
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File: GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier: gGoOkItdjJE2qwnhNjarzGoXFBFlY9ZBfIAeHGO9o+Y=
Subject key identifier: D5:09:77:36:42:EB:F5:57:82:08:BC:DB:B9:8C:6E:A2:0F:C2:9C:D5
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial: 01A0F1C39292910E4E434671D5AD62F840C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number: 1243
Signing time: Wed 30 Sep 2026 10:02:01 +0000
Manifest this update: Wed 30 Sep 2026 10:02:01 +0000
Manifest next update: Thu 01 Oct 2026 10:02:01 +0000
Files and hashes: 1: 3P4cCBu38EJugxeCpjstaJhevzU.roa (hash: qPPAYChci1BjI8OFuTU/CsZA0DBvN2/vpi/SyKtNWw0=)
2: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: ilKxjT3GgZEO/E3bAMMwiE8Q2O8NgD8FXnQ2YMgzkyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:92:92:91:0e:4e:43:46:71:d5:ad:62:f8:40:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
Validity
Not Before: Sep 30 10:02:01 2026 GMT
Not After : Oct 1 10:02:01 2026 GMT
Subject: CN=d509773642ebf5578208bcdbb98c6ea20fc29cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ae:fc:fb:20:ce:c3:c3:e4:23:65:86:db:d7:
db:7a:5a:a0:f3:06:85:42:37:a2:d9:8a:49:03:15:
68:9e:a9:31:d5:67:d5:7f:53:bd:5b:51:06:81:af:
a6:b5:78:e9:d6:21:38:dd:8f:a0:be:bd:37:96:7b:
fd:67:09:77:28:d1:4c:5d:4d:a8:33:23:8f:df:e3:
f4:66:69:71:ed:b7:e8:06:d3:ba:e1:44:65:49:26:
79:9c:5f:71:0f:be:e1:3a:7c:6e:4c:2b:04:76:05:
6c:10:11:e5:99:e3:2e:6c:f9:31:f8:91:ba:93:9f:
78:09:02:5b:90:64:45:ae:ba:c9:ab:cc:d8:6c:be:
9c:32:44:c9:21:38:83:e1:09:48:5e:a9:42:4f:55:
6d:32:60:9f:cc:c6:d5:9d:15:db:6b:82:d7:a6:54:
72:22:4a:b3:95:4c:2f:75:e5:aa:0a:02:ef:78:60:
e4:bd:4e:a5:2b:87:72:e6:b6:3e:5c:b6:1a:6f:8c:
aa:a1:d5:7a:66:cf:95:75:9f:a6:70:21:fe:f2:9b:
8f:ec:7f:60:32:1a:a6:8f:08:d4:43:46:dc:28:17:
1e:66:30:70:a7:1c:bb:52:c3:c6:f4:f4:12:2c:cf:
89:d8:58:c7:06:b6:08:39:f2:bb:fc:b8:08:2b:35:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:77:36:42:EB:F5:57:82:08:BC:DB:B9:8C:6E:A2:0F:C2:9C:D5
X509v3 Authority Key Identifier:
keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:01:29:6b:48:10:60:a2:52:ab:f9:5f:99:58:c7:58:3c:48:
57:f7:81:c7:c0:32:d5:a0:96:32:23:68:7d:92:b1:45:62:fa:
f3:7e:e7:9b:c5:70:74:bb:bb:92:e2:30:9b:f2:3f:1d:e4:8a:
e8:16:c3:d7:dc:7e:9b:9c:b1:5e:57:76:4f:40:07:c7:c1:7d:
58:26:ef:7b:ed:c8:43:a0:be:66:09:c7:26:82:d2:75:9a:aa:
3a:37:95:7e:a5:60:0d:17:38:05:b1:9d:19:6e:59:9a:2b:bc:
0b:98:6e:2e:22:bd:d8:f3:83:0c:2c:a1:0c:8b:d2:73:71:b4:
de:28:42:7e:26:f6:29:43:52:9b:36:0c:9d:7b:40:51:79:79:
df:b4:15:fe:64:61:2c:2c:cd:e2:a8:e5:47:9f:fd:6c:67:45:
20:9e:c4:fb:f5:29:41:39:2e:9d:ca:74:61:ea:74:c1:b4:95:
df:cb:36:5f:a4:39:a3:d8:a2:47:11:3b:31:42:c3:66:61:6d:
98:be:83:71:27:d1:4c:dc:6a:d2:7f:66:c3:36:ed:3d:c8:a7:
e5:65:35:de:c1:75:5c:f1:e5:1b:45:76:86:b1:1c:b5:c6:6d:
53:58:20:70:7a:ab:59:67:aa:53:b1:be:fa:69:a1:15:26:bb:
c0:0b:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:09:34 2026 by rpki-client