Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: 5Ztpk9S7u/AQPQNN+2I5hmIGgdJkCQCMbvIgabQAAEs=
Subject key identifier: 02:CB:E7:68:71:D7:15:95:CA:79:19:C3:96:53:6E:5E:B9:21:7E:69
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 019D27DF794AAC22C6CA493866DAEA4D730B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0B72
Signing time: Thu 26 Mar 2026 02:00:50 +0000
Manifest this update: Thu 26 Mar 2026 02:00:50 +0000
Manifest next update: Fri 27 Mar 2026 02:00:50 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: Gtu9VqN1FP9ZrpeaLD+7gL2y7ySGZrUlxtslS4H8Ppg=)
2: dligzRRVoWtfjy4qlRdbw7o42uM.roa (hash: 2ujZTExymeWh5nps9OWeUYEciPPWZb859+jQp6T2I7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:79:4a:ac:22:c6:ca:49:38:66:da:ea:4d:73:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Mar 26 02:00:50 2026 GMT
Not After : Mar 27 02:00:50 2026 GMT
Subject: CN=02cbe76871d71595ca7919c396536e5eb9217e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:89:c3:e8:f9:89:d8:56:83:27:51:97:cd:
63:4a:06:dc:2a:b8:32:bb:40:47:95:38:22:12:b2:
af:eb:b8:69:d9:e3:cd:9b:42:32:46:e1:7f:c7:9f:
6b:1f:ef:1a:f7:6a:c0:bd:e8:dd:03:c8:61:b5:d6:
2f:f3:6a:98:a8:94:16:78:a1:7b:bb:8a:21:54:c5:
f5:d6:6f:e9:3a:1e:8e:cb:b9:a5:d8:65:bb:92:a5:
ba:1a:6c:5f:c9:5a:29:4f:21:95:a9:70:05:83:9f:
9a:0f:e1:65:0b:56:44:32:0b:80:24:52:9f:42:ed:
f1:d1:74:ff:b9:0c:f2:d6:e1:66:d7:f0:d1:6d:cc:
60:ce:a3:da:7d:93:18:2c:d9:d2:59:96:33:e4:89:
36:0a:95:01:66:3b:77:12:6d:9b:a4:0c:3a:95:8a:
c9:86:4d:7b:3a:7f:24:4a:65:ed:99:69:20:2c:d9:
ed:3c:92:de:73:8f:e8:2e:8d:25:fd:98:3c:48:ce:
2e:2c:2c:6c:e3:eb:ad:37:97:6a:ac:94:fb:db:3a:
6e:a6:c4:f5:7e:34:b9:d5:28:7e:02:d3:c7:74:b6:
60:d6:f7:47:da:ca:a3:52:07:49:ef:d0:c2:a2:af:
f2:d2:6a:2e:ae:23:78:a3:72:3c:ab:82:91:9d:f7:
46:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CB:E7:68:71:D7:15:95:CA:79:19:C3:96:53:6E:5E:B9:21:7E:69
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ae:5b:e8:69:90:72:cc:0e:e0:c1:ee:01:0a:fc:61:69:58:
85:66:f5:32:40:2e:8a:77:3f:d7:c8:ef:2e:eb:e0:15:de:6d:
4c:ca:d4:3f:d9:23:43:90:24:29:4c:34:f6:08:ea:1e:0b:77:
34:b6:62:fb:dc:0e:b2:4c:a9:57:7d:45:c6:eb:a6:de:94:c6:
97:47:30:68:59:a3:c3:cb:4e:91:03:47:1f:00:13:d7:cb:3b:
0b:cf:b9:17:7c:0c:2c:6e:8e:20:5b:ac:44:9a:f1:1a:4e:fd:
c9:f1:f1:fe:d4:97:2e:74:13:50:af:51:12:32:fd:55:41:82:
21:5d:aa:52:b4:d0:bb:e9:c8:8c:c0:6a:e5:1f:f1:a5:2b:b5:
4c:fc:fc:d7:ec:7c:78:2e:9a:e3:88:de:88:8a:52:af:11:84:
5a:ff:db:6a:46:df:c3:63:11:fa:68:4b:0e:5a:87:39:d2:e2:
90:fd:08:a8:2e:04:29:5b:af:ee:fd:e9:b3:b6:92:8c:c3:34:
14:d0:a7:10:06:d4:a7:13:2c:72:31:38:48:25:93:e3:a6:34:
8d:31:f8:e0:fb:66:9f:a4:55:1e:27:e2:64:14:a9:2e:36:b5:
3e:9a:01:b8:db:f0:49:59:d9:81:6c:97:e5:97:b3:84:64:eb:
17:fa:c5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:59 2026 by rpki-client