Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: Y9EeNmluKkW3BNsmGhhDj83VZ2BXBYpo23U+jlDyyTk=
Subject key identifier: 8E:7F:7B:64:94:1F:F1:74:78:96:97:A4:CB:08:03:4C:FD:B7:C9:DB
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 019D27DFCB996E6E97B19A8332F49B72DDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 1584
Signing time: Thu 26 Mar 2026 02:01:11 +0000
Manifest this update: Thu 26 Mar 2026 02:01:11 +0000
Manifest next update: Fri 27 Mar 2026 02:01:11 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: VZAbBwsYT8mRmN0zZiBAc+2QO/miL5B1R/TY1MgPJcE=)
2: fXd2qSqxEZOV3cRcZOHurquaaX0.roa (hash: NECx1b/w4K5wTYVhS/vbFQNkkaTK5gq/qEzzHsYYuUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:cb:99:6e:6e:97:b1:9a:83:32:f4:9b:72:dd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Mar 26 02:01:11 2026 GMT
Not After : Mar 27 02:01:11 2026 GMT
Subject: CN=8e7f7b64941ff174789697a4cb08034cfdb7c9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:cb:ed:33:ec:75:ac:04:ac:39:cb:92:02:
97:e3:27:8d:c9:ba:76:af:29:98:31:cd:8c:44:ba:
09:ed:53:c5:6d:a7:20:a2:b1:d1:7c:1e:4a:e4:c9:
41:49:16:12:2b:3e:37:de:d1:48:6f:f5:e6:b2:99:
ce:f8:27:f0:78:85:84:6b:c4:bc:e6:60:36:bc:49:
b0:fd:f4:5e:69:23:f0:32:5d:73:ac:2d:58:e5:0f:
ec:de:11:67:04:4c:aa:5d:0e:18:c7:ea:95:39:65:
88:5c:36:a9:01:38:85:fa:f9:49:00:11:97:6b:bc:
3b:a7:21:9d:7d:66:41:88:b6:65:36:ee:c2:a9:ac:
98:8b:76:3f:01:eb:15:0a:3f:74:df:90:26:98:3c:
a4:bf:8f:d2:70:0f:bd:f7:51:57:6f:5b:a4:b9:21:
3d:c3:34:f9:d1:00:24:25:0d:b9:5c:9b:f8:86:9e:
03:ca:00:c3:c9:8d:e9:47:06:57:72:bb:8d:ee:8f:
dd:d0:11:78:81:6a:12:d0:a0:ad:c5:57:6b:c5:c1:
02:05:57:d7:cf:41:b4:48:52:9d:7e:3d:a2:d8:1f:
46:bd:3b:b1:61:d5:e0:cc:50:b9:ad:42:64:be:6c:
d8:bc:0e:b2:66:4b:5c:03:9f:ea:90:05:94:09:e9:
b8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7F:7B:64:94:1F:F1:74:78:96:97:A4:CB:08:03:4C:FD:B7:C9:DB
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:09:1a:45:58:81:ed:88:63:70:de:b0:21:47:71:8a:23:8f:
54:eb:87:c3:9a:11:bf:a7:be:18:bb:7c:31:ea:10:5d:19:b2:
af:a8:b6:e7:33:14:8c:a5:f7:54:e5:88:ff:c3:a0:0e:9f:a0:
09:60:6b:bc:06:76:c5:c1:46:e0:c9:ec:80:15:af:e6:53:77:
12:d2:a6:0c:25:ec:56:35:03:87:43:20:bf:85:65:b5:db:48:
4c:f6:2b:55:e9:a2:3f:c4:fd:dc:27:84:70:21:52:79:90:b3:
68:46:45:59:2b:57:98:fa:ce:40:c4:41:bf:95:44:b7:cb:d7:
b1:2f:df:38:8d:4e:cb:85:e3:1d:4b:25:30:d2:6a:7a:46:30:
81:b4:4d:88:5c:45:71:77:b4:95:c5:e8:33:ad:f1:b3:03:07:
d3:e4:3f:23:01:55:51:b8:61:f0:f2:7b:4e:fe:67:a8:c4:1f:
1e:74:cd:51:56:b8:44:a8:21:0e:11:54:af:4e:5f:f0:df:c8:
4a:df:0e:83:5b:72:58:64:5c:f0:d3:65:85:c7:86:7b:dd:0c:
af:65:f2:85:82:2f:67:70:01:7b:bc:72:f3:79:fb:ac:e9:6a:
6d:10:7f:1a:d0:f5:8e:db:97:19:7e:7c:2b:40:2f:17:91:3f:
9c:8d:4e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:34 2026 by rpki-client