Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: ga+CjOACqPn80KTr9N0fGeDoYCT2cm3Hzgl4MtfF688=
Subject key identifier: D9:DA:A5:07:00:8B:9B:3A:3C:39:3B:83:70:AC:4B:47:0C:8E:77:86
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 019E2B82B1FE7C8EA475D1A1E339AD773149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 15EE
Signing time: Fri 15 May 2026 12:00:45 +0000
Manifest this update: Fri 15 May 2026 12:00:45 +0000
Manifest next update: Sat 16 May 2026 12:00:45 +0000
Files and hashes: 1: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: D9NdAEzJ0bcPgsmOwF8FcaSPkRczrWSfbkicoIIGHQc=)
2: k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa (hash: H0UiWZoHXbQKY5PjSSEja9oJ63puQn0Ebtq8jzm98zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:82:b1:fe:7c:8e:a4:75:d1:a1:e3:39:ad:77:31:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: May 15 12:00:45 2026 GMT
Not After : May 16 12:00:45 2026 GMT
Subject: CN=d9daa507008b9b3a3c393b8370ac4b470c8e7786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:a2:51:c5:e1:c3:90:92:f4:c4:e2:d0:a6:
75:cb:4d:53:12:c8:9c:ae:f1:09:3a:f4:9e:b7:aa:
2c:38:6a:5b:6b:75:15:7c:59:8c:78:5d:75:02:ad:
fa:16:a4:52:db:e1:a5:77:f8:e1:97:b0:aa:5f:aa:
87:d6:e9:58:7e:28:17:88:33:2f:0a:00:4f:cc:88:
d0:ee:c7:5e:3b:3e:c2:12:7c:ec:0e:d4:3a:2c:c9:
2d:ab:a8:a6:7b:d8:24:b0:03:92:e8:c8:87:3c:aa:
8d:33:e2:29:20:7c:0c:dd:5c:6a:48:12:17:79:b3:
b4:56:a2:db:3e:f7:ae:4a:3d:59:fb:98:a9:7e:dd:
1f:d6:b2:34:e8:41:50:72:fb:97:4b:09:b5:27:86:
14:67:3a:2c:7d:2b:1a:cf:8d:9a:6e:02:2c:49:2d:
2f:65:48:38:05:21:ab:8e:89:e8:6f:50:17:4b:34:
71:c5:8c:a1:b4:8e:0f:83:8f:f4:e8:de:65:7d:84:
49:58:67:b3:02:05:e6:7b:52:05:c9:48:cd:f3:1c:
1d:9a:9f:24:92:ea:d1:c7:39:91:63:4e:15:54:7a:
ae:3e:34:49:fc:d7:4c:17:07:76:cf:29:94:bf:b1:
02:a1:4c:9e:bc:ba:92:26:13:43:37:c7:56:ff:7e:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DA:A5:07:00:8B:9B:3A:3C:39:3B:83:70:AC:4B:47:0C:8E:77:86
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bf:02:c8:ac:03:ed:54:d3:54:6e:da:ff:73:cf:b7:53:dd:
b5:72:6c:13:21:48:a4:b7:2e:bb:6d:e0:34:86:d6:d8:89:50:
96:16:29:51:7d:72:56:41:4a:ce:3d:d9:9c:72:79:d4:7c:fb:
97:e3:e1:d1:9c:0d:57:05:c5:04:f5:01:b1:fc:70:25:f5:68:
a6:c3:06:ab:79:0c:9a:33:79:c2:36:ad:b0:4b:15:3d:38:a4:
e2:c5:b2:f2:25:83:68:c5:ff:05:57:1e:81:5c:51:68:3f:a5:
fa:2b:be:d4:df:d0:ca:b4:6b:43:05:31:6d:a6:82:c3:95:4d:
6b:4b:45:07:41:28:de:33:3f:12:5d:f2:1e:f1:da:37:f6:d0:
4d:db:5d:46:11:03:0d:b4:b1:59:5a:33:f4:d9:1e:2a:e3:0a:
97:45:d7:f6:2b:ea:20:91:43:dc:81:1b:56:e0:04:75:63:8f:
66:33:d2:8f:e6:9c:34:f7:01:08:ac:94:73:f0:a9:f6:bb:db:
91:fe:6e:bc:c1:60:4c:fe:f9:d5:ec:c2:b1:66:69:09:2b:9d:
2f:b7:3d:6b:d0:69:56:51:3e:c6:a1:bb:22:b8:a6:49:04:c7:
c6:27:fc:8e:2d:56:c7:48:e6:52:1d:a5:3e:5c:a2:3e:d7:d6:
44:18:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:54:54 2026 by rpki-client