Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: gxz8NxHliNf71srKYAbLOqwOkBpv3uSJ8bYgrPhriBI=
Subject key identifier: 55:75:52:0C:D2:0B:DC:87:15:B6:E9:66:30:CF:D1:20:8F:7F:92:BA
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 01A1822C3C3845A6E701D5648C32C48E360B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 17C5
Signing time: Wed 28 Oct 2026 11:01:39 +0000
Manifest this update: Wed 28 Oct 2026 11:01:39 +0000
Manifest next update: Thu 29 Oct 2026 11:01:39 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: gDynT5hhuR7buf+n0CS5Rd/p89M+CePwpP33qosOPFI=)
2: fXd2qSqxEZOV3cRcZOHurquaaX0.roa (hash: NECx1b/w4K5wTYVhS/vbFQNkkaTK5gq/qEzzHsYYuUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2c:3c:38:45:a6:e7:01:d5:64:8c:32:c4:8e:36:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Oct 28 11:01:39 2026 GMT
Not After : Oct 29 11:01:39 2026 GMT
Subject: CN=5575520cd20bdc8715b6e96630cfd1208f7f92ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:9f:a3:59:f6:80:e5:ac:bb:c2:ba:21:1b:
b4:90:1a:58:bb:92:6f:04:05:68:0b:cd:f1:14:33:
53:5d:70:6e:22:87:ae:fe:20:7b:f3:97:00:11:f3:
23:07:ac:c0:ec:fe:69:b5:f2:e6:aa:86:70:59:6e:
9f:6b:6e:2d:c5:38:91:a0:30:03:83:42:6a:4a:71:
32:4c:34:06:95:30:e9:ed:ca:18:77:78:d3:fc:23:
81:b1:93:58:a7:87:8a:d5:ab:2e:47:d6:be:dd:b2:
9b:c4:db:b0:2e:7f:3c:0e:bd:e1:0e:ea:b6:16:e8:
98:f7:1a:15:f6:7b:00:6b:42:98:0c:67:bb:0b:22:
f0:ea:92:c6:59:c5:77:3f:a7:93:b2:03:67:93:5f:
31:4a:d9:00:97:35:08:7a:b7:e0:82:ea:7a:d6:f3:
1c:0c:d7:e4:19:d4:a2:a7:e8:eb:10:f0:b7:ce:60:
7b:1b:be:a5:d4:d5:4a:9d:e4:29:a4:f4:b7:3c:7a:
15:2c:a5:3a:4c:6c:16:1a:74:4d:bd:b5:ed:89:82:
91:20:89:3f:a9:8c:1d:fb:a5:09:41:79:c5:da:9d:
a1:0d:a2:8f:1a:4d:6c:fc:d6:92:fe:7c:26:0a:49:
4a:21:48:25:56:f5:a2:2b:e9:90:3c:85:73:b6:88:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:75:52:0C:D2:0B:DC:87:15:B6:E9:66:30:CF:D1:20:8F:7F:92:BA
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:39:db:1f:85:05:e7:10:f2:81:9c:dc:99:ac:32:e6:ba:e0:
43:53:dd:3a:85:83:8c:b4:63:7b:6b:2c:99:91:53:54:7b:68:
d0:ed:64:88:89:3e:48:45:7c:84:63:55:20:1a:5a:5b:7f:f3:
46:f7:a8:63:17:79:ec:9a:cd:eb:dd:a1:0b:ac:aa:2a:fa:1a:
14:4c:7a:0b:b4:c4:7e:65:8b:13:e1:ef:b1:76:2e:84:16:8b:
48:39:1c:8a:26:ac:1c:7f:5e:46:7d:7a:6c:59:fd:8c:e5:ff:
8d:e6:9d:1e:f4:66:8b:8e:37:77:2f:5e:3e:a0:6e:b4:10:87:
9f:21:15:25:5f:27:70:1b:f9:8b:3f:9d:3d:3c:48:48:37:f6:
1c:1f:6a:71:d4:8b:16:f8:86:6c:0c:c8:87:18:b8:a8:ab:37:
5d:67:20:33:1b:a0:55:c0:fe:29:c9:14:3d:a8:00:68:b6:91:
cd:ce:b5:e9:72:bc:c2:d3:2a:ec:c2:9f:c0:3f:c1:55:7e:e9:
a2:0e:60:fe:dd:fd:74:47:da:ee:3c:d2:f4:e6:9a:b2:2c:fc:
98:57:a6:7e:c0:d7:71:a2:17:0d:87:78:51:1d:50:af:5e:76:
a2:9c:50:67:8f:22:2e:23:08:86:8c:a7:5d:66:d5:11:32:28:
05:2d:ee:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:34:26 2026 by rpki-client