Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: SxTNuUrI/6fVqjGVMcXVZfsbrWukT4Xw4LsUMRprHUQ=
Subject key identifier: CB:AE:B0:9D:17:98:BF:71:48:49:91:F9:2B:16:36:E7:27:2E:BA:18
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 01A18307CEF591CE303B18B2120857574AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 15:01:29 +0000
Manifest this update: Wed 28 Oct 2026 15:01:29 +0000
Manifest next update: Thu 29 Oct 2026 15:01:29 +0000
Files and hashes: 1: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: gAjcTv9nVU/mlu0IH+Pk/mmPdCCq1fMqU5SWaer30P8=)
2: NYfYWYZMa_439o1QRYF0WdRM5MM.roa (hash: 8UO+Z6kVQhD/teXdacx0W8x4zMZ5SdEkPaLtrfrmHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:ce:f5:91:ce:30:3b:18:b2:12:08:57:57:4a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Oct 28 15:01:29 2026 GMT
Not After : Oct 29 15:01:29 2026 GMT
Subject: CN=cbaeb09d1798bf71484991f92b1636e7272eba18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:fa:76:25:92:d9:2a:b0:3a:16:f6:64:9e:
9d:64:a6:f7:c1:f6:ce:ae:13:c5:64:68:9e:9e:4d:
81:cd:95:84:aa:28:24:d7:f9:db:f2:f7:c2:c6:14:
4d:58:c7:78:dc:49:c7:e1:d8:e2:56:fb:b2:28:6d:
dd:a6:b5:ba:71:2d:a2:32:0a:65:bb:5d:02:0e:4e:
4a:81:de:6d:76:de:ea:86:88:89:d3:ae:6c:c7:0e:
7a:63:e6:0d:14:ab:59:16:2e:be:b9:8e:78:6a:dd:
9b:1c:32:5c:9e:4a:d6:9d:4b:64:3a:71:1b:dd:cb:
3a:86:cd:59:a3:b1:0e:bd:8d:8c:55:ab:19:91:fd:
9e:f9:57:12:e0:4b:5a:45:0d:b3:f3:52:05:65:f1:
82:b3:65:76:ae:94:08:92:63:16:5d:5a:7e:cd:d8:
35:f2:9b:33:0f:c8:c7:ac:a4:51:e1:20:c8:32:da:
dd:cc:b5:c5:e7:a9:ca:bf:2a:61:29:e3:91:c1:c1:
17:3a:64:38:c8:85:e8:ef:42:36:c4:00:8c:e4:30:
37:50:ad:67:1e:39:b1:b6:58:07:e3:ae:f7:d8:ce:
b9:48:74:5b:c2:75:57:c2:df:bf:74:5a:cc:fd:4d:
86:00:24:05:25:9d:90:85:6e:ac:61:a8:2f:97:88:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AE:B0:9D:17:98:BF:71:48:49:91:F9:2B:16:36:E7:27:2E:BA:18
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:57:9d:53:05:8c:a5:5a:35:90:b9:2b:91:f3:2b:97:db:fc:
1a:34:c1:fb:1a:c8:df:b4:38:35:e4:d9:8d:38:e0:29:d4:59:
62:53:6e:5a:09:e2:db:05:89:db:c1:28:5a:d3:fc:dc:92:d8:
b9:22:33:6c:e8:d0:10:0b:fc:b7:90:dd:1b:14:56:f4:a6:11:
be:2a:c8:3d:e5:75:c2:53:15:7d:52:e4:52:b1:a1:88:07:ff:
53:09:1c:9d:5d:fe:51:53:98:f0:01:07:07:b6:2e:fe:de:eb:
57:93:36:05:d5:86:79:b3:15:1f:bc:32:1e:7d:93:d0:39:2d:
5f:c1:53:87:cd:35:29:68:1b:e2:7f:b1:14:7e:4f:b9:c5:17:
d1:4b:92:ce:51:5c:99:2d:af:51:f9:b4:0c:62:9d:e3:75:29:
92:eb:80:8c:b4:e6:1b:eb:8b:3f:ac:b9:f2:32:4e:de:e5:9c:
1d:6a:c7:f2:72:15:52:e6:0b:ae:c3:0f:8a:9c:0f:f7:ec:0b:
89:60:fd:71:99:fd:90:c1:6f:da:19:30:a2:e8:98:1e:5a:7d:
a1:42:47:54:af:b6:18:8a:f3:f6:5b:b4:e5:f4:aa:01:ed:3e:
fb:c8:f3:fa:25:49:f1:13:0f:0e:8b:86:1c:7b:2f:31:82:4b:
6b:14:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:16 2026 by rpki-client