Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
File: GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json)
Hash identifier: xtj02Bt6vYRWu5zHTNvqSbJ4qF6WviGHe5buqdoFxU8=
Subject key identifier: EA:5D:8D:19:81:8E:E7:13:06:F2:57:35:90:5C:3A:01:D4:84:44:3E
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Certificate issuer: /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial: 01A1279E1BCF7F1DB2B6D4823CDAA699DE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
Manifest number: 1A9C
Signing time: Sat 10 Oct 2026 21:00:35 +0000
Manifest this update: Sat 10 Oct 2026 21:00:35 +0000
Manifest next update: Sun 11 Oct 2026 21:00:35 +0000
Files and hashes: 1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: c23oEvoffxwql4LnDWCclUjE9Ju/rjhvjM7M4KoB3Jg=)
2: bKXgGvwUcZq1b-BeaoItS6otSlo.roa (hash: PDK23D7wtUzyyScY6vF+EO4aImIoOx+/JSHwWylCCQM=)
3: xyvm0YxS6IqKrvF4Ilx5NStC9dY.roa (hash: +/wn7ZC0EOVgIlsUt9PZ6BtD5t6jlIZ56I0cWiXqnWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:9e:1b:cf:7f:1d:b2:b6:d4:82:3c:da:a6:99:de:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Validity
Not Before: Oct 10 21:00:35 2026 GMT
Not After : Oct 11 21:00:35 2026 GMT
Subject: CN=ea5d8d19818ee71306f25735905c3a01d484443e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:96:f2:ab:cb:bf:1d:22:b3:fa:80:49:39:
dc:27:8d:33:97:ce:a7:f8:eb:23:fa:e0:e3:27:b1:
e5:58:10:2e:34:01:1d:4e:37:b3:30:8c:cf:ab:bc:
67:06:5d:59:22:2b:9a:da:38:b2:bf:81:4f:f2:83:
9b:11:10:57:fd:b4:3e:ec:13:73:cc:29:ca:14:35:
31:13:8c:8e:27:e6:6b:e8:bd:96:79:24:ff:3c:f1:
96:9b:bf:7c:95:c3:d0:77:20:6e:27:8e:41:a0:e2:
2a:ac:1a:dc:fe:62:08:ea:80:1e:f5:9f:ea:59:de:
8c:f9:31:c7:f5:09:87:02:b8:7a:ce:d7:65:d2:c1:
8b:07:16:02:47:50:08:02:a3:9d:36:00:37:06:0c:
bb:a3:c2:f5:da:c8:26:1f:32:53:63:8a:0b:04:e4:
76:81:02:37:72:a0:68:35:5f:34:22:98:ea:f1:ef:
b7:0e:0b:df:7e:33:cb:b6:8b:75:08:3c:71:07:9c:
80:fc:b9:91:00:c9:4d:40:14:ae:bb:09:4c:b9:20:
c4:de:f8:4d:eb:58:cf:77:b2:81:51:e1:25:f2:db:
87:a9:0a:69:85:5c:0c:ad:13:80:7a:10:71:42:0d:
72:5a:be:59:8a:5b:55:f4:30:0c:27:33:0c:b8:b9:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5D:8D:19:81:8E:E7:13:06:F2:57:35:90:5C:3A:01:D4:84:44:3E
X509v3 Authority Key Identifier:
keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9a:d8:d2:02:d6:a4:b0:40:52:99:dd:fb:49:57:03:04:21:
00:44:c2:b3:ca:72:56:79:69:6c:9b:4f:9d:f5:aa:bc:05:dc:
5d:80:fb:d2:5a:50:1c:bd:fc:42:fb:e9:21:13:71:e7:29:a1:
25:d2:65:1d:1c:a3:fb:e8:e7:5d:b0:e5:ba:cc:83:bc:7e:ad:
db:9a:14:a5:17:2c:ef:2b:6d:f0:92:ef:4f:5f:e6:2e:6a:d7:
de:4d:4a:64:15:60:2e:d8:28:0d:46:d9:00:c9:60:90:34:30:
ed:1c:f8:d0:0a:da:9a:9e:ee:43:31:64:0b:ad:13:d6:c9:35:
20:b5:c6:52:cf:02:17:29:32:5f:b0:5b:cd:9e:93:29:d5:64:
15:92:6a:57:15:a8:e7:eb:50:54:d3:8c:0c:15:8a:85:ab:32:
b3:2a:23:9e:1b:08:5a:be:2a:2d:87:4c:4a:3d:b3:32:c7:9c:
b6:95:76:8c:db:e0:34:db:9d:97:93:72:58:55:8a:95:fb:2e:
d3:2d:ae:24:73:8f:2a:b1:41:29:22:26:0e:4a:f3:09:89:2b:
62:4b:7c:69:c0:ae:43:c6:47:e4:ae:07:02:21:98:ee:4b:c0:
75:c4:b8:8b:ce:92:2e:a6:9f:4b:2c:55:9b:cc:c6:07:8f:0b:
91:f8:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:40:18 2026 by rpki-client