Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
File: 1GbRcMgQujTELpIOhNQmKEWXf4U.mft (raw, json)
Hash identifier: 7NTi702l4wLNAS7TSC+LJ3oxrnAH8UNxZ1TxDI1DYgQ=
Subject key identifier: 40:8D:91:F0:B2:36:5A:B8:75:4A:AC:FE:45:E8:83:F6:AF:21:49:6E
Authority key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
Certificate issuer: /CN=d466d170c810ba34c42e920e84d4262845977f85
Certificate serial: 019F932417CDE360988BDBDFD6D4D6CE39AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
Manifest number: 08DB
Signing time: Fri 24 Jul 2026 08:00:43 +0000
Manifest this update: Fri 24 Jul 2026 08:00:43 +0000
Manifest next update: Sat 25 Jul 2026 08:00:43 +0000
Files and hashes: 1: 1GbRcMgQujTELpIOhNQmKEWXf4U.crl (hash: YnoZ8FqZaP/XWz7PIHzosRYiy/kakRf1s9YDHSXy9tc=)
2: XyvlakrX669O27yJ8vUEJgcOTBA.roa (hash: bXnP/tpzRgnQjjCGNcc58oyJ9DS3aNnplVA7Ww2qw84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:17:cd:e3:60:98:8b:db:df:d6:d4:d6:ce:39:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d466d170c810ba34c42e920e84d4262845977f85
Validity
Not Before: Jul 24 08:00:43 2026 GMT
Not After : Jul 25 08:00:43 2026 GMT
Subject: CN=408d91f0b2365ab8754aacfe45e883f6af21496e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:66:55:eb:fd:bd:4b:4a:29:4b:db:0a:e7:
be:69:6f:b0:8e:14:1d:11:b5:fb:f9:7a:e9:e0:29:
89:31:5b:b2:e5:3a:c8:02:fa:86:46:5f:81:29:3b:
95:bc:77:ce:b8:20:05:d3:63:c6:a1:f7:22:2e:28:
f6:e1:81:00:c7:19:0e:63:43:e0:da:5f:e4:6f:d6:
5f:dc:b0:00:54:ff:6e:58:ae:49:16:e0:cf:8d:c7:
59:f6:d5:90:16:62:28:8a:0d:18:13:a1:43:e4:a5:
a5:22:40:8d:72:b0:fe:fc:2a:37:3c:8b:a7:96:81:
dc:e9:68:bd:2a:f3:a6:77:4f:eb:e9:0e:70:f5:77:
6b:6a:cf:d8:3c:a8:80:fe:a9:44:33:7f:d0:ad:e8:
2f:e4:53:87:6e:c4:5c:a7:6c:ad:78:13:f8:5b:f8:
c1:fb:6d:3b:1e:25:47:c5:54:ad:a4:63:bc:de:99:
4f:52:e5:ad:7a:ce:26:d2:20:56:b8:a1:a2:af:0a:
6d:8b:0c:44:6e:cd:de:90:c4:82:4e:5c:a8:2c:b0:
d2:1f:1b:95:b9:e9:de:0c:d3:68:da:b2:f3:29:38:
3a:ed:70:a3:22:d5:e8:12:31:51:6b:36:48:10:96:
bf:ac:82:5f:b5:d0:1b:eb:14:ba:b8:5d:03:bb:62:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8D:91:F0:B2:36:5A:B8:75:4A:AC:FE:45:E8:83:F6:AF:21:49:6E
X509v3 Authority Key Identifier:
keyid:D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:62:c7:31:76:ee:6b:db:51:00:d6:06:d1:82:c1:c5:c1:86:
f5:16:49:86:34:42:02:88:8f:8b:35:4f:ae:60:39:b6:1c:23:
96:2e:36:3b:a1:47:0d:ae:88:b2:3e:d6:68:7a:5e:c2:01:e9:
15:fc:ec:23:19:88:be:ce:e4:e7:f3:d8:82:a4:c6:84:b8:60:
43:e3:a8:0a:66:4b:cd:ea:f9:49:5e:34:1b:f0:5b:76:14:9d:
b5:21:d8:10:f5:55:09:8c:1b:78:c4:44:37:b4:ff:27:f4:8e:
69:da:90:04:b1:d5:72:73:72:36:31:84:00:0a:55:66:ff:e4:
c0:e5:f5:40:96:bb:ed:32:68:ff:a4:e1:7c:b9:5e:86:26:51:
65:ab:ed:27:9e:7f:2d:97:d4:6e:2d:6e:02:c0:97:17:db:81:
0f:7d:fb:04:3d:0d:03:e9:cc:2f:70:bd:f9:e9:77:65:78:54:
cd:f2:1e:02:16:37:05:0e:71:ff:56:58:94:4f:f7:61:23:2d:
74:a3:92:7b:09:25:bd:a5:e6:a7:73:55:9d:2a:92:ba:fd:a9:
c5:f5:be:c8:fd:df:74:7e:f1:d9:bb:94:b1:4b:af:c4:4f:7e:
f3:28:2b:0e:ca:12:1c:e8:f3:91:5d:1b:72:a4:9f:1a:14:f6:
f3:e0:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:44 2026 by rpki-client