Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: CanV9rD39csa50sFYsptyc5ri8vt35X2ehnh7FaatZM=
Subject key identifier: 5E:45:A2:BB:D0:4A:ED:3F:5E:4F:5C:36:D5:73:46:6F:07:F8:66:26
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 019F92B6739C735884B47AD7BE466199A8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 16A8
Signing time: Fri 24 Jul 2026 06:00:58 +0000
Manifest this update: Fri 24 Jul 2026 06:00:58 +0000
Manifest next update: Sat 25 Jul 2026 06:00:58 +0000
Files and hashes: 1: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: avgWjUc72f+Kuxll45Ubd3zUtrGjv8Q1sikD3SSbNzs=)
2: k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa (hash: H0UiWZoHXbQKY5PjSSEja9oJ63puQn0Ebtq8jzm98zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:73:9c:73:58:84:b4:7a:d7:be:46:61:99:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Jul 24 06:00:58 2026 GMT
Not After : Jul 25 06:00:58 2026 GMT
Subject: CN=5e45a2bbd04aed3f5e4f5c36d573466f07f86626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:df:d7:b9:54:91:d9:a4:7f:28:0d:3f:67:
a3:24:6c:48:07:d7:68:2a:2d:79:5b:1b:77:b0:13:
31:f5:7c:5d:2f:2e:11:14:0f:8e:ae:cc:73:ee:86:
d0:36:eb:d9:be:e5:78:c3:c9:a0:6d:e7:68:ce:a9:
79:a5:8a:7e:d2:92:17:96:46:a7:3d:20:f3:17:4a:
0d:07:9d:1b:81:af:9f:a5:13:ce:ab:40:e3:85:5c:
ce:98:fd:5f:57:88:c4:4e:09:6f:70:1a:82:6c:ba:
0b:b1:74:d1:89:e3:4e:25:37:28:69:53:b9:8c:40:
96:61:c7:d8:8a:7e:4d:a1:4d:21:5f:28:a5:8f:64:
3e:ee:66:4f:5b:a9:bb:64:d1:89:39:ea:4c:99:fd:
9a:12:c1:75:95:b7:02:85:33:47:89:92:cc:48:7e:
26:d3:97:60:13:90:4e:ae:05:fd:b4:36:a4:71:64:
8e:06:90:43:20:b9:cc:56:de:33:ca:39:1f:99:eb:
07:f8:95:ea:94:cc:c3:7f:2d:10:5b:7d:6b:a5:20:
a5:c8:90:33:d5:4f:18:13:ef:39:2e:1e:a1:6a:f8:
08:72:4d:6c:61:07:49:07:fa:66:67:1d:29:9e:fe:
62:7d:d7:28:02:2d:df:6a:54:9f:62:62:71:62:52:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:45:A2:BB:D0:4A:ED:3F:5E:4F:5C:36:D5:73:46:6F:07:F8:66:26
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7d:e1:94:77:1d:a3:da:27:c4:47:79:14:b7:65:5a:98:45:
09:43:94:21:57:bd:e2:b0:b5:e6:84:49:b1:68:de:39:f1:d4:
9f:81:08:c5:1a:c5:e2:49:5f:4d:3e:ad:53:dd:c9:c8:0c:de:
ea:e2:8f:6f:fd:bb:da:20:67:2f:08:c2:68:21:2b:41:f1:46:
0e:80:a4:d8:19:6b:15:f1:5c:1d:de:6c:1b:f8:97:70:5d:6e:
05:26:98:3a:dd:e8:3c:34:21:8c:d0:ab:51:20:c2:70:46:15:
45:b1:9f:0a:01:cf:2d:be:fc:a1:b1:3f:90:a6:b0:b4:f7:d5:
86:d3:ca:d9:c9:0a:e1:c0:70:03:ad:f4:a3:9c:5f:94:e0:43:
3e:cc:f9:b5:2a:4d:97:40:98:bd:b5:84:7c:46:f3:66:91:3a:
99:5c:2c:a2:e4:92:0b:9d:3c:04:44:8e:68:93:e9:b6:47:9f:
5e:8e:9d:f4:5e:b3:6f:7d:30:a8:1b:83:89:d1:e4:b4:95:b7:
48:f5:3e:a3:8b:cf:ce:4f:df:18:09:e2:ef:c5:a5:35:ce:56:
2c:fe:ab:a0:45:27:b3:c0:50:eb:88:5c:9c:8f:a2:b8:02:33:
69:52:0a:00:06:a2:3b:4a:89:ec:57:81:39:44:a0:cd:43:5f:
37:e4:4a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:48 2026 by rpki-client