Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: PF7kq7VG5/j2yHT4m3quC8koD1AOjqN8hyTR3dKihJw=
Subject key identifier: 63:1D:B7:54:6B:52:09:95:D4:29:A4:28:DF:81:73:85:66:25:48:93
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 019E1D2286B9B8BDDEFF3BF51CB5E9B8558F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0BF1
Signing time: Tue 12 May 2026 17:01:02 +0000
Manifest this update: Tue 12 May 2026 17:01:02 +0000
Manifest next update: Wed 13 May 2026 17:01:02 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: 7SOWQzqpbLzYKD2nl0SGDk0PqM1VoBvVP8DpJPQd0i0=)
2: dligzRRVoWtfjy4qlRdbw7o42uM.roa (hash: 2ujZTExymeWh5nps9OWeUYEciPPWZb859+jQp6T2I7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:86:b9:b8:bd:de:ff:3b:f5:1c:b5:e9:b8:55:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: May 12 17:01:02 2026 GMT
Not After : May 13 17:01:02 2026 GMT
Subject: CN=631db7546b520995d429a428df81738566254893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:d9:44:d2:b3:e2:f7:b2:e0:e6:4f:30:5e:
0f:90:f2:bc:3b:7f:fb:20:25:8d:e6:1a:e0:ee:92:
ca:79:3d:e5:35:f2:84:3f:13:51:f4:d3:80:4e:02:
9d:85:cb:d8:e5:f0:e4:11:b4:46:f8:17:5d:a9:05:
73:ea:11:70:69:6a:6b:f2:2f:44:d2:82:aa:66:c2:
e6:b6:d5:e5:bc:55:73:eb:bd:16:c2:ef:af:e5:31:
35:7b:c2:68:6c:56:6f:fb:a3:f8:aa:bc:8d:06:8e:
23:47:b9:a2:87:e0:9c:aa:e3:30:db:ff:13:82:67:
87:54:8d:7b:47:b5:22:18:99:bf:a6:76:0f:c2:b5:
31:12:37:26:8f:a3:29:2b:b7:9e:7f:95:03:b6:d2:
57:4b:9c:41:c4:04:80:2f:55:43:8e:f5:a8:06:f2:
4e:b3:e0:a9:78:aa:e6:84:2e:66:6f:c4:e1:0c:9e:
88:87:f5:2f:57:2d:04:1f:ca:fa:80:30:8b:96:c0:
66:95:85:32:f5:0d:94:96:f3:de:7d:45:df:c1:67:
8e:13:00:62:b4:17:50:2b:d1:e6:aa:7c:d5:a2:1b:
1c:f1:0c:c7:93:c0:55:24:ab:ad:4b:f1:ed:67:02:
4c:28:61:90:a8:96:0d:57:cf:73:04:2d:28:51:bc:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1D:B7:54:6B:52:09:95:D4:29:A4:28:DF:81:73:85:66:25:48:93
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:89:84:7b:48:00:04:c2:17:9f:cf:05:9c:6a:13:27:fb:9b:
72:85:36:e0:81:67:3c:95:05:02:00:48:f8:c7:3f:4c:16:8d:
c2:5b:5e:6a:80:12:43:9d:4d:2e:60:98:de:ed:e6:78:96:bf:
d8:09:e7:0a:74:dd:dd:62:aa:46:9b:1a:33:13:25:9b:16:6a:
f7:5c:45:de:d9:5e:90:e0:ba:e3:4c:6c:60:27:3a:22:c4:b7:
9e:15:c4:f8:1c:c0:39:b3:dc:2f:52:da:7b:f9:c4:82:db:8a:
62:49:22:f4:b6:b2:03:c4:4a:6b:a7:05:fa:aa:25:32:52:b1:
61:63:40:b9:b2:fe:64:f6:15:64:f5:f3:0a:28:f8:e8:ee:9a:
78:f4:d0:af:09:b2:a0:4d:ff:54:f7:71:76:53:e0:e5:45:79:
d2:12:b8:ad:04:8e:ba:7b:6b:f1:10:a7:7a:f4:f0:f8:43:47:
3f:b5:21:d0:b2:81:dd:3e:a4:d8:b6:bb:93:48:12:e3:f4:9a:
46:bc:57:7b:be:55:e9:d7:d1:fd:66:ef:31:e3:b7:f2:49:57:
f9:08:89:31:a7:be:8f:d1:f0:83:95:9b:91:d1:bc:43:20:0e:
7e:82:f7:e4:7e:a8:0b:52:db:9b:98:88:39:9e:f3:50:d1:dc:
4c:e2:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:12 2026 by rpki-client