Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
File: 1gKgc6GrxkQ1el-XOO62dqSpPcY.mft (raw, json)
Hash identifier: YaSpe4nTIVEjAStmpxhR4oY4C85iRkhpFoqVYpP0XVA=
Subject key identifier: EC:FF:33:3E:80:D2:9A:8B:D8:AB:7E:37:87:DD:60:8F:D4:CB:7A:7A
Authority key identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
Certificate issuer: /CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Certificate serial: 01A0ED78591DD888BBB9AA3E2735EF67C8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
Manifest number: 041B
Signing time: Tue 29 Sep 2026 14:01:22 +0000
Manifest this update: Tue 29 Sep 2026 14:01:22 +0000
Manifest next update: Wed 30 Sep 2026 14:01:22 +0000
Files and hashes: 1: 1gKgc6GrxkQ1el-XOO62dqSpPcY.crl (hash: Wg5JWefqWSA+U0FtmluThKkcWrLzZ4H7hxqrncCXS2I=)
2: rK0z1TiNfJOaF3HXB1_sAZ-3RlA.roa (hash: WOLvx0AjMY9Du4g/aClrv5eIz8O7Ff49lQ/abQMFyg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:78:59:1d:d8:88:bb:b9:aa:3e:27:35:ef:67:c8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Validity
Not Before: Sep 29 14:01:22 2026 GMT
Not After : Sep 30 14:01:22 2026 GMT
Subject: CN=ecff333e80d29a8bd8ab7e3787dd608fd4cb7a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:90:40:ab:13:8c:71:e9:51:e8:a9:d3:4a:
6f:86:eb:ae:71:59:12:95:f1:eb:df:27:d7:ee:d5:
75:00:fa:9e:07:d4:18:61:2c:e6:05:95:78:36:31:
a9:21:9b:ce:1f:1f:24:97:72:c3:e6:6a:fe:e6:73:
ae:d9:1a:9c:e9:2f:c1:fe:a2:9d:69:66:2e:69:97:
84:17:b8:da:3c:0a:e2:9f:b5:07:4b:7d:0f:41:ce:
6a:ca:90:5b:7d:36:f2:4f:a8:71:cd:b1:d5:82:55:
f2:7d:a6:57:2f:29:dd:c4:fe:c7:22:22:63:99:4f:
cb:45:7d:23:5e:2a:85:e2:3d:97:eb:b4:fe:49:6f:
03:6f:ed:b9:ec:b1:7a:09:77:3d:a4:c6:dd:b8:52:
4f:13:f5:28:01:31:05:db:97:9a:4d:df:66:e5:77:
e6:06:46:b4:3b:be:5f:90:a8:a6:7a:5f:64:6b:d5:
3c:16:ff:e0:30:07:4c:18:73:98:85:25:ff:e1:9f:
24:fb:4b:9a:a8:24:3c:03:ed:30:c9:60:9e:03:84:
e1:24:9f:74:b4:44:3a:3e:9e:03:8f:c6:e3:ce:07:
f3:4e:93:9d:81:44:7d:48:0a:61:b9:dd:89:15:66:
3c:92:5b:ad:70:d3:dc:1c:fc:cc:61:ef:9c:8f:cd:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FF:33:3E:80:D2:9A:8B:D8:AB:7E:37:87:DD:60:8F:D4:CB:7A:7A
X509v3 Authority Key Identifier:
keyid:D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:02:a0:6b:07:64:ff:42:e6:db:77:4d:25:7f:4b:aa:70:25:
a7:16:7b:5d:e1:f6:a8:fc:55:c5:c7:a1:3a:46:16:1e:c8:86:
e7:83:e2:43:78:8d:d9:55:bf:b0:5c:6a:4f:43:a0:6c:ba:ea:
6a:c8:ed:a0:cd:5f:86:65:e5:33:cc:ea:0a:da:9e:07:ad:38:
33:9f:49:07:8a:1b:78:65:ff:fb:5e:77:30:7a:fa:79:3c:d3:
e4:05:35:aa:b5:eb:22:a9:b1:c3:ab:ce:ff:61:34:41:be:bd:
0a:bc:55:a7:1f:83:f6:b8:a3:e8:43:fd:26:57:4b:db:1a:41:
7f:76:37:b0:72:a4:49:aa:84:67:e2:a8:9a:2d:4d:3b:5e:56:
c1:d0:65:0e:82:83:cb:a8:ed:8d:23:10:b6:3c:41:c3:b8:06:
5c:76:9a:e4:40:bc:99:27:36:ed:c6:b0:47:01:62:2e:4d:74:
be:78:5e:e8:c1:18:3b:b0:43:ea:08:ff:3a:49:5a:0e:8a:47:
7a:bc:ec:cb:a8:15:a0:69:61:39:a1:00:3b:3a:16:ed:ec:6b:
df:b3:05:61:64:e7:2b:b9:68:5f:2d:1b:ac:2d:f8:0b:01:4b:
bd:d3:7d:9b:d5:e6:f2:7b:b7:d6:e9:e6:b6:ac:54:95:8c:46:
10:a7:8a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:49:53 2026 by rpki-client