Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: 1K4dZuI71zHt0nHX7r+gArqay/rt2Q5ZTgGWRG/Lan8=
Subject key identifier: 10:F6:29:89:BE:02:8A:41:7C:A9:70:1C:54:48:FA:3B:A3:85:CB:89
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 019D9B873C40133FF6D8379947ABD1FF4685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 0FAB
Signing time: Fri 17 Apr 2026 13:00:24 +0000
Manifest this update: Fri 17 Apr 2026 13:00:24 +0000
Manifest next update: Sat 18 Apr 2026 13:00:24 +0000
Files and hashes: 1: 0-Du4a3wTcLjHP17S235eocvetM.roa (hash: u4GgqQE96O1hG6gnLUh00BTZ9JVaaf72zWAUZel0hK4=)
2: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: AzUrWMb1NMQcrgokzcwXN0u18Xy+2Lb5q998FKNs66c=)
3: rw01fr1t_p6yAH6IdbMhs5zW9Xs.roa (hash: xwniHCIPcTk6T6SZ9CnReFPZPS7gn1Cci1vAjNWFN+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:3c:40:13:3f:f6:d8:37:99:47:ab:d1:ff:46:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Apr 17 13:00:24 2026 GMT
Not After : Apr 18 13:00:24 2026 GMT
Subject: CN=10f62989be028a417ca9701c5448fa3ba385cb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:03:d4:51:37:73:a1:d4:ef:4f:d8:f7:ce:
5f:04:c4:be:01:d6:d4:fe:3d:22:34:1e:23:45:be:
c8:cb:89:0f:be:de:21:ae:e4:75:57:dc:35:ab:fc:
e2:17:3e:23:a0:ab:a9:73:bb:d0:c8:ed:29:21:69:
e5:0b:83:4e:2a:ed:aa:a2:7c:c8:e0:7f:9d:c1:e6:
96:cb:6d:5b:a8:af:05:62:ee:44:43:19:1c:98:09:
1d:d7:88:50:26:1a:29:2b:a6:b2:5d:c1:93:62:a1:
bb:96:7a:97:6e:ab:d1:87:de:1a:7b:b4:3b:c1:da:
1c:dd:7e:bf:02:ea:74:a8:d2:57:63:33:40:96:c0:
89:e5:8f:7e:cd:da:78:19:1f:3b:6d:d1:19:8e:a4:
1f:be:98:47:4c:f7:46:bd:bf:54:28:06:79:29:07:
45:35:06:0e:18:e9:b0:9a:79:bf:b2:98:0b:61:8f:
4a:b8:6d:1d:1b:46:10:38:03:1a:b7:99:0b:97:67:
2b:12:6d:99:f4:c7:d9:a7:2c:33:ab:48:5c:17:d5:
14:42:ed:2d:21:5b:f0:5d:8c:05:64:fd:fb:b7:b4:
f2:01:ce:d9:90:15:7a:d5:ce:41:ad:b5:a7:af:09:
cf:77:8b:5b:72:51:92:f9:a9:2b:0d:93:95:96:e0:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F6:29:89:BE:02:8A:41:7C:A9:70:1C:54:48:FA:3B:A3:85:CB:89
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b0:eb:e7:9c:b7:00:a5:f7:c1:22:63:04:b1:0f:56:99:d5:
0b:b1:3f:94:d5:c6:a7:51:10:af:1b:ee:75:65:eb:ca:5d:62:
94:82:23:73:70:3a:eb:ce:5c:82:76:fd:76:e2:3f:d3:e5:a7:
4f:2d:42:b3:d3:1b:12:9a:ec:28:bb:3c:2b:7d:a7:f7:81:a5:
3b:81:4a:d2:b5:6d:f6:25:6d:04:d1:c2:06:a0:7e:f5:e3:8d:
00:ae:cb:18:5f:9c:32:df:8c:fa:9b:5f:c3:42:f7:d3:88:4e:
14:67:41:3e:e1:d8:b6:d1:ad:2f:fd:28:f7:4a:8c:3f:ed:3c:
55:ee:e6:97:bd:0d:32:60:ba:4c:c6:e9:be:58:18:f5:61:22:
a2:92:fe:34:87:bd:be:5c:6a:c4:bc:42:e4:c3:eb:dc:7c:7d:
7d:65:3d:cf:03:fe:9b:c9:e4:ac:84:b7:8d:ec:b8:3f:c3:3a:
eb:d3:81:96:fd:9c:03:b7:64:b0:38:a8:d9:fd:47:fd:57:63:
a5:0f:25:22:75:a7:e1:70:72:8d:e8:bd:8b:be:3f:f1:a1:05:
9a:90:fd:30:5b:c8:84:3c:d4:0b:b7:33:b1:2b:11:a5:77:95:
26:08:c4:dc:ea:03:de:88:22:96:ed:59:1b:e0:23:71:c6:d6:
4b:b1:78:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:40 2026 by rpki-client