Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: sAV1585rmbavLCP9zy280U/N0yXsh8VE+x+06girj/g=
Subject key identifier: A4:B4:42:A5:E4:60:9B:6F:E9:CC:DC:AD:F4:CC:85:D1:00:5F:F0:07
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 01A11CACAE89496A2C958B9C80520B7019DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 1774
Signing time: Thu 08 Oct 2026 18:00:41 +0000
Manifest this update: Thu 08 Oct 2026 18:00:41 +0000
Manifest next update: Fri 09 Oct 2026 18:00:41 +0000
Files and hashes: 1: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: 6tgO5qbvaoT1I8ragwj5wOMo/Q8cw0VlP2XrTkmuW1s=)
2: k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa (hash: H0UiWZoHXbQKY5PjSSEja9oJ63puQn0Ebtq8jzm98zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:ac:ae:89:49:6a:2c:95:8b:9c:80:52:0b:70:19:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Oct 8 18:00:41 2026 GMT
Not After : Oct 9 18:00:41 2026 GMT
Subject: CN=a4b442a5e4609b6fe9ccdcadf4cc85d1005ff007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:6e:df:f6:65:b2:8f:0a:28:32:fd:9b:70:
36:fb:75:6e:da:b1:fd:3c:fc:92:01:55:81:04:20:
9f:6c:ba:78:8e:a1:e6:58:de:ad:13:ed:72:90:44:
87:d9:37:e3:1b:6f:d1:9d:8e:05:c3:93:86:b2:71:
e1:c1:da:a0:00:90:b2:b1:b6:3e:ea:b4:c3:1e:5a:
24:dc:b7:0f:85:46:a4:10:1a:78:43:5e:b3:d5:1d:
57:61:fe:35:09:66:86:7e:d8:a6:c1:d7:cf:1e:c3:
bf:57:b8:50:51:bc:f6:b9:9f:52:d0:93:56:38:64:
d3:a0:d5:f7:48:be:45:18:92:50:1a:e0:f1:e1:3a:
55:e7:b9:b3:76:9b:b7:80:0a:76:ec:91:7c:24:75:
fc:83:bb:c1:95:02:b1:aa:c6:63:f8:30:5e:2b:06:
81:89:e6:95:2f:22:9f:9a:1e:8d:2c:90:ed:7c:0d:
71:0a:6f:67:9a:8e:f4:3e:10:3b:c2:a9:2e:6d:e4:
8c:6e:73:a3:80:ff:9f:fa:b4:1d:70:ff:0e:b2:a3:
d4:b6:15:46:a1:80:31:a8:35:b7:2a:d5:7a:1d:46:
af:34:9b:2a:a3:c3:59:91:4d:d0:e0:91:e5:d4:16:
d2:da:34:f8:3e:24:85:1e:0e:d3:44:27:23:a6:1a:
52:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B4:42:A5:E4:60:9B:6F:E9:CC:DC:AD:F4:CC:85:D1:00:5F:F0:07
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a3:d4:9a:32:27:db:59:70:44:52:0c:5c:84:96:df:15:07:
76:d8:aa:e6:aa:81:37:88:83:4e:cf:e0:8b:bc:b3:83:28:cf:
a0:3c:04:0a:df:8f:54:9c:7e:eb:af:3c:00:25:9d:3f:d4:6c:
6c:2d:cf:34:e5:44:fc:42:b0:26:d4:3e:09:1f:f5:e2:37:2d:
1f:48:a6:b8:22:9c:71:93:2d:43:7a:a3:18:f2:3d:bb:1b:c5:
15:6f:56:39:db:35:1d:e3:97:54:80:98:87:4b:ac:27:55:a0:
9a:42:27:c2:97:0e:6b:26:d1:77:64:06:6f:ba:50:ef:bb:4c:
3c:77:25:c0:b7:0d:28:d2:8a:21:e9:76:9f:a8:1a:00:2f:ac:
5a:3e:ec:33:7a:d0:8a:9e:0a:39:c0:9b:78:b8:cb:36:a4:fe:
2c:b3:f7:91:9a:e6:05:f9:05:3c:1c:32:61:67:72:f8:bc:08:
b7:f5:8a:ed:2d:80:8a:3c:f2:f1:b7:51:c2:f2:17:4b:e9:f5:
35:f5:31:c9:cb:b9:43:bf:5d:d7:76:a1:83:dc:72:a6:77:24:
c3:c7:05:1a:ef:0b:fb:9a:07:14:f7:10:47:f1:3c:b9:c1:9f:
84:bc:87:a6:4f:bb:cf:c8:f7:d6:63:09:3c:06:8c:18:3e:5f:
0c:ed:43:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:57:32 2026 by rpki-client