Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File: Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier: SMv2CNt+PEhG2VuTzXv4ut3G38PUwtuFYhbUR16fRx4=
Subject key identifier: 9D:77:00:E4:EB:ED:CB:A1:17:8E:DA:AD:F7:F1:67:67:D7:DF:FD:B7
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer: /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial: 01A17F9864CA80C31F0C7C0B79745DDA5B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number: 1A58
Signing time: Tue 27 Oct 2026 23:00:56 +0000
Manifest this update: Tue 27 Oct 2026 23:00:56 +0000
Manifest next update: Wed 28 Oct 2026 23:00:56 +0000
Files and hashes: 1: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: /2GY/OLIevJse37Mm5tUb+9+osfchuKbd+pRCsbBWns=)
2: ZohyHfqFv67z4908u3_QeIT8zVw.roa (hash: F/BjQl+7N2tQfUywKhEzc2DzriEJ3gerXgEGzUTdIDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:64:ca:80:c3:1f:0c:7c:0b:79:74:5d:da:5b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
Validity
Not Before: Oct 27 23:00:56 2026 GMT
Not After : Oct 28 23:00:56 2026 GMT
Subject: CN=9d7700e4ebedcba1178edaadf7f16767d7dffdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:04:12:8b:38:2b:29:90:47:f2:8b:d0:43:
e8:91:6a:3a:49:78:a6:2c:4a:01:a2:c3:78:c3:17:
53:3d:a6:d3:48:d2:67:fb:0f:a1:5c:67:8b:25:06:
d6:a2:1d:53:d2:f1:ac:94:db:5f:2a:7d:34:34:3f:
fa:77:d0:d5:1b:36:ad:87:b3:02:37:97:83:e5:27:
40:17:3e:78:b4:3e:a1:37:fa:4b:83:4f:00:3a:c5:
df:c6:7d:8c:cd:c1:cd:45:37:90:d5:5f:44:73:94:
ab:fc:01:29:b3:e0:56:05:7c:b1:90:e9:7a:0d:90:
0f:77:94:bd:c4:f0:6e:43:24:14:a8:73:5e:73:52:
cc:61:7b:61:f5:e4:61:d9:80:14:34:5f:2f:a7:34:
a3:01:c8:72:b8:28:75:60:a1:24:5c:ed:68:1f:a7:
c4:6d:60:89:93:73:7a:ef:2f:47:3c:24:26:27:e0:
4d:d1:c3:2b:8a:61:38:2f:98:a3:db:74:6e:14:a8:
2d:49:82:45:33:ac:67:c6:c7:cb:29:db:81:8a:80:
67:05:12:9c:91:fb:11:b1:a2:0e:75:ff:8d:f5:97:
92:bf:4d:91:23:eb:de:7c:b4:95:0b:c8:62:e9:74:
c6:63:12:78:cf:31:56:fa:82:c2:39:1c:70:e9:98:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:77:00:E4:EB:ED:CB:A1:17:8E:DA:AD:F7:F1:67:67:D7:DF:FD:B7
X509v3 Authority Key Identifier:
keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f2:2a:ac:ad:f4:fa:5b:b5:7c:d8:b0:e5:56:fd:63:02:19:
9d:6e:22:ac:a0:a3:1d:1e:3a:c1:35:e6:6d:ea:c1:1d:10:0e:
37:e4:98:d6:f7:d9:d4:e8:5b:02:f9:5e:5d:2a:04:1b:7e:09:
41:86:06:d3:95:60:9a:f0:42:26:2e:3f:c4:71:9a:ec:0a:29:
95:06:19:be:86:ec:f8:be:8e:62:e5:99:37:15:57:9a:96:96:
38:5f:8c:e7:d4:cf:31:45:4a:12:12:e9:85:40:34:75:d3:62:
00:0d:cb:0e:4a:7e:43:62:d8:5e:0f:d1:7e:73:53:dd:e1:97:
3c:59:06:f9:ef:fa:48:81:48:c6:87:69:0a:b4:3d:1e:6c:df:
35:3f:b7:07:a4:04:8b:9c:47:c4:28:53:b4:0e:35:ab:9e:1c:
92:f7:88:95:15:d4:73:43:83:b7:bd:e6:7f:32:2c:0d:60:71:
a2:8b:b7:d8:09:cb:dc:c2:6c:0e:2d:2d:21:d7:bf:ce:4d:9f:
d5:80:1e:83:87:ec:f1:cb:92:17:65:5a:9b:69:6c:61:46:3c:
28:b3:a8:af:1b:55:cd:c3:9d:37:3e:71:86:bb:b4:6a:5b:59:
fa:a5:cb:f9:cf:a5:21:4e:5f:39:7f:29:f6:37:e5:2f:a5:97:
0f:c0:36:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:27:20 2026 by rpki-client