Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: xaGE1INOZiwqVxRxp77oSkjUMbKHY78nXuhd/gT7lj8=
Subject key identifier: A2:74:B7:35:E5:55:A4:AB:75:5F:CE:E3:FF:08:AE:B7:F8:08:81:F9
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 01A12466289E453B2B54389251929E1F2F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 1778
Signing time: Sat 10 Oct 2026 06:00:36 +0000
Manifest this update: Sat 10 Oct 2026 06:00:36 +0000
Manifest next update: Sun 11 Oct 2026 06:00:36 +0000
Files and hashes: 1: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: WEGZ4J1jL0NZnlh7FKb5ZU7Mac8OsEe28lmWRQBG/SM=)
2: k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa (hash: H0UiWZoHXbQKY5PjSSEja9oJ63puQn0Ebtq8jzm98zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:66:28:9e:45:3b:2b:54:38:92:51:92:9e:1f:2f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Oct 10 06:00:36 2026 GMT
Not After : Oct 11 06:00:36 2026 GMT
Subject: CN=a274b735e555a4ab755fcee3ff08aeb7f80881f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:85:09:4c:72:7a:5e:00:62:2a:dc:89:ea:d5:
58:19:16:67:dd:67:9f:10:e0:1b:43:8d:98:15:5c:
bb:5a:82:a0:bd:44:ae:5c:06:15:ea:d6:83:93:35:
89:34:c7:53:fb:67:56:85:15:cc:95:55:c0:f3:52:
0b:67:ca:b7:69:b1:04:41:37:af:b1:f7:7d:19:ab:
0d:c6:24:52:e9:53:c6:ed:63:99:e2:0c:ca:f1:39:
0a:6f:89:79:6c:05:2a:e8:6f:a8:73:26:98:d4:0c:
fa:83:99:bd:33:6c:a4:31:d5:93:2a:3a:2d:cc:a3:
36:31:db:02:55:5f:26:d1:2e:eb:8d:47:5a:10:65:
95:bf:c1:94:59:4e:a5:99:1c:22:1e:83:cf:40:c3:
82:fe:61:70:cf:aa:1d:5f:f0:00:27:1f:18:4b:cf:
20:f3:d0:b7:1c:ef:ac:31:be:0a:c5:12:1c:3b:e8:
ce:bf:95:7f:27:5b:96:26:e2:06:c8:f2:9b:c6:c7:
b1:88:c6:08:d7:da:64:ce:61:f8:e6:d0:30:3e:3d:
43:da:8e:57:ba:79:94:0d:da:c5:d1:ef:b0:21:50:
56:52:83:9c:64:9d:1b:d1:d7:fc:4a:1b:9d:58:e1:
63:c7:6f:55:35:9d:84:b9:db:67:22:b5:d0:b3:3a:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:B7:35:E5:55:A4:AB:75:5F:CE:E3:FF:08:AE:B7:F8:08:81:F9
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e7:7b:13:97:78:a2:eb:50:68:6c:5a:0d:8f:13:7a:a4:6c:
8b:72:83:81:44:f6:66:c4:c5:e6:b3:3e:5e:89:3a:f4:2d:2e:
28:c0:1c:70:e3:43:e2:ed:ad:3f:c0:91:29:06:14:87:de:78:
b4:da:eb:7b:ea:c8:38:34:26:4a:ce:02:9e:cf:fc:7c:09:da:
08:ce:d2:2e:7a:c6:49:f4:dd:f1:f2:0e:88:73:9d:ed:fc:fc:
5e:48:81:dd:d3:ee:46:06:40:22:1a:ca:13:e1:eb:ed:4c:3f:
27:93:64:3b:2a:7d:ea:24:e5:73:4a:d6:aa:d5:47:7a:4a:0e:
4d:47:3a:bd:06:c6:f8:0a:f4:fe:58:bf:6f:af:c9:16:42:17:
65:3b:29:a9:a0:43:95:d3:37:91:5b:b5:ce:da:df:57:fa:3e:
b7:9a:a3:9b:0b:9b:d1:4c:3d:c5:d3:54:74:3e:fd:3f:b3:d8:
86:d5:dc:7f:e4:71:c9:a5:bd:f3:06:43:4f:64:2a:3c:1f:b2:
1f:4a:c1:a3:de:95:19:e7:be:e8:f7:e6:65:fb:de:26:9f:03:
be:73:52:f0:86:fe:c4:62:79:9c:40:9b:d8:19:e5:34:41:22:
39:ec:e3:b5:4c:6f:a3:68:d5:e2:6b:46:0c:b2:46:c9:52:97:
16:ed:98:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:39:12 2026 by rpki-client