Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: HxxRQkL/el/VW70Uyz4+iFmLytTzgS+SNeCT/hXQTdE=
Subject key identifier: AC:D0:66:50:E7:CE:76:58:E1:AC:91:0D:5D:41:87:82:92:7C:DC:60
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 01A0CAB5760E19696211595226E23BCB1033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0D54
Signing time: Tue 22 Sep 2026 20:01:24 +0000
Manifest this update: Tue 22 Sep 2026 20:01:24 +0000
Manifest next update: Wed 23 Sep 2026 20:01:24 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: C9VE3UcUEwNkq0lgQ1tqHqwYlhsS9/+ki5zvOJvHTAY=)
2: dligzRRVoWtfjy4qlRdbw7o42uM.roa (hash: 2ujZTExymeWh5nps9OWeUYEciPPWZb859+jQp6T2I7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:76:0e:19:69:62:11:59:52:26:e2:3b:cb:10:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Sep 22 20:01:24 2026 GMT
Not After : Sep 23 20:01:24 2026 GMT
Subject: CN=acd06650e7ce7658e1ac910d5d418782927cdc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:c2:10:0c:d0:cf:7c:15:27:20:0e:3c:39:
bf:af:20:d3:34:26:84:58:59:83:e1:b3:d1:ea:f3:
f3:b0:13:f2:2c:c8:00:d5:77:68:c9:21:60:25:b6:
61:37:51:49:cb:35:aa:1a:8a:66:60:b1:fa:16:64:
4d:95:28:b5:a4:a7:b7:fd:5c:81:78:0e:10:84:7e:
bd:28:f4:73:58:2f:e9:e5:8f:08:44:bb:e5:64:62:
01:08:2d:66:af:00:6e:7d:15:c8:98:42:50:06:8c:
e3:3f:55:9d:14:a2:bf:a5:50:5a:cf:b3:03:c6:e9:
68:be:66:64:a7:f2:43:19:56:2f:0b:3a:62:1f:40:
7f:83:88:78:39:24:1e:0a:08:da:0f:01:16:11:e5:
d8:52:59:c6:2b:76:67:18:6b:3c:58:e4:1f:8e:b1:
0f:76:a2:76:af:10:ac:23:e7:a2:2c:c8:ae:b3:e5:
0c:8d:05:dc:0b:a4:1b:53:4d:49:b2:d9:7d:30:3a:
8d:ca:b5:f7:13:08:66:68:31:3a:bb:34:fe:77:d3:
3a:50:1c:b3:8a:11:2f:29:da:33:9b:db:1d:4b:ce:
f6:42:03:68:7e:1d:d9:b7:d6:6b:06:a8:89:d8:88:
12:b6:21:33:3b:4b:cc:5b:e8:b6:6e:a5:fc:4e:5e:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D0:66:50:E7:CE:76:58:E1:AC:91:0D:5D:41:87:82:92:7C:DC:60
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1c:db:1c:6f:50:0b:7a:8e:0f:00:c8:98:70:47:b7:91:d4:
de:11:9d:e4:e5:aa:9c:9f:7a:30:c0:24:e7:6a:45:8b:e8:53:
26:12:a3:b8:be:2c:c4:ac:ae:95:08:62:3a:41:07:5a:64:10:
eb:dd:aa:ae:3b:61:e0:a4:d9:88:18:75:3c:a5:96:d6:b9:57:
91:b1:a3:0c:41:bf:e7:b8:40:7d:fe:b4:5f:0e:6f:03:7f:56:
ab:33:c9:a1:5d:59:8f:14:5a:39:03:0c:58:b2:96:14:f9:54:
ae:dc:22:5b:9a:23:87:ea:a4:96:70:59:49:3c:32:57:bf:31:
46:30:fe:7c:2d:83:34:14:a3:73:c2:b9:d9:c9:48:47:50:bf:
b9:6c:bf:a5:83:35:6c:9d:01:62:d2:e9:8b:b1:ec:97:a4:2b:
63:42:a9:fc:c7:d6:dd:0d:16:47:fc:04:0b:91:5f:16:a2:48:
c4:c8:2e:ef:b5:a0:0e:3f:b3:2f:33:82:bc:92:a4:6d:c1:49:
2e:c2:18:c6:b0:99:02:9e:5e:82:ec:b2:3a:ca:e7:67:67:93:
8e:60:9a:d3:61:e9:cb:01:11:26:bc:d4:26:32:cf:05:b8:60:
c7:ad:02:a1:08:41:30:74:94:cb:49:eb:62:b1:c5:1b:a7:1f:
be:f7:55:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:11:55 2026 by rpki-client