Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: 4E7CNiDtN6yz3doOY5nyGj8jxexdIs3wWjUJdBLzLis=
Subject key identifier: 3B:51:A4:FA:56:B5:2D:6B:AA:BF:A7:81:6D:B8:E8:87:4B:B7:34:18
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 019CAA216C563F7FBC5BF48DC5B1B41FBF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 0F2E
Signing time: Sun 01 Mar 2026 16:00:42 +0000
Manifest this update: Sun 01 Mar 2026 16:00:42 +0000
Manifest next update: Mon 02 Mar 2026 16:00:42 +0000
Files and hashes: 1: 0-Du4a3wTcLjHP17S235eocvetM.roa (hash: u4GgqQE96O1hG6gnLUh00BTZ9JVaaf72zWAUZel0hK4=)
2: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: n2WoQe3RLZXwGWJfb95u1ZV3zX6r0c9CUTe3lScv91o=)
3: rw01fr1t_p6yAH6IdbMhs5zW9Xs.roa (hash: xwniHCIPcTk6T6SZ9CnReFPZPS7gn1Cci1vAjNWFN+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:6c:56:3f:7f:bc:5b:f4:8d:c5:b1:b4:1f:bf:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Mar 1 16:00:42 2026 GMT
Not After : Mar 2 16:00:42 2026 GMT
Subject: CN=3b51a4fa56b52d6baabfa7816db8e8874bb73418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:20:e3:19:43:70:b8:2d:06:53:e7:83:53:
a0:37:65:99:b9:c0:7f:35:82:2a:87:de:40:3d:df:
32:24:f3:66:7f:b0:5c:9c:5d:8b:7e:98:21:03:ba:
ea:88:2b:45:71:af:14:ae:54:30:11:50:4c:04:c9:
62:10:c0:ce:0c:cc:80:48:1f:81:8c:c1:4f:f4:3c:
f9:7a:f5:fe:6a:2f:bc:31:18:05:bb:28:31:1b:24:
9c:bf:93:a7:4b:00:b4:b1:2e:5c:4c:a6:1a:61:ec:
25:1f:96:ae:9b:fd:fc:fc:3e:de:54:9c:11:0a:ca:
62:da:83:4d:4b:be:ac:70:2a:f0:3e:41:35:2c:13:
7b:d8:f4:10:39:c5:ea:75:32:f0:be:c6:1b:93:df:
08:50:f8:7e:ec:9a:ba:0e:41:9b:0d:a2:81:c9:9d:
01:ef:30:15:01:e1:c7:e3:19:2b:e2:d7:65:4f:c5:
a9:4e:15:8a:ed:91:38:1f:80:ef:91:31:fd:85:7e:
2b:86:35:db:84:3f:4e:9e:fc:b6:d1:97:4e:0b:1f:
75:e6:8c:cd:c5:46:73:1f:ae:2c:88:9c:ef:0c:30:
c0:bc:f1:13:89:4b:57:04:3a:fc:09:39:49:d7:f2:
9f:56:2f:31:48:be:cf:5b:e4:cc:a2:a0:e1:7a:da:
64:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:51:A4:FA:56:B5:2D:6B:AA:BF:A7:81:6D:B8:E8:87:4B:B7:34:18
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:05:30:46:f1:c4:03:bc:3e:20:6d:5a:cf:fb:99:61:2e:71:
11:b5:7b:f6:df:8a:f6:ec:af:58:e9:e3:a7:77:05:0c:d6:aa:
7b:36:f8:f0:83:28:f8:2c:5d:0a:c3:0f:ce:5c:c5:65:98:f0:
9f:34:b3:93:db:10:d8:11:f5:4f:a9:04:22:0a:aa:16:20:a6:
88:a9:cc:71:d1:43:44:09:7c:46:1e:5d:70:9f:36:e6:80:ba:
cc:84:be:50:a9:08:0c:6d:20:73:63:28:46:6c:ed:cf:61:2d:
17:ab:84:9d:cb:92:b1:00:8e:e3:97:ad:ad:47:df:b4:3e:4f:
36:19:c4:5c:de:e9:81:27:59:42:3f:4d:42:41:9c:c7:e3:c7:
8f:ce:ce:1c:34:f4:d2:14:47:84:9a:d3:76:8a:2c:92:4f:20:
23:00:83:c0:8a:b3:78:70:c1:ae:68:16:f2:8f:eb:30:b7:a6:
66:0a:bb:87:66:9a:e1:9f:77:ca:17:9f:e3:5e:47:ab:d4:f5:
b0:f6:16:56:b9:f8:07:db:bc:2a:da:85:97:4b:1b:43:4b:d4:
37:03:ef:41:d6:68:04:38:30:cb:2f:b8:1e:cc:ae:8f:44:a2:
5b:07:11:68:71:4d:bd:e9:6d:72:20:81:e4:2b:f1:f5:4e:e6:
03:52:41:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:14 2026 by rpki-client