Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: D4ic82Mf/hpEFBKbUruQ1F+zcRZfHWncb/XRbcMgAew=
Subject key identifier: E6:AC:16:2F:83:FE:4E:9E:6C:B6:C7:1B:18:66:A4:9B:F2:81:B2:AA
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 019F8FEC2DB7FC1F3FEF60AFF0A1C95B6BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0CB1
Signing time: Thu 23 Jul 2026 17:00:47 +0000
Manifest this update: Thu 23 Jul 2026 17:00:47 +0000
Manifest next update: Fri 24 Jul 2026 17:00:47 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: HaEdUYxPd8WfnVZs+jwZI3fNEWTv5R4cGQEJ9jsC5F8=)
2: dligzRRVoWtfjy4qlRdbw7o42uM.roa (hash: 2ujZTExymeWh5nps9OWeUYEciPPWZb859+jQp6T2I7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:2d:b7:fc:1f:3f:ef:60:af:f0:a1:c9:5b:6b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Jul 23 17:00:47 2026 GMT
Not After : Jul 24 17:00:47 2026 GMT
Subject: CN=e6ac162f83fe4e9e6cb6c71b1866a49bf281b2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:f7:d0:73:fe:fd:5f:e2:67:92:31:31:b6:
bc:45:08:eb:c8:20:c9:2d:be:2e:3b:51:f3:74:cc:
b0:57:b3:b2:87:18:4b:e6:cf:9c:af:d3:89:51:bb:
50:11:37:5b:17:da:3c:21:09:36:8d:ad:41:50:1a:
7e:ca:ba:8b:86:77:6b:8d:d3:c0:ba:5b:20:99:b9:
29:1d:44:90:48:3b:95:8e:2e:8b:33:25:dc:df:c0:
e7:b2:47:aa:c5:9a:29:1b:41:5e:d2:ed:03:0f:01:
16:07:a8:00:1b:45:82:62:cb:26:ee:8c:50:90:06:
06:19:a1:d9:7f:97:4a:4d:3f:6a:17:b7:9c:fb:af:
69:b0:bc:36:a1:c0:56:8d:3d:af:5a:70:61:82:80:
62:0c:e7:a2:89:2c:2a:86:c7:60:d2:3d:bc:8d:d4:
fa:7d:b2:75:61:e9:40:57:91:fd:f3:33:83:4d:51:
57:a5:5b:58:93:69:b6:11:4e:dd:c8:9f:11:cc:b6:
a7:f5:e5:25:b4:0f:d1:3d:92:9c:e9:b8:05:77:de:
dd:c8:27:4d:1b:de:fb:06:3d:4a:12:b1:43:56:28:
8a:69:87:16:ec:f2:41:76:e5:59:b1:c3:15:21:b5:
8f:3d:49:3e:41:25:ea:f2:6c:a7:3c:ee:4e:e5:52:
66:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AC:16:2F:83:FE:4E:9E:6C:B6:C7:1B:18:66:A4:9B:F2:81:B2:AA
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:83:a2:15:2a:f9:66:20:d2:d1:ee:5a:0c:99:5d:12:de:6f:
c3:82:bc:05:f5:a5:25:ec:93:44:28:5e:3c:27:91:a7:cb:89:
11:c3:10:66:ff:33:d8:a7:bb:31:46:6c:5e:19:f5:78:2e:06:
4f:7a:f9:57:4f:ba:8f:e9:0b:3a:32:9e:af:83:2b:61:36:bf:
69:4d:dc:fe:64:f6:e3:68:83:cb:ee:a9:29:a6:35:bd:07:29:
8e:be:f7:9a:5b:e3:70:9f:14:67:00:f7:87:b7:77:44:19:d5:
0a:f3:7b:ff:eb:8e:a5:66:9e:9c:3b:23:b1:08:21:c1:2b:82:
60:f1:5c:65:fe:cb:79:2b:ef:5a:02:d1:31:7e:36:5b:f0:96:
b7:7a:be:31:43:4a:74:e7:e4:f5:38:f8:fb:6c:74:0c:cf:e3:
84:39:47:a4:05:48:23:e5:c2:19:a2:2e:4e:cd:59:df:44:66:
55:4a:60:31:6a:d2:fd:6b:a9:24:c7:a6:eb:da:bc:2e:e0:f4:
97:98:4f:b7:25:cf:fc:72:7a:18:b8:fa:a7:88:d7:33:f8:e7:
ad:91:25:02:93:75:28:1e:48:47:71:16:e5:95:bb:ad:f9:36:
b3:69:b0:a0:bc:6d:42:bc:2f:0d:45:4f:b1:b5:9c:8e:6f:80:
d0:06:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:26 2026 by rpki-client