Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
File: 1-GSAgviI1Al6xM26hGYLkw91A18.mft (raw, json)
Hash identifier: 7DholUChW1wGqKzLKvQpxAqsR6yiGFLOPZzSSiP5tRU=
Subject key identifier: 3A:35:A8:BC:EA:2A:2B:F6:F4:7D:8C:D3:8E:E7:BC:58:DA:CB:AE:F9
Authority key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
Certificate issuer: /CN=f8648082f888d4097ac4cdba84660b930f75035f
Certificate serial: 019E1BD9027F468C2492866F99ECC0297459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
Manifest number: 01BB
Signing time: Tue 12 May 2026 11:01:07 +0000
Manifest this update: Tue 12 May 2026 11:01:07 +0000
Manifest next update: Wed 13 May 2026 11:01:07 +0000
Files and hashes: 1: 1-GSAgviI1Al6xM26hGYLkw91A18.crl (hash: Dpwqtkfcjyi8GIMzIX5WtCyBuXiqnGYe/Ffp0WbZSt8=)
2: Ld1IptB75UF1wrERs5D-utW7pW8.roa (hash: qkhGZ0ztjC9ORXPQw0r6Rit5ibpjpCY4xiHV/vyohFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:02:7f:46:8c:24:92:86:6f:99:ec:c0:29:74:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8648082f888d4097ac4cdba84660b930f75035f
Validity
Not Before: May 12 11:01:07 2026 GMT
Not After : May 13 11:01:07 2026 GMT
Subject: CN=3a35a8bcea2a2bf6f47d8cd38ee7bc58dacbaef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:bd:09:c6:51:21:5e:3f:5a:02:30:10:04:
23:25:39:25:e0:12:c5:6a:80:c6:50:d5:d7:22:df:
19:10:87:e5:d6:e7:4e:76:cb:38:30:17:61:5f:fe:
de:c3:15:c1:51:76:ed:09:5c:fa:29:88:84:ba:3a:
dc:92:3e:9d:5b:88:5d:ff:25:c9:d2:f3:e6:30:5a:
39:28:1e:58:a8:ef:97:4a:f4:d8:10:98:ee:14:10:
00:d4:e7:93:60:dc:ae:1f:25:fb:39:22:9f:70:32:
d6:da:f6:dc:d2:3c:83:22:d1:3f:b7:d6:b7:8c:a5:
0b:46:cf:0b:dc:dd:7e:88:c0:f1:44:19:5d:48:3e:
2d:fe:1f:96:6f:85:9e:3b:f6:b3:07:30:f5:63:0f:
a7:1d:03:78:f8:35:e3:40:8e:78:79:6c:b8:b9:24:
17:a9:23:56:c9:40:05:5e:5c:4a:6c:94:a8:37:ef:
52:6d:c7:76:f8:b7:1d:13:c0:6a:3d:82:39:08:bf:
ea:a6:7f:93:4d:77:00:94:8b:49:ef:b8:f0:ab:70:
a6:45:4b:50:fc:30:aa:68:d9:9b:00:58:83:ad:e2:
49:66:e8:1a:c6:b8:95:cf:09:01:13:c7:ae:0e:dc:
16:03:a6:7e:88:b7:98:51:b9:36:5e:46:94:13:8c:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:35:A8:BC:EA:2A:2B:F6:F4:7D:8C:D3:8E:E7:BC:58:DA:CB:AE:F9
X509v3 Authority Key Identifier:
keyid:F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1f:96:d0:21:4c:ea:d3:82:03:f4:e3:59:e1:04:f8:da:90:
53:d6:9b:a3:6b:8f:40:30:31:42:4e:a2:25:9c:c8:32:8a:d7:
43:1c:9c:bf:76:05:ac:de:8e:00:db:cd:af:31:e4:aa:6a:78:
ef:c6:4a:c5:21:93:62:43:93:a2:d2:9e:c6:d7:13:73:fc:52:
99:71:2b:a8:a4:69:82:bc:9a:aa:dc:04:84:f4:2a:4a:d9:32:
cd:20:e5:aa:60:92:ce:b8:85:15:34:c2:b8:4e:ca:38:f3:ab:
90:3e:0c:96:24:1c:a8:bf:82:f4:ce:b4:09:59:37:92:34:a4:
34:3d:37:86:ef:a5:5a:10:52:8f:c2:57:8b:05:63:f4:6d:28:
f8:ca:94:27:3f:41:4d:12:6f:45:90:5b:9b:78:d8:60:5d:97:
a1:6d:0d:38:3a:47:79:ee:80:f4:28:d8:1f:cf:1d:4e:76:6f:
d1:cb:5e:98:ac:99:cb:17:ca:35:ce:d7:61:76:a6:69:92:c2:
90:95:d9:9c:13:33:db:7c:6a:95:0d:dd:eb:c9:9e:66:83:d5:
fb:b1:3d:9a:5a:49:c6:15:3d:5e:ea:87:7d:74:74:54:cc:3d:
24:14:c8:7d:61:59:05:95:db:d4:60:02:5b:54:21:10:88:26:
f6:cd:2e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:23 2026 by rpki-client