Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: OXV3VU9uRByQIOv3wOE/oSHqYvlUA2nHwgp/97TsZLk=
Subject key identifier: 19:DA:B5:14:AD:F6:FD:70:05:EA:E4:4C:F8:E8:42:3A:3C:03:D7:31
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 01A0ED791274C7803B7D8E32E246575C95F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 1778
Signing time: Tue 29 Sep 2026 14:02:09 +0000
Manifest this update: Tue 29 Sep 2026 14:02:09 +0000
Manifest next update: Wed 30 Sep 2026 14:02:09 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: wTkFxqHewahOw1K/hnxMhUY53omxvwEg6QAB892NSgY=)
2: fXd2qSqxEZOV3cRcZOHurquaaX0.roa (hash: NECx1b/w4K5wTYVhS/vbFQNkkaTK5gq/qEzzHsYYuUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:79:12:74:c7:80:3b:7d:8e:32:e2:46:57:5c:95:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Sep 29 14:02:09 2026 GMT
Not After : Sep 30 14:02:09 2026 GMT
Subject: CN=19dab514adf6fd7005eae44cf8e8423a3c03d731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:b2:3a:25:ad:ec:85:3c:a2:f4:50:7e:9e:
15:57:af:c2:38:70:e2:39:36:8a:fe:53:d7:bd:36:
d5:ee:ad:47:53:59:50:3c:3c:6d:9b:77:47:6f:06:
11:2a:24:66:c2:49:2b:ab:b4:60:ec:39:30:3f:0f:
40:15:5c:aa:82:a0:56:af:04:c3:c3:65:c8:ca:f8:
50:c9:2d:79:7f:b7:ff:4f:69:c3:e4:fd:92:c6:d2:
a9:9f:8f:a3:c2:38:1d:e1:60:da:69:1d:71:2a:a7:
88:fb:44:44:66:0b:d7:11:1e:42:97:92:6f:86:7f:
ae:06:cd:52:e0:14:2a:57:00:c1:ae:23:5b:07:d7:
7b:a9:b2:ed:af:84:e1:fa:89:08:27:0c:0f:24:36:
56:76:8d:67:46:d5:88:67:24:df:35:ea:2f:34:d0:
ee:4d:bd:17:7a:fc:43:ac:0a:42:f2:a3:57:89:ba:
05:b4:9c:cd:82:51:a0:1f:03:b0:31:af:92:5d:18:
1c:b5:e9:0c:2c:b6:a2:87:19:13:f2:ba:b7:54:59:
05:f3:8d:5b:27:71:b7:0e:d3:c4:15:2e:4e:a3:4d:
35:b6:53:2f:c2:9f:44:cf:fd:62:94:9d:ce:b8:dc:
10:31:e7:e0:d3:53:8c:36:fe:45:e7:16:e9:f0:51:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DA:B5:14:AD:F6:FD:70:05:EA:E4:4C:F8:E8:42:3A:3C:03:D7:31
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1e:b8:e9:99:ba:ec:fb:3b:fe:2e:36:af:df:c7:d7:d0:1a:
c5:52:31:4a:be:7c:16:65:98:97:b9:89:c1:3a:88:7d:2b:f4:
80:6c:b2:8d:6a:0b:7e:7d:b8:44:93:2e:bb:54:f5:b3:e1:aa:
72:65:54:7b:48:54:32:ae:54:e4:03:79:41:ff:ab:b9:78:d0:
4d:c1:1c:1e:ba:c6:5f:81:7e:5e:9e:8b:62:87:90:1a:34:e0:
e3:70:34:2f:3e:64:f7:96:91:fa:d4:fd:47:e1:90:b7:13:60:
c1:87:1d:ac:f7:e2:2c:3e:d6:41:da:1f:6f:56:e6:c6:54:04:
d1:00:16:55:13:f5:73:a5:01:52:95:4c:a0:79:8b:10:2d:8e:
b7:a4:5c:6e:64:68:64:c6:25:b3:ba:40:0a:88:58:81:1d:cf:
3f:cb:ce:b5:90:41:96:2a:62:bf:6b:aa:bd:6a:b5:6b:97:0c:
9b:1c:4d:78:8d:43:64:1f:51:37:34:4b:50:8d:21:58:d7:71:
c5:fd:2c:e1:2d:71:ed:db:11:62:47:3b:cd:13:92:10:8b:92:
23:52:cb:dd:f3:28:d1:e9:0c:01:3e:53:a4:b7:6b:5c:32:e9:
b7:d4:a6:fd:fe:02:82:fd:46:82:ae:aa:0a:de:72:ce:a9:cb:
e0:33:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:20:50 2026 by rpki-client