Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: plQZFoqOlwFLnYMIRGmOSKxBGlKg+fmMGvpl24RyTDY=
Subject key identifier: 1A:60:40:45:23:2B:F5:F7:9D:49:6A:BA:4F:29:35:DF:00:D3:8D:29
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 01A13AB7886E93DADE78E3C2A7D792E9A65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 17A0
Signing time: Wed 14 Oct 2026 14:01:08 +0000
Manifest this update: Wed 14 Oct 2026 14:01:08 +0000
Manifest next update: Thu 15 Oct 2026 14:01:08 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: 5kU03eVXz+RlFsCwGKP5d0BJLmm5hVSqHaCcsZ464l8=)
2: fXd2qSqxEZOV3cRcZOHurquaaX0.roa (hash: NECx1b/w4K5wTYVhS/vbFQNkkaTK5gq/qEzzHsYYuUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:b7:88:6e:93:da:de:78:e3:c2:a7:d7:92:e9:a6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Oct 14 14:01:08 2026 GMT
Not After : Oct 15 14:01:08 2026 GMT
Subject: CN=1a604045232bf5f79d496aba4f2935df00d38d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:c4:ac:43:58:79:29:f5:37:a6:3f:d2:dd:
c1:ef:1b:dc:8b:44:fb:69:03:99:bf:c4:fa:67:f9:
cf:d3:52:bc:7f:15:05:6c:6f:8a:4f:e4:d2:23:7b:
01:c0:72:8c:82:c0:63:0f:45:de:73:84:ea:59:8b:
9a:8d:36:e1:e1:f7:60:17:10:a5:51:18:f7:fe:e8:
b5:98:d0:a6:ec:96:af:31:ed:42:bb:3b:50:5c:10:
9f:9d:36:d6:5f:4e:3b:93:46:51:c9:a9:26:fa:a2:
b3:30:e6:76:fe:3f:b8:22:ac:01:39:ed:fd:8d:6f:
90:82:0b:0a:5e:35:de:ec:12:b0:4f:9f:4e:0b:6f:
4e:62:15:58:6b:b9:fb:a6:19:65:9a:ca:6c:f5:76:
b1:6d:5a:0a:7e:3c:48:11:c9:ec:cc:f0:32:bb:c4:
ac:65:ba:b3:5b:e4:c8:d4:a2:68:64:ca:69:81:f9:
4c:7e:72:ee:83:92:92:96:47:bf:bb:4f:43:46:b5:
ac:3b:5f:2f:3f:13:4b:19:7d:a5:07:4f:95:03:33:
b9:b9:a0:83:37:5f:db:1b:cc:67:a5:94:48:4d:42:
64:16:52:f4:c5:b1:66:f4:95:00:50:4c:a6:83:47:
9e:ef:e7:18:0d:5e:19:d8:38:d1:de:be:1c:a4:f3:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:60:40:45:23:2B:F5:F7:9D:49:6A:BA:4F:29:35:DF:00:D3:8D:29
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:99:bf:a9:4c:f7:31:21:6f:65:02:14:3d:2a:59:ad:0b:74:
b3:99:44:8a:a9:ac:99:c5:4b:a6:8c:26:6b:3b:d6:e5:61:36:
cf:a3:6a:4a:7e:0d:71:83:1c:57:0e:92:0a:ea:d6:20:1e:27:
64:83:7f:76:41:df:01:2d:f5:48:37:e1:6f:57:d7:d5:4f:ad:
1d:f8:43:87:79:c8:78:82:ab:9d:c1:1c:1e:68:09:f2:10:a3:
ae:4f:b4:b7:7f:08:ae:86:1b:6b:d4:da:57:9f:51:7f:ed:e4:
32:15:e7:bb:f5:3f:8b:82:14:83:7b:65:b3:29:a2:fd:3e:54:
55:fc:74:f0:1e:a4:7a:47:04:25:62:49:f3:17:c4:f1:f6:d5:
9b:42:4d:cd:ac:9c:d2:d3:73:ad:1e:5a:8f:f4:bc:62:8c:05:
89:e8:cc:cf:61:96:6c:f7:83:c1:e3:fa:bd:79:b0:23:ad:4b:
55:f1:2f:bd:40:7b:01:5c:7d:37:05:11:61:a7:e9:ac:05:58:
e9:07:bd:08:2a:d8:ea:9c:19:90:0e:db:4b:7d:3e:ef:74:f7:
8f:2c:7a:0c:2f:40:2a:e0:1b:1f:39:f8:07:29:db:aa:e3:50:
8b:ec:f7:2b:2e:94:99:ce:83:8b:56:40:3d:a6:dc:be:94:7b:
d0:1e:08:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:59:07 2026 by rpki-client