Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: JmQJVUUKkKnPYq5Lau1O9w0Hrvlq7UP44Ey7fjAA0gs=
Subject key identifier: 17:1B:95:A6:34:AE:EE:62:4C:6C:F6:9A:A2:EA:DE:3E:11:39:19:18
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 019E21DAD74652FCCB52B8E863E1A281AB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 15E9
Signing time: Wed 13 May 2026 15:00:50 +0000
Manifest this update: Wed 13 May 2026 15:00:50 +0000
Manifest next update: Thu 14 May 2026 15:00:50 +0000
Files and hashes: 1: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: 68XBj95X6ruhtSH9DNN+X1m1ZR2GoxrwStcJq+iaivE=)
2: k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa (hash: H0UiWZoHXbQKY5PjSSEja9oJ63puQn0Ebtq8jzm98zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:da:d7:46:52:fc:cb:52:b8:e8:63:e1:a2:81:ab:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: May 13 15:00:50 2026 GMT
Not After : May 14 15:00:50 2026 GMT
Subject: CN=171b95a634aeee624c6cf69aa2eade3e11391918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:50:a6:df:f3:f9:f8:2f:2e:c8:67:03:9d:
99:64:68:63:00:67:ca:59:31:c2:80:1b:36:aa:38:
19:b8:30:1e:06:ed:74:42:49:a6:6c:a7:f8:bb:39:
ef:b7:0f:44:6e:6f:79:32:95:9a:b5:0e:69:dc:88:
8c:43:20:d5:58:73:d4:6f:5e:1f:25:56:00:94:91:
1c:7e:a7:56:ce:24:f6:ca:b4:28:e1:86:18:b0:5a:
51:96:22:19:d9:d9:3b:19:e2:58:8a:41:45:25:5e:
63:a4:72:f4:b3:d4:71:a6:1c:17:30:09:2f:cb:e8:
5e:42:39:eb:fb:c7:94:a9:63:bb:13:02:36:a3:06:
65:d3:57:dd:5d:1f:c1:75:a3:5d:60:5f:65:33:20:
30:78:ef:b5:20:3f:5c:62:84:dd:99:4b:c4:ea:26:
29:98:73:7c:75:6c:66:a5:05:ec:0d:30:ec:fd:30:
21:11:a3:e6:86:d0:6c:fa:5f:fc:ad:02:61:be:c1:
21:0e:8e:4d:e2:87:fd:e4:a0:8b:24:13:33:be:36:
d3:6b:d0:45:06:63:6f:23:88:e7:cd:6d:a1:ba:e6:
a8:49:2a:46:a0:91:be:07:18:95:da:f4:82:6c:ce:
91:34:f7:73:03:58:25:70:d8:95:a1:9d:44:e3:1c:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1B:95:A6:34:AE:EE:62:4C:6C:F6:9A:A2:EA:DE:3E:11:39:19:18
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7f:da:86:d5:2b:d8:b7:9d:d3:8a:54:b9:50:b9:93:c3:80:
b8:f2:34:7d:a1:92:b9:32:4b:49:d8:6e:58:55:24:0e:ea:71:
43:b0:ff:d0:f3:cc:92:4a:b5:dd:35:be:4e:82:74:71:bb:3c:
ea:4d:81:f7:13:6b:0f:90:63:8d:20:4d:14:b6:2d:c3:cb:1d:
8a:30:20:30:1d:bc:d2:5c:6e:c2:f0:3c:5f:04:fc:23:52:70:
ec:1d:f6:af:ac:52:02:49:b6:ec:9a:8e:7a:9e:65:52:8e:a2:
ac:08:2d:6a:e6:75:eb:4c:9e:40:5c:80:b8:6c:99:a1:d9:00:
35:d7:43:33:e3:80:d3:81:2f:5a:1e:63:7a:80:6a:78:a6:d9:
d6:05:79:df:90:04:b5:e8:3b:d0:ae:b6:da:40:20:35:a2:9d:
ed:12:a1:b3:8e:87:f0:ed:28:bf:d9:05:f8:59:5a:a9:12:45:
3c:32:4e:6a:16:b6:6c:bb:81:73:59:70:cd:d0:2f:0e:17:8d:
34:42:23:7e:51:18:c9:f0:83:21:4e:17:d1:22:66:65:bb:4f:
6c:b2:a9:78:94:7b:0a:cb:e8:69:17:fe:55:4c:07:f0:3a:4e:
78:fc:73:1d:65:79:f2:54:97:25:9b:98:51:c7:68:ca:11:60:
85:7b:87:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4h2tdGUvzLUrjoY+GigauXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZDRjY2NlZmU1NWM1ZTIyM2E5YjMyMDViOTM4YTNkMWM5
ZTg2ZDUwHhcNMjYwNTEzMTUwMDUwWhcNMjYwNTE0MTUwMDUwWjAzMTEwLwYDVQQD
EygxNzFiOTVhNjM0YWVlZTYyNGM2Y2Y2OWFhMmVhZGUzZTExMzkxOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa5Qpt/z+fgvLshnA52ZZGhjAGfK
WTHCgBs2qjgZuDAeBu10QkmmbKf4uznvtw9Ebm95MpWatQ5p3IiMQyDVWHPUb14f
JVYAlJEcfqdWziT2yrQo4YYYsFpRliIZ2dk7GeJYikFFJV5jpHL0s9RxphwXMAkv
y+heQjnr+8eUqWO7EwI2owZl01fdXR/BdaNdYF9lMyAweO+1ID9cYoTdmUvE6iYp
mHN8dWxmpQXsDTDs/TAhEaPmhtBs+l/8rQJhvsEhDo5N4of95KCLJBMzvjbTa9BF
BmNvI4jnzW2huuaoSSpGoJG+BxiV2vSCbM6RNPdzA1glcNiVoZ1E4xzuPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcblaY0ru5iTGz2mqLq3j4RORkYMB8GA1UdIwQY
MBaAFBrUzM7+VcXiI6mzIFuTij0cnobVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMt
YzMyMDM2NzUwZTM2LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMtYzMyMDM2NzUwZTM2
LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3/ahtUr
2Led04pUuVC5k8OAuPI0faGSuTJLSdhuWFUkDupxQ7D/0PPMkkq13TW+ToJ0cbs8
6k2B9xNrD5BjjSBNFLYtw8sdijAgMB280lxuwvA8XwT8I1Jw7B32r6xSAkm27JqO
ep5lUo6irAgtauZ160yeQFyAuGyZodkANddDM+OA04EvWh5jeoBqeKbZ1gV535AE
teg70K622kAgNaKd7RKhs46H8O0ov9kF+FlaqRJFPDJOaha2bLuBc1lwzdAvDheN
NEIjflEYyfCDIU4X0SJmZbtPbLKpeJR7CsvoaRf+VUwH8DpOePxzHWV58lSXJZuY
UcdoyhFghXuH8g==
-----END CERTIFICATE-----
Generated at Wed May 13 20:18:12 2026 by rpki-client