Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: DYd/6POt4Ow2hxkVujmlOGMmC5Fm2JAusXL2rfx+AYc=
Subject key identifier: 12:EA:22:04:EC:80:6A:33:23:DC:B0:E1:DF:16:11:83:93:69:4B:C8
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 019CAC4722593D14C14892B3CD9A419A4FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 1544
Signing time: Mon 02 Mar 2026 02:01:08 +0000
Manifest this update: Mon 02 Mar 2026 02:01:08 +0000
Manifest next update: Tue 03 Mar 2026 02:01:08 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: J57cGlJzALxrufzoioPmR2LBiD/hRJXT9Y7D6CxD2Hw=)
2: fXd2qSqxEZOV3cRcZOHurquaaX0.roa (hash: NECx1b/w4K5wTYVhS/vbFQNkkaTK5gq/qEzzHsYYuUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:22:59:3d:14:c1:48:92:b3:cd:9a:41:9a:4f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Mar 2 02:01:08 2026 GMT
Not After : Mar 3 02:01:08 2026 GMT
Subject: CN=12ea2204ec806a3323dcb0e1df16118393694bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:bb:03:41:fe:2f:72:47:a8:01:67:64:cf:
71:11:34:e6:1c:ce:f3:0b:0d:58:85:27:78:3f:7d:
83:ec:23:6a:7b:66:e4:d6:8f:89:2e:4f:90:46:a6:
aa:51:b2:3b:ad:c8:e0:77:72:9a:66:44:a5:7d:17:
24:66:95:e2:57:53:de:c3:65:4d:5c:52:eb:79:da:
a4:b4:2d:77:e1:83:d7:01:67:2b:1d:a2:24:87:28:
89:11:d5:36:43:d4:d0:db:df:4e:f8:08:66:99:39:
28:e2:71:21:31:2c:08:e6:b2:76:7a:b4:99:a1:0e:
66:3d:a5:8a:99:ff:6b:f5:a2:a7:3c:11:85:2d:f6:
e1:c1:25:9b:4f:04:14:df:77:35:44:42:aa:e7:3d:
09:ed:de:00:e8:bd:68:9f:54:16:44:13:6e:0b:2e:
98:23:db:2c:a4:bf:27:41:ad:53:a1:30:29:8e:4c:
b1:2d:94:16:30:a8:d4:db:c0:1a:65:9e:83:4c:7f:
61:b5:01:f1:45:d7:57:e0:f5:e9:45:f2:63:fe:59:
33:d5:f8:8b:1f:db:6d:f2:a8:6b:4f:d4:c7:ee:a3:
42:9e:9b:36:52:c7:c7:33:70:19:71:1a:39:b5:3c:
a0:bf:67:1b:bf:1a:b1:cc:2e:a8:15:66:b1:ef:5c:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EA:22:04:EC:80:6A:33:23:DC:B0:E1:DF:16:11:83:93:69:4B:C8
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:00:a8:e1:9a:a8:b4:fa:7e:73:30:9a:f1:ca:36:02:e8:9b:
fd:c8:88:8f:37:9d:11:cb:e6:c5:37:5a:d5:95:3f:46:3f:b2:
9e:0e:ca:a8:b3:b7:31:b6:a5:00:f6:4d:2b:03:14:31:32:80:
8e:57:0c:57:27:cb:3a:9e:14:23:80:9b:13:e0:89:64:a5:33:
2c:3a:45:ad:7d:c0:1a:de:ea:b7:3e:cb:ec:eb:2d:16:e4:41:
d9:c0:b8:41:f0:f3:aa:c0:24:ab:22:d6:80:99:85:9c:a4:9a:
8a:13:18:11:ee:e2:0d:66:e1:a8:9d:a1:55:93:23:60:f0:12:
34:dc:ae:da:ab:fd:89:22:48:13:80:d6:f7:92:76:32:25:62:
30:fc:1f:a3:03:07:0e:95:e2:9e:54:d5:79:a6:13:b9:1b:24:
c0:22:1c:c5:d3:0f:05:85:5e:1f:d5:09:6f:16:97:49:fc:35:
65:11:8d:45:fe:1c:09:26:02:f3:34:ee:45:2f:b3:88:98:70:
d7:25:6a:87:35:15:80:13:5c:d7:20:51:8f:48:8b:cb:cf:9d:
15:4e:95:f0:a1:23:98:58:d2:9b:bb:87:d2:d0:45:99:58:f0:
4d:26:99:d9:ef:e7:d7:5f:72:3f:3f:98:00:77:e7:33:68:8b:
ab:6a:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:10 2026 by rpki-client