:5f:
0b:45:6e:4f:fe:3d:52:b5:16:20:bc:5d:da:95:61:
85:d3:80:74:e5:d7:7f:be:94:05:4b:17:02:5a:5e:
ec:31:3c:48:7d:e0:f9:b9:43:5b:d6:9a:cb:36:85:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E4:37:84:91:2F:81:16:E9:64:A1:92:50:5D:7D:62:34:B0:B9:01
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8e:e0:af:47:54:be:38:72:6a:20:87:8b:9f:6a:89:2d:44:
15:4f:76:7a:50:a7:c1:e7:f9:4d:03:22:14:cc:75:06:f7:fa:
ab:64:59:db:01:1c:9a:a3:0d:c2:7a:f5:de:29:16:cf:56:0c:
fa:89:93:81:6f:4e:29:7c:ba:6d:1b:00:82:03:4e:46:10:ac:
16:f6:a2:d3:d4:22:cc:14:fa:ce:49:55:21:09:4b:25:89:1c:
87:7c:57:f6:6b:17:b3:02:7b:c9:b8:66:68:01:a0:2f:43:e6:
da:ff:1b:1d:74:de:c0:9c:b0:f6:1c:3c:98:79:d7:08:66:f0:
9a:69:54:99:1d:2e:a8:78:da:2a:47:1c:5e:06:26:8a:a9:ef:
29:81:f6:f1:a2:e3:34:dd:fc:2b:c5:7e:18:c5:db:31:6f:a6:
d4:76:70:b5:93:54:31:57:12:7e:16:b5:c6:27:9d:9d:e0:11:
53:20:27:c5:5a:3d:4e:0b:99:6a:9e:f4:ee:ba:97:95:0e:d2:
2f:5f:ec:22:fa:d4:07:7b:a3:ba:f0:1b:05:6a:3e:f7:b8:1e:
80:76:e2:38:22:c0:97:54:f9:7b:c5:66:3e:7b:36:35:11:cc:
14:fe:0c:a5:64:68:66:65:30:6a:6c:25:14:e7:34:29:41:49:
51:7b:ab:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:18 2026 by rpki-client