Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
File: 1gKgc6GrxkQ1el-XOO62dqSpPcY.mft (raw, json)
Hash identifier: o+s3RKfx7vnVBPmXCiFHS659YE/g29R+ewbDyzLtEbY=
Subject key identifier: 78:BF:92:97:AD:A1:0F:60:2A:94:34:FC:FA:7D:D3:2B:DA:4B:85:20
Authority key identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
Certificate issuer: /CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Certificate serial: 019D284E4BE3232663F1602910B706987E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
Manifest number: 0227
Signing time: Thu 26 Mar 2026 04:01:53 +0000
Manifest this update: Thu 26 Mar 2026 04:01:53 +0000
Manifest next update: Fri 27 Mar 2026 04:01:53 +0000
Files and hashes: 1: 1gKgc6GrxkQ1el-XOO62dqSpPcY.crl (hash: DxYCCLiJ5Vj61DnWO07Aj9QxwD/iZhFZJ3ZQVbu2Ruc=)
2: M0TOyn3Fajg4bXPrKGJxN9Hvjss.roa (hash: iz1xOigpd52YAYJIyKzuYKInMpgIKrWsoBQltN69+EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4b:e3:23:26:63:f1:60:29:10:b7:06:98:7e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Validity
Not Before: Mar 26 04:01:53 2026 GMT
Not After : Mar 27 04:01:53 2026 GMT
Subject: CN=78bf9297ada10f602a9434fcfa7dd32bda4b8520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:11:52:02:ea:40:e5:7b:1d:05:1a:3e:b0:
92:d0:89:22:85:04:1a:57:73:c3:e0:ad:41:ef:b8:
be:a8:b3:06:55:14:bc:c3:a2:e2:f6:5f:53:d4:e1:
87:82:c9:14:19:07:72:73:ba:28:e7:ce:92:b9:58:
6a:a3:08:a1:c6:2b:a5:92:c5:db:e4:49:d5:47:51:
c4:ee:24:cf:60:e5:2a:5d:c9:4e:d4:e9:b1:38:84:
3e:73:56:44:09:a3:5b:5d:a5:b8:32:c7:c3:cf:2e:
55:eb:5e:96:b4:24:eb:61:44:df:c8:93:94:d1:ec:
6f:2d:f0:7b:21:86:ab:8d:3b:0d:22:23:cb:3b:4c:
15:93:0c:84:5a:29:c3:2d:df:cd:28:84:13:07:4b:
82:fe:72:37:0b:f5:7b:2e:5b:10:f4:e1:73:17:fa:
79:35:25:5f:6b:fb:ca:1b:f3:03:13:38:e5:f4:07:
cf:ad:d4:40:73:a4:a2:1f:e9:38:02:96:b9:a1:cf:
41:9a:d5:38:ff:b3:b0:af:3f:13:f1:22:c4:60:26:
37:f1:f7:e1:23:74:ba:fc:4c:14:e6:2f:1c:9d:04:
89:e1:82:61:93:9f:14:47:d0:69:71:2d:39:60:1f:
e3:ad:78:cb:45:54:dc:f4:2a:ed:c6:57:6a:6b:8d:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BF:92:97:AD:A1:0F:60:2A:94:34:FC:FA:7D:D3:2B:DA:4B:85:20
X509v3 Authority Key Identifier:
keyid:D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:18:12:e5:a0:87:6c:8b:b5:66:15:c8:dc:60:d5:d6:c1:ce:
26:20:b5:e5:1f:fe:22:6b:e6:a4:b1:2c:c6:e7:44:ef:86:b1:
07:0d:46:8e:ef:6a:e8:04:6d:5e:00:89:1f:9e:61:ea:78:a9:
95:cc:7a:92:af:c4:79:92:c8:84:6b:64:96:bb:03:ff:15:9b:
75:e9:b4:bb:27:17:8d:00:e2:ef:9c:1b:8b:37:f3:d0:c9:53:
aa:24:92:df:9a:6d:fd:5f:83:6c:26:42:74:7b:59:fd:05:a3:
4e:90:3b:a7:6e:1b:48:03:87:36:25:02:03:05:bb:ab:26:8a:
d2:9c:e4:6c:e2:d5:e9:7c:b4:0b:89:a2:50:10:f6:86:d7:9d:
d2:ba:72:01:d1:c4:aa:e3:cb:4c:1f:3b:82:08:52:ab:1a:51:
c6:1b:7b:eb:53:0c:21:9a:97:be:cd:8a:4c:4a:8b:26:38:ad:
43:14:2a:3b:48:18:a9:d8:56:04:c0:64:58:86:3f:d7:c2:87:
cb:02:ab:eb:87:66:59:8a:15:86:31:52:d3:6e:db:92:de:e0:
c1:65:07:f0:80:47:2f:03:be:83:fb:01:f1:d5:b5:a5:e2:fd:
7c:11:9c:07:c7:1d:ab:d9:3e:71:e0:97:88:8f:33:96:a2:08:
fb:77:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:44 2026 by rpki-client