Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: g4bY10MNVzKerP8tMlDy9vgUQA/bOWLYFYVwbMfehI8=
Subject key identifier: 78:E1:71:AA:A4:33:19:B7:DC:DF:1B:BE:F5:07:18:07:53:E1:C2:CB
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 01A10A39223EB40049B8E6E9B87AFF02FB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 1172
Signing time: Mon 05 Oct 2026 04:01:18 +0000
Manifest this update: Mon 05 Oct 2026 04:01:18 +0000
Manifest next update: Tue 06 Oct 2026 04:01:18 +0000
Files and hashes: 1: 0-Du4a3wTcLjHP17S235eocvetM.roa (hash: u4GgqQE96O1hG6gnLUh00BTZ9JVaaf72zWAUZel0hK4=)
2: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: wh7aniX9V7LZ4hXSdg8uwsMn3XfWadtXhd3gZBGJocY=)
3: rw01fr1t_p6yAH6IdbMhs5zW9Xs.roa (hash: xwniHCIPcTk6T6SZ9CnReFPZPS7gn1Cci1vAjNWFN+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:39:22:3e:b4:00:49:b8:e6:e9:b8:7a:ff:02:fb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Oct 5 04:01:18 2026 GMT
Not After : Oct 6 04:01:18 2026 GMT
Subject: CN=78e171aaa43319b7dcdf1bbef507180753e1c2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:50:0b:f2:69:f7:16:3b:8c:f9:df:86:36:46:
e5:c7:ca:20:84:e3:f9:31:00:bf:d8:ad:90:c3:80:
f0:a6:37:f8:80:6e:67:d1:a4:c6:8e:de:32:11:03:
e3:ec:d8:67:5d:e7:03:0c:ba:89:1a:80:65:54:b9:
52:e3:93:79:44:0a:b5:ac:a4:30:6f:ae:20:4c:7b:
26:38:5d:a9:c8:cf:44:cd:17:50:a5:a9:f5:64:7e:
6f:fc:ae:25:f1:81:06:14:9e:80:be:e2:8f:81:d1:
f0:58:1f:9b:37:e0:7c:af:37:5d:58:80:09:8f:dc:
b1:54:92:d8:c1:15:11:cf:4c:66:b6:ca:03:1f:c0:
4a:28:f8:30:3e:2b:1e:0d:d9:e5:34:08:cb:88:99:
d2:d4:66:6f:00:f2:86:3f:bc:db:97:67:86:1c:3a:
4b:28:03:13:54:4e:8a:58:9a:1c:c8:d2:12:1b:64:
bf:65:e8:d9:b3:fa:b4:53:de:9e:ba:58:33:a1:14:
d6:a1:e0:88:11:e5:53:cd:b1:bc:a8:8a:ba:57:c7:
58:c3:7e:da:ce:9a:a5:87:c0:6d:a5:f2:5a:53:f8:
34:f5:47:c0:2b:8e:2b:df:ce:b3:21:92:b4:b6:c5:
4e:09:ef:5f:3f:0e:93:3c:cc:c3:a0:54:41:99:30:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E1:71:AA:A4:33:19:B7:DC:DF:1B:BE:F5:07:18:07:53:E1:C2:CB
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6f:33:1d:fc:4e:77:36:ca:52:ad:04:0a:49:3f:46:1a:92:
f4:33:c8:84:70:dc:e1:02:24:92:d0:09:44:0b:00:93:7b:17:
c1:28:ac:c9:c3:12:9d:50:19:83:07:32:3f:9e:b6:c9:20:11:
a0:26:8a:d9:ee:28:2a:11:88:4c:2e:63:d0:0c:b6:bb:ad:1e:
02:86:1e:4c:22:3a:c9:65:2d:ea:72:d5:c5:5a:70:a5:0e:1d:
e0:6d:dd:40:36:4e:8c:66:a8:2b:37:27:78:16:1b:af:ba:62:
4d:9d:68:e2:51:5b:70:fc:df:a1:a3:39:4d:4e:2d:c2:51:50:
c6:b7:53:13:65:4e:2b:46:98:24:19:45:04:dc:db:69:40:23:
86:40:9d:6e:42:a2:68:23:7b:77:54:0f:fb:22:e9:47:fc:f1:
11:f2:4b:ef:66:27:df:25:82:24:85:ec:4e:7d:d6:34:5e:cd:
5e:e4:79:88:92:3b:54:8a:40:06:c2:c8:2a:50:34:c3:12:98:
2c:e7:86:11:68:0b:42:7e:62:61:9e:54:82:46:7b:58:aa:09:
34:ac:73:8c:47:97:82:c0:7c:e5:99:84:00:0e:3b:a9:95:ae:
bb:7a:58:b0:ef:7b:c3:58:98:08:d0:8d:5c:05:84:0e:d3:e7:
5f:c1:38:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 11:01:51 2026 by rpki-client