Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File: GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier: FtgUNk262WE8YtjeIAUi4H99jK9XMdavc7FL3dbxAFY=
Subject key identifier: B4:6A:A9:D4:EB:6C:5C:7E:59:E1:62:C6:86:12:81:2E:87:58:4E:C7
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer: /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial: 01A08ED6CD3F505C8680605EB35C5D9A8A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number: 1560
Signing time: Fri 11 Sep 2026 05:00:36 +0000
Manifest this update: Fri 11 Sep 2026 05:00:36 +0000
Manifest next update: Sat 12 Sep 2026 05:00:36 +0000
Files and hashes: 1: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: h3hMe6p9M1GHRjejfBqRebMLOcgDrfyZOAtPuPsGvNE=)
2: PvoOGCPl9_uRABB0axn6ZoPjSfw.roa (hash: R0bL5Wz36hlUi6u7PbZBlbeTSW6yCz9pE1JTno5Jnd4=)
3: f2RzKPqHeeSwshGgaI03kVuo9ZY.roa (hash: vcuUb/xuMjhKt4KDFSNHCcpL3GkZRwfPEaVwfoajM48=)
4: v6DHuOuOQo5ADYQoffR2c_O6QS8.roa (hash: i6eWCZPdAHUsEhQJa4fw9gAODBNNYJr2pgzQXjsynVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:d6:cd:3f:50:5c:86:80:60:5e:b3:5c:5d:9a:8a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Validity
Not Before: Sep 11 05:00:36 2026 GMT
Not After : Sep 12 05:00:36 2026 GMT
Subject: CN=b46aa9d4eb6c5c7e59e162c68612812e87584ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:28:31:a7:51:79:51:5d:3d:33:7b:08:07:
f1:1c:38:96:c6:a6:ca:a2:3b:3f:46:4f:5f:18:9d:
85:43:56:43:ab:bc:0e:9e:6f:16:10:43:5b:af:44:
bd:88:ff:4c:7d:dc:d3:09:91:8e:f6:57:51:f3:67:
26:c7:91:19:f2:cf:92:ad:9c:c2:2e:05:5e:c6:41:
28:7a:ee:01:d0:ee:64:23:47:e9:19:b9:8a:bf:61:
7b:1a:de:4c:66:01:ed:c8:21:d4:41:62:76:09:e6:
92:c9:08:79:00:15:75:45:57:eb:0a:45:f5:37:8b:
cd:d6:cb:aa:02:de:20:43:bb:1d:a3:1c:39:5b:e7:
c5:9a:ba:f7:f4:6a:55:a3:3c:cb:56:50:d8:22:88:
62:10:1f:28:32:6b:71:90:21:8c:13:fe:af:84:79:
b4:e4:d5:ce:57:34:a8:6a:a4:06:0d:35:b9:74:48:
05:c9:63:0d:70:86:5b:82:2e:30:c1:57:d6:8b:58:
8a:a5:75:3d:2f:4a:7d:a6:f8:4e:5d:cf:bc:6c:b3:
ad:a2:8f:a4:ee:f5:0f:86:1b:aa:7e:98:f1:41:83:
3f:ed:c7:d9:82:06:da:84:a2:ae:3f:1e:67:db:3d:
f9:0b:37:7a:61:61:7e:7c:c2:42:c1:69:aa:87:91:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6A:A9:D4:EB:6C:5C:7E:59:E1:62:C6:86:12:81:2E:87:58:4E:C7
X509v3 Authority Key Identifier:
keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:68:14:a0:57:2f:08:f4:85:12:e3:31:0c:07:21:f2:a6:66:
2d:d3:b1:d4:05:df:50:45:98:8d:99:9b:9a:72:8f:22:64:97:
7e:09:e1:b5:73:59:ac:49:54:0e:12:51:ce:2b:12:c2:8c:45:
8b:b6:87:b1:34:b3:25:63:d4:c0:a6:65:37:19:7e:f7:c8:1d:
cf:3b:07:02:fe:d3:c0:06:0a:98:7c:6c:c4:b9:60:b3:68:27:
3f:df:be:38:d5:dc:b7:40:dd:bc:8c:d9:9c:b3:79:ed:69:5b:
16:cb:e3:67:00:f8:10:2b:f6:ce:65:f6:5c:d8:21:db:4c:a0:
7b:a0:a8:25:08:24:8b:93:be:ff:9d:17:1b:bd:b0:52:55:6d:
49:c8:cf:15:a3:d1:fa:34:db:8f:ed:3e:77:b6:e0:ab:b8:2b:
fd:22:c3:5d:a4:6d:e5:56:54:c9:e2:b5:66:67:48:72:b8:93:
14:53:f7:f5:cd:35:34:49:6a:24:e3:90:5e:80:b3:8a:cd:e2:
9a:2f:be:46:92:a6:ea:9b:31:fa:3c:66:4d:60:07:34:51:37:
2f:37:b7:2c:f1:df:80:20:b3:b5:b7:84:0c:5b:15:03:39:b9:
70:3b:68:d4:5d:a4:37:b1:ac:52:33:86:ff:0a:b2:ca:ff:e1:
fc:93:9e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCO1s0/UFyGgGBes1xdmopfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZmI1NmFkYzkwNzFkNWU5ZmRhMmI2Njk0MzhiOTJiZjg2
M2U1OGYwHhcNMjYwOTExMDUwMDM2WhcNMjYwOTEyMDUwMDM2WjAzMTEwLwYDVQQD
EyhiNDZhYTlkNGViNmM1YzdlNTllMTYyYzY4NjEyODEyZTg3NTg0ZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkogoMadReVFdPTN7CAfxHDiWxqbK
ojs/Rk9fGJ2FQ1ZDq7wOnm8WEENbr0S9iP9MfdzTCZGO9ldR82cmx5EZ8s+SrZzC
LgVexkEoeu4B0O5kI0fpGbmKv2F7Gt5MZgHtyCHUQWJ2CeaSyQh5ABV1RVfrCkX1
N4vN1suqAt4gQ7sdoxw5W+fFmrr39GpVozzLVlDYIohiEB8oMmtxkCGME/6vhHm0
5NXOVzSoaqQGDTW5dEgFyWMNcIZbgi4wwVfWi1iKpXU9L0p9pvhOXc+8bLOtoo+k
7vUPhhuqfpjxQYM/7cfZggbahKKuPx5n2z35Czd6YWF+fMJCwWmqh5GrEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRqqdTrbFx+WeFixoYSgS6HWE7HMB8GA1UdIwQY
MBaAFBn7Vq3JBx1en9orZpQ4uSv4Y+WPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUt
NjNlZWJlMDMyNWVjLzEvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUtNjNlZWJlMDMyNWVj
LzEvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWgUoFcv
CPSFEuMxDAch8qZmLdOx1AXfUEWYjZmbmnKPImSXfgnhtXNZrElUDhJRzisSwoxF
i7aHsTSzJWPUwKZlNxl+98gdzzsHAv7TwAYKmHxsxLlgs2gnP9++ONXct0DdvIzZ
nLN57WlbFsvjZwD4ECv2zmX2XNgh20yge6CoJQgki5O+/50XG72wUlVtScjPFaPR
+jTbj+0+d7bgq7gr/SLDXaRt5VZUyeK1ZmdIcriTFFP39c01NElqJOOQXoCzis3i
mi++RpKm6psx+jxmTWAHNFE3Lze3LPHfgCCztbeEDFsVAzm5cDto1F2kN7GsUjOG
/wqyyv/h/JOegg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 10:37:27 2026 by rpki-client