Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: VWGfgmkdk+/4v591aEJ8iuK1R37lSiiq6OOSULtoKhc=
Subject key identifier: B8:DF:8F:A2:9F:5B:50:42:A7:E6:4E:7E:7A:7F:B5:B4:75:5B:43:56
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 019D3752A7D2A139228B78A8F41061478601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 158C
Signing time: Sun 29 Mar 2026 02:00:56 +0000
Manifest this update: Sun 29 Mar 2026 02:00:56 +0000
Manifest next update: Mon 30 Mar 2026 02:00:56 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: 1YTckFPvkK6GYxr95gWiK6Ed8NBDl89dzzeCz+4YB14=)
2: fXd2qSqxEZOV3cRcZOHurquaaX0.roa (hash: NECx1b/w4K5wTYVhS/vbFQNkkaTK5gq/qEzzHsYYuUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a7:d2:a1:39:22:8b:78:a8:f4:10:61:47:86:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Mar 29 02:00:56 2026 GMT
Not After : Mar 30 02:00:56 2026 GMT
Subject: CN=b8df8fa29f5b5042a7e64e7e7a7fb5b4755b4356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:55:75:92:23:c4:d2:97:90:30:d4:6b:60:18:
bd:cc:a7:73:c6:52:6e:d0:9a:71:97:c3:fd:36:1e:
42:eb:35:af:4f:1f:c3:ed:47:54:61:22:aa:a5:0a:
c7:34:f2:22:b8:6d:80:cd:81:1b:1c:a9:ce:4e:dc:
3d:19:00:1a:eb:0e:70:43:98:d6:6b:0a:8a:08:40:
ca:f8:9b:e3:a9:72:ed:c9:eb:92:a4:76:bf:4c:3e:
50:78:03:70:c3:ec:d7:ff:17:0e:6e:1b:04:1a:38:
35:0d:d1:4c:71:9b:08:39:95:83:80:11:41:6b:1b:
2a:29:83:ff:56:be:1e:38:c4:b5:47:ee:a2:10:5c:
09:e3:4f:fc:00:d4:a1:ce:96:ef:0c:af:13:c0:e4:
53:03:61:e1:f7:8b:b5:7c:32:70:e9:66:42:e7:fb:
b6:d4:2b:81:c5:8a:4b:80:42:b4:bc:61:ac:e6:36:
dc:cb:94:d6:26:7f:75:12:4a:98:8b:1f:87:4c:72:
cd:93:1f:5d:0e:4a:d0:41:40:cf:44:26:67:70:be:
5d:8f:46:84:59:50:96:30:49:ab:40:97:89:c5:0e:
f8:27:f5:f6:9a:a3:e8:40:1c:dc:9e:8f:8d:84:1a:
c0:53:c1:80:d8:25:15:91:d2:ab:15:9d:ff:d9:84:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DF:8F:A2:9F:5B:50:42:A7:E6:4E:7E:7A:7F:B5:B4:75:5B:43:56
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5a:9a:3e:b6:42:34:af:14:c6:0c:1d:47:f1:9e:0c:40:1d:
df:b7:6f:89:fd:03:f7:8e:0e:91:9d:58:6b:07:9e:88:bb:5a:
50:46:2a:c2:a5:61:41:48:57:95:a6:ce:66:96:7f:46:1c:f4:
53:a9:79:67:d4:ce:67:ea:dc:62:6b:1f:6c:9c:32:26:6c:8f:
94:2c:6a:8f:3d:41:38:6f:0d:59:a1:c0:cf:e0:39:6d:0f:03:
e9:e8:7e:07:a6:c4:49:45:c5:94:c2:29:04:cd:8d:2d:90:5c:
f1:07:59:61:2a:30:34:c1:76:ee:89:3f:e6:83:d1:f2:18:e8:
d9:e8:7f:6d:bd:33:81:a9:26:08:ee:da:a3:79:4b:1a:1b:d5:
24:16:f8:87:79:2f:b6:c4:57:84:e5:9a:31:5b:06:d3:e1:f2:
5e:e1:8e:35:48:88:84:55:d3:b1:6d:fb:5c:74:72:74:66:6d:
4f:8b:b6:b2:b9:6c:f8:5f:4d:6d:10:56:8b:b6:93:d4:7b:e4:
ee:d6:c6:e5:26:30:97:f4:cd:c8:0b:18:89:21:03:e9:bf:3c:
09:00:0a:13:06:ee:c3:d4:6b:13:3e:e0:c0:a9:c4:7b:30:bf:
03:ee:ff:61:0a:bf:97:f1:3c:5f:f0:18:7e:34:ef:5c:4f:62:
81:84:53:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UqfSoTkii3io9BBhR4YBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNjBiOTY2NzA4OTNmYzNkNjM3MWY2YzU3NDZjNWYyNmI2
YTIwM2QwHhcNMjYwMzI5MDIwMDU2WhcNMjYwMzMwMDIwMDU2WjAzMTEwLwYDVQQD
EyhiOGRmOGZhMjlmNWI1MDQyYTdlNjRlN2U3YTdmYjViNDc1NWI0MzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41V1kiPE0peQMNRrYBi9zKdzxlJu
0Jpxl8P9Nh5C6zWvTx/D7UdUYSKqpQrHNPIiuG2AzYEbHKnOTtw9GQAa6w5wQ5jW
awqKCEDK+JvjqXLtyeuSpHa/TD5QeANww+zX/xcObhsEGjg1DdFMcZsIOZWDgBFB
axsqKYP/Vr4eOMS1R+6iEFwJ40/8ANShzpbvDK8TwORTA2Hh94u1fDJw6WZC5/u2
1CuBxYpLgEK0vGGs5jbcy5TWJn91EkqYix+HTHLNkx9dDkrQQUDPRCZncL5dj0aE
WVCWMEmrQJeJxQ74J/X2mqPoQBzcno+NhBrAU8GA2CUVkdKrFZ3/2YTSQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjfj6KfW1BCp+ZOfnp/tbR1W0NWMB8GA1UdIwQY
MBaAFBpguWZwiT/D1jcfbFdGxfJraiA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjkt
NmE2MTM5NGY2MjY5LzEvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjktNmE2MTM5NGY2MjY5
LzEvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflqaPrZC
NK8UxgwdR/GeDEAd37dvif0D944OkZ1YaweeiLtaUEYqwqVhQUhXlabOZpZ/Rhz0
U6l5Z9TOZ+rcYmsfbJwyJmyPlCxqjz1BOG8NWaHAz+A5bQ8D6eh+B6bESUXFlMIp
BM2NLZBc8QdZYSowNMF27ok/5oPR8hjo2eh/bb0zgakmCO7ao3lLGhvVJBb4h3kv
tsRXhOWaMVsG0+HyXuGONUiIhFXTsW37XHRydGZtT4u2srls+F9NbRBWi7aT1Hvk
7tbG5SYwl/TNyAsYiSED6b88CQAKEwbuw9RrEz7gwKnEezC/A+7/YQq/l/E8X/AY
fjTvXE9igYRTBw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:45 2026 by rpki-client