Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File: GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier: cX6m/vYyQ0GmFOPeIbn9uH6lasNNUBsmZ1f51SkbGWA=
Subject key identifier: 1C:52:E4:DC:45:22:71:F6:12:5D:8F:BE:75:55:AC:35:B4:F6:EA:D5
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer: /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial: 019D37C05E3886308145529E7D08EE82B5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number: 0783
Signing time: Sun 29 Mar 2026 04:00:47 +0000
Manifest this update: Sun 29 Mar 2026 04:00:47 +0000
Manifest next update: Mon 30 Mar 2026 04:00:47 +0000
Files and hashes: 1: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: z+6UEBeKnqjB45SP/e0z9jmBZSaznwf6rFCjzUSgKI0=)
2: nZoO22NOlzzLttq20LfxDoJMdQg.roa (hash: s7xmgKi+9ZabhreTnecVdCUPnnVuLBbgQA+8atVMyO4=)
3: o0mi1ecW1qDQy0JOYUzQEq3UCno.roa (hash: hV2jBoTpFaaL+UTs/7eomqtU5upO4Ya9tPbfPL2XyYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5e:38:86:30:81:45:52:9e:7d:08:ee:82:b5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Validity
Not Before: Mar 29 04:00:47 2026 GMT
Not After : Mar 30 04:00:47 2026 GMT
Subject: CN=1c52e4dc452271f6125d8fbe7555ac35b4f6ead5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:17:ef:d8:dc:85:42:83:97:3e:e9:7c:c8:
a7:f9:d3:5e:93:83:47:29:9d:08:70:be:25:54:cf:
77:aa:62:e5:65:2c:c7:02:c1:28:9b:1c:b1:6f:f6:
65:87:55:fb:dd:22:e9:ae:86:4c:a2:98:db:e0:df:
04:ad:cb:58:ac:a2:71:24:90:6d:2a:98:ae:11:ab:
c0:49:01:36:08:05:7d:68:90:7d:b7:30:9c:27:c7:
e1:d7:6f:53:d1:6e:e4:2a:5f:e3:a5:2e:a0:95:cb:
ed:6c:73:ab:e3:0a:53:f9:35:a3:fc:e5:e9:ca:4b:
a1:6c:75:6c:3a:d8:3f:6b:1b:05:76:fb:24:ae:a8:
de:0c:10:d9:a2:53:52:7e:c8:7c:a7:9b:b3:79:ee:
bb:d5:03:da:73:ad:11:44:14:54:76:94:87:f5:17:
f6:3d:2f:a7:b6:fb:15:36:e5:a4:1a:95:95:86:3c:
9f:ed:0d:6a:c5:ad:0f:3c:58:71:53:6d:68:24:93:
d0:aa:4a:9c:d0:36:6f:70:63:0f:02:65:e4:fe:77:
85:fb:03:3f:a0:d9:35:63:d4:79:82:d7:db:cc:a6:
4c:67:c0:aa:91:c3:89:07:c5:e9:57:bc:9d:7e:7a:
ce:28:0c:ed:35:ec:37:d3:7b:d8:1d:f8:25:23:c0:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:52:E4:DC:45:22:71:F6:12:5D:8F:BE:75:55:AC:35:B4:F6:EA:D5
X509v3 Authority Key Identifier:
keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c6:a1:7e:6d:8d:e9:b0:e9:23:19:97:ca:24:47:69:55:18:
bb:07:ba:a4:99:bf:8f:99:93:5b:c7:06:09:17:55:1d:1e:21:
77:e3:01:0f:6b:0e:79:bc:bc:6a:2a:01:81:48:20:ef:59:24:
3e:02:0b:2d:da:2f:88:d2:f4:dc:87:e3:d1:3f:cb:af:c6:0d:
80:ff:69:b4:c9:b7:17:d2:c4:fc:3c:ac:38:ae:67:e8:8f:8a:
08:9a:b8:da:77:de:c0:08:8f:cc:bd:46:6c:5a:c3:ee:02:27:
9d:8c:53:ec:02:f2:a8:46:cc:8a:1a:d5:a4:ff:3d:b5:53:5b:
f8:ab:ff:b3:17:72:c3:e9:f2:a6:ec:77:36:c0:bc:26:2a:49:
e7:c1:9e:11:be:f8:5a:e1:04:fd:ec:4b:95:2f:f0:12:34:6f:
57:dc:3b:cd:5b:16:f6:77:fe:42:cf:50:ba:80:03:ff:12:49:
26:cb:3b:f3:df:c8:4f:e7:3b:77:aa:aa:2d:91:52:cd:56:c2:
14:92:ef:42:e6:02:4a:15:16:c3:f0:fe:ce:01:0b:cc:a1:f6:
af:f9:15:28:65:e6:2b:12:70:73:07:e6:0a:7b:4b:a4:60:93:
6c:8f:1b:0c:3e:3c:de:79:8f:9e:33:57:c4:96:9b:54:ec:3b:
19:f2:a7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:24 2026 by rpki-client