Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: khAEUhXOufG6ik5Fj62fgn+rd2RYsw+m2vZP1YOabDo=
Subject key identifier: EB:23:BA:84:07:73:86:06:5B:B2:43:A9:E2:1A:F6:E2:8F:51:CF:9D
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 01A1811989BE2E73619CC9DF8FE22C785A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 06:01:36 +0000
Manifest this update: Wed 28 Oct 2026 06:01:36 +0000
Manifest next update: Thu 29 Oct 2026 06:01:36 +0000
Files and hashes: 1: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: mzm4/BNcS7nMzfIQ9RHfhUPpLp6qAA5jI/YjPwsFIgs=)
2: NYfYWYZMa_439o1QRYF0WdRM5MM.roa (hash: 8UO+Z6kVQhD/teXdacx0W8x4zMZ5SdEkPaLtrfrmHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:89:be:2e:73:61:9c:c9:df:8f:e2:2c:78:5a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Oct 28 06:01:36 2026 GMT
Not After : Oct 29 06:01:36 2026 GMT
Subject: CN=eb23ba84077386065bb243a9e21af6e28f51cf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:50:23:d1:6e:ac:ea:7e:03:6d:7a:61:ef:
44:67:7e:47:5f:65:62:d0:d8:67:6a:3b:06:58:6e:
77:56:69:b8:ec:54:58:2b:48:d8:1d:97:e5:6d:d6:
2a:eb:b9:ba:13:95:b5:4c:3c:66:d7:4e:01:3a:a3:
6a:e8:df:62:79:dd:6e:ae:90:6c:d1:ee:e0:49:99:
ef:f0:3b:da:48:12:38:99:7a:a6:f5:1a:a3:df:e6:
ea:0a:96:43:ae:e6:6e:cc:a1:f0:6b:f0:a4:77:42:
5b:6c:14:a5:bb:71:fd:28:a1:e3:3c:63:d1:16:8a:
bc:cf:e9:60:53:fa:97:07:a3:66:cb:98:f2:98:95:
64:87:27:42:31:67:d1:e6:a4:01:7b:e8:8b:7e:4b:
11:98:1d:38:7a:a8:0a:33:67:8e:fd:c0:3e:cc:ee:
32:c5:90:ed:05:cf:43:28:96:32:fc:1a:00:21:95:
f7:f5:b8:91:19:c8:d2:63:6b:0f:b3:1f:cd:45:74:
ab:fb:97:6d:45:3a:24:7c:1c:56:24:92:75:27:48:
cb:89:92:62:c4:42:27:12:75:56:75:ab:37:cc:4f:
e5:8a:f5:d6:da:72:1d:7f:0f:c5:01:c4:c3:9f:9f:
d3:99:ae:49:d8:71:32:ea:f9:81:81:30:5e:19:34:
6b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:23:BA:84:07:73:86:06:5B:B2:43:A9:E2:1A:F6:E2:8F:51:CF:9D
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:95:ab:ba:f6:c3:99:71:0b:52:07:72:2b:03:e2:9a:03:aa:
56:30:7a:30:69:db:3c:5f:1d:55:ee:28:af:4a:95:83:ea:cf:
c8:e2:3d:39:09:d9:0d:ef:53:62:f0:a8:ac:61:2f:ce:7a:f0:
21:6b:41:42:2c:5a:c6:a5:cc:33:c9:6e:28:15:96:a1:33:6e:
d9:09:6c:d4:74:ee:3f:be:4a:81:13:0e:92:dd:9d:87:30:90:
ec:13:a5:46:e2:3d:21:5d:d3:b8:d2:ed:70:23:71:26:4d:89:
90:14:57:11:18:e2:46:ee:57:d8:67:5a:e1:18:b1:39:90:89:
ee:9d:4b:6f:90:6d:7a:77:fa:5c:c0:02:15:7c:ae:b4:69:d8:
b1:83:2e:a6:ee:4e:81:da:bf:69:c5:9e:84:40:65:42:f9:34:
b6:5e:16:07:7f:8d:fe:41:43:c2:7a:49:da:93:ec:7e:be:38:
c0:5e:d5:9b:e8:d1:28:51:2e:6f:3b:cc:84:5e:3b:7c:ef:98:
ce:8f:53:8a:50:37:75:2f:d7:76:11:d3:a3:b3:e7:9e:79:ae:
2f:4e:15:d1:54:ca:40:f7:d5:ab:df:c0:23:33:ba:f3:8c:dd:
46:ca:63:a3:16:e6:f5:e4:ae:2c:3f:70:39:b7:c0:a4:89:09:
81:80:37:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:23:40 2026 by rpki-client