Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: 2Wh5hTMbkyVykJh+huaiV/PjvAk6cpAFld1sOt7SqSk=
Subject key identifier: C2:67:53:84:FF:DC:D9:C0:DA:8C:B2:76:F1:8D:8E:D0:4F:03:0C:15
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 019CAF115EB446164F5B13EE92482EEEF86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 1529
Signing time: Mon 02 Mar 2026 15:01:16 +0000
Manifest this update: Mon 02 Mar 2026 15:01:16 +0000
Manifest next update: Tue 03 Mar 2026 15:01:16 +0000
Files and hashes: 1: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: /u90TJ5uRdRQxSerdIlQr9lVssgxo4hunhMyKFoF1Fo=)
2: k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa (hash: H0UiWZoHXbQKY5PjSSEja9oJ63puQn0Ebtq8jzm98zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:5e:b4:46:16:4f:5b:13:ee:92:48:2e:ee:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Mar 2 15:01:16 2026 GMT
Not After : Mar 3 15:01:16 2026 GMT
Subject: CN=c2675384ffdcd9c0da8cb276f18d8ed04f030c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:14:e6:19:ab:54:aa:58:c1:f6:19:06:8f:
e7:e1:0d:2b:11:6c:b7:06:34:2d:09:c4:2b:67:5b:
02:e4:e0:4c:5a:11:ac:cb:81:1e:68:de:5f:5e:3e:
af:98:42:84:db:03:df:53:9e:02:21:0c:61:4d:6e:
16:48:a8:5c:85:e9:83:48:b5:69:e3:1f:01:28:0b:
2c:41:92:b1:7c:ee:77:b1:14:49:13:0e:e0:c2:4b:
16:26:6c:52:a5:a7:d7:ca:04:ef:39:59:06:d1:f4:
fd:ae:33:70:c5:3e:33:d5:2e:8b:19:34:ad:a8:d6:
02:70:b6:c7:3c:43:b9:72:69:cf:44:3c:b2:d6:9c:
9d:0c:b6:13:7f:45:f9:23:f8:e9:50:94:b9:f5:5f:
a9:58:9d:06:dc:ba:3b:58:7e:bc:08:b3:ab:ce:42:
2d:dc:e0:24:f0:4e:3d:5e:24:63:12:81:07:f6:80:
2c:dc:4f:fa:5c:ba:6c:1e:4f:bf:19:5d:bb:d0:9f:
2c:eb:1e:3a:fa:6e:fa:7d:38:4a:92:e4:03:60:b8:
2b:31:1f:5e:d5:01:54:a0:42:08:f4:aa:02:1d:f5:
f9:93:80:b5:28:d3:3f:72:c4:2c:3c:26:65:84:e6:
df:28:ae:bb:de:16:6d:ff:66:5e:c8:ea:8d:3e:24:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:67:53:84:FF:DC:D9:C0:DA:8C:B2:76:F1:8D:8E:D0:4F:03:0C:15
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:85:a9:71:a1:4e:5d:08:d9:9c:01:9a:86:56:af:d3:66:9c:
aa:cb:b7:c1:7c:3e:bb:64:2c:4c:20:a4:8d:ed:d9:2b:de:76:
9f:ea:18:b6:a2:d6:e3:e9:59:40:c6:77:75:2e:61:89:9d:38:
10:99:93:00:34:69:a8:4c:35:1c:3f:ef:b5:bb:be:97:52:ad:
d0:ed:41:11:fb:b0:52:4f:b5:16:73:ea:d7:6e:a2:43:89:6e:
5a:00:64:ea:af:23:8b:a5:b9:37:38:f3:f7:dd:1d:65:e4:ca:
6a:2f:44:9e:38:20:1a:67:01:fb:e3:42:37:ef:2a:b4:67:5c:
ea:90:a0:48:79:a7:85:40:8b:5c:d7:5c:ac:eb:f6:26:d9:5f:
e1:af:49:dd:8a:cf:f2:15:de:12:36:f9:e9:46:7c:1f:25:12:
fb:5e:53:e3:87:59:0e:3b:76:35:2b:cd:a5:51:77:3a:16:ee:
78:a0:92:4d:2c:be:d4:48:4b:9b:7a:b6:ce:5e:84:c1:b5:15:
00:4d:3d:34:07:9b:e3:bf:ba:24:ca:4e:ba:4e:e5:ac:1d:09:
53:5b:6b:da:b2:83:0a:32:ae:93:60:8f:e3:f4:e1:7d:04:bd:
cc:b3:bf:d8:f9:0e:b1:c7:b2:04:28:dc:bb:eb:3d:23:ba:c3:
75:c5:31:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:13 2026 by rpki-client