Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: 8eA16W94qfq2Yf8O0FZxTaBwnJ7RKSFst235ib+x0vw=
Subject key identifier: D1:28:71:0F:29:96:1F:F7:76:DA:BC:5C:94:B5:06:04:9E:AD:C1:74
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 019D99CFC0DF2F969D0C6435AE99B8087CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 15BF
Signing time: Fri 17 Apr 2026 05:00:22 +0000
Manifest this update: Fri 17 Apr 2026 05:00:22 +0000
Manifest next update: Sat 18 Apr 2026 05:00:22 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: 8B9jPpbAKfhZnW7ExHw4fKodkYAfKB+g06qWA8ndDVU=)
2: fXd2qSqxEZOV3cRcZOHurquaaX0.roa (hash: NECx1b/w4K5wTYVhS/vbFQNkkaTK5gq/qEzzHsYYuUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:c0:df:2f:96:9d:0c:64:35:ae:99:b8:08:7c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Apr 17 05:00:22 2026 GMT
Not After : Apr 18 05:00:22 2026 GMT
Subject: CN=d128710f29961ff776dabc5c94b506049eadc174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:83:1d:0c:06:ac:8f:9a:bd:92:bc:dc:2a:
00:97:9f:63:9b:19:12:98:e9:3f:69:c1:28:27:e9:
b9:6b:b9:11:49:5a:b5:0c:1b:90:0b:5c:f3:fe:75:
4e:eb:0e:f8:89:5d:7b:33:57:52:98:35:72:16:7a:
4c:13:ab:5b:66:53:20:ef:0d:af:73:55:e6:ce:81:
fe:ef:78:d1:98:dc:40:0a:8c:de:3f:08:bb:5a:e1:
c0:b5:1a:b6:78:b5:f7:06:49:c5:6e:65:a6:09:55:
95:6d:ba:b3:54:44:02:ec:b8:52:42:7c:0b:af:49:
b2:4e:b3:47:8c:04:f8:7d:08:f7:ea:85:87:0f:5f:
dc:51:75:15:1b:32:52:f7:fd:98:55:81:6f:01:b7:
2a:a0:19:ad:ba:cb:b5:e9:0e:6e:b3:8b:32:e8:6d:
2e:d9:bd:97:f7:a8:34:35:59:67:fa:00:67:7d:c7:
f0:6b:a6:72:17:22:ab:6a:1c:81:3b:b4:d1:2a:c1:
f9:ad:6a:ec:a8:37:6c:14:98:07:6f:e2:bb:ab:83:
e3:05:02:ab:5d:67:43:ed:47:a0:88:78:ee:33:4d:
78:9d:4e:65:e3:4a:76:46:3b:33:94:52:1b:5d:75:
b7:34:07:a1:a6:d0:c6:13:9b:32:b6:56:06:84:ce:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:28:71:0F:29:96:1F:F7:76:DA:BC:5C:94:B5:06:04:9E:AD:C1:74
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:85:a0:b0:18:72:ff:2f:d5:d2:5c:4a:05:75:a4:e3:6f:37:
a1:0d:89:58:6d:0a:1e:60:57:fe:6f:1b:a3:26:63:2a:28:81:
0d:8b:f9:0f:bd:4e:be:4a:5f:67:e1:08:09:54:ed:fd:52:6e:
55:8f:e5:09:f1:76:7d:25:cb:30:59:bb:43:a2:d0:f3:ea:2f:
ef:76:22:a0:aa:93:34:1c:53:fa:2f:0b:6b:99:1d:2d:88:40:
c9:ae:65:c6:89:4d:3c:32:c5:ed:14:ed:98:9c:9a:eb:c8:23:
db:09:7d:1d:b4:c9:a2:72:50:b5:00:68:ad:9a:4a:fb:20:63:
c9:66:6b:f8:58:73:77:a6:55:58:43:84:22:bb:20:01:78:e0:
3f:40:ac:a0:62:40:4b:1d:87:cb:51:62:a4:f6:b8:84:db:fc:
3d:f2:a9:48:da:02:16:c3:76:01:a3:72:23:77:ef:0a:2c:7d:
a9:dc:f6:db:6c:9a:7e:3c:69:e5:b0:8a:62:a1:41:23:e3:1d:
fb:fa:6a:bc:53:8b:d7:fe:67:a0:eb:7b:5f:26:8a:6d:fc:c3:
42:fc:f0:eb:b9:8f:45:f4:0d:c1:94:56:05:28:68:70:1a:0a:
48:06:a6:1f:41:55:28:dd:24:48:cb:57:79:87:ac:51:a1:e2:
22:fb:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:06 2026 by rpki-client