Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: DCeCZWN673Xxrbdt4Rc4ftT6gS1oMDDGU6cfKM4Q7tI=
Subject key identifier: B3:47:02:B6:AB:32:2C:06:86:EE:39:61:8A:CE:76:18:0E:4A:D7:67
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 01A186E38A6DF64608C8F7B25E02944E8609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 052C
Signing time: Thu 29 Oct 2026 09:00:21 +0000
Manifest this update: Thu 29 Oct 2026 09:00:21 +0000
Manifest next update: Fri 30 Oct 2026 09:00:21 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: VngXycR6KngC1UKV83Y1DNRVwIORQAEP9f7aXQfNOQo=)
2: t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa (hash: Gojw7FbJO6oLOCFdJ+IonU5RAeRQTmH3d/fqvSSbRko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:8a:6d:f6:46:08:c8:f7:b2:5e:02:94:4e:86:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Oct 29 09:00:21 2026 GMT
Not After : Oct 30 09:00:21 2026 GMT
Subject: CN=b34702b6ab322c0686ee39618ace76180e4ad767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:65:7a:0e:35:73:80:32:ad:3a:5a:82:13:43:
3a:05:3c:55:7d:1d:46:d1:87:f7:d0:b8:5a:a8:1b:
dc:a2:88:03:0b:f3:35:78:94:b2:58:39:da:65:dc:
2f:6e:ba:4f:15:74:48:ea:a0:5d:8c:07:f7:75:42:
ac:11:8b:a4:2f:35:5f:ce:25:a6:71:9b:c9:3c:2e:
d9:71:f8:db:82:fa:9a:83:26:23:56:38:e0:e3:b6:
e9:a8:27:86:fa:9f:01:3d:f8:3a:cc:6e:e1:f6:30:
e1:26:6a:e7:67:64:15:57:db:5c:38:54:8f:1f:46:
3a:a2:e4:97:33:3d:6c:51:6b:48:17:fb:f7:cc:7c:
d5:dd:89:b5:ea:98:81:7e:e9:52:63:c5:87:17:c5:
eb:0c:90:d4:50:3a:63:96:22:ec:93:e6:47:d7:dd:
52:13:4a:38:7d:c6:f5:bb:39:6d:c9:a2:2d:59:15:
56:17:d6:84:5e:5f:4f:ae:9a:c5:97:4f:0d:24:d3:
31:6a:11:8e:f5:da:60:69:23:3b:6e:e9:7b:54:e2:
6b:fe:84:74:0b:b2:ba:8a:76:47:60:fc:8f:5d:4c:
ef:00:2c:44:00:fd:a3:a2:bf:be:ac:5a:28:be:66:
e5:68:00:0d:a5:a4:9b:71:ae:ff:a8:e1:01:7f:e5:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:47:02:B6:AB:32:2C:06:86:EE:39:61:8A:CE:76:18:0E:4A:D7:67
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:62:38:c3:4c:00:7c:9d:11:c3:29:7d:f4:a8:7d:88:60:88:
07:0c:fc:22:07:27:43:af:5d:67:51:a5:06:2e:94:2f:d8:ed:
6c:a3:8d:d1:af:bf:df:39:0e:be:e8:c9:87:18:a4:35:5c:22:
34:2d:cf:0a:a7:21:44:c6:1b:38:86:00:a8:e7:ab:88:10:90:
30:9e:6a:82:52:e9:d3:d8:69:fd:13:a8:53:fd:f5:0e:cc:6d:
60:b7:37:84:4b:5e:cf:4e:1b:f1:3a:1a:c7:16:ce:7c:9b:e3:
31:55:b2:c2:08:67:50:0b:10:7b:b5:b7:f7:ef:7c:b6:ec:12:
d8:fb:83:57:4e:7d:cd:1f:6c:11:7c:0c:1a:7c:a6:be:10:01:
95:fb:34:0c:e1:44:fd:45:31:35:78:15:64:84:73:13:fa:66:
5b:4f:ac:69:d6:b0:f7:4a:8f:fb:1a:e2:46:10:f5:b3:60:9b:
27:3f:ff:85:ad:e3:fc:a9:1b:da:81:98:75:60:90:26:eb:f0:
da:9d:23:15:c6:8d:fb:1c:a1:aa:28:17:11:76:e6:cc:b2:51:
c7:ea:6c:52:17:92:1b:ba:bb:dd:b6:a7:0b:9e:5b:af:30:19:
ee:4e:8c:fe:8f:3b:d5:3c:08:e1:73:57:f8:75:d2:4a:6f:e8:
a9:e6:83:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:08:21 2026 by rpki-client