Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
File: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json)
Hash identifier: ifel5Ee1qrRQtIAGvRpo2Zx6aHz6bYBJcDsqsYg4nH8=
Subject key identifier: A0:BB:28:1E:45:1A:08:CC:A1:53:13:86:25:92:31:EA:59:C5:AF:A3
Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
Certificate issuer: /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Certificate serial: 019F92489E6E17B367760501CDBD8EFDA365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
Manifest number: 13F7
Signing time: Fri 24 Jul 2026 04:01:00 +0000
Manifest this update: Fri 24 Jul 2026 04:01:00 +0000
Manifest next update: Sat 25 Jul 2026 04:01:00 +0000
Files and hashes: 1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: DYojGUwSYbWgmK06u4AQXbjh+ACTfgYkg+olau7vICU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:9e:6e:17:b3:67:76:05:01:cd:bd:8e:fd:a3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Validity
Not Before: Jul 24 04:01:00 2026 GMT
Not After : Jul 25 04:01:00 2026 GMT
Subject: CN=a0bb281e451a08cca1531386259231ea59c5afa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d5:1d:f7:32:b8:78:dc:3e:c9:a2:a0:f7:4f:
75:88:ce:26:fb:7d:ed:71:d2:27:4f:1e:09:e0:1c:
85:e7:6f:7a:d1:c0:8a:74:c8:5a:ef:5f:36:44:9d:
72:56:8b:90:3b:e2:df:79:25:f5:f8:09:c4:e6:70:
c2:53:20:c1:f5:e7:cf:5d:b2:93:a8:02:cc:d7:d3:
b7:31:a9:34:d2:cf:ed:03:be:cf:ca:89:c5:96:55:
bd:7f:35:e6:ab:f9:9b:ad:a7:aa:81:42:3b:91:80:
52:6d:4f:90:75:ba:58:c7:c2:40:ba:cf:d9:1b:57:
ee:54:33:85:5e:b5:c2:f4:68:1d:8f:03:34:c8:a5:
46:e3:1f:da:8d:af:0c:db:aa:b3:ab:61:2e:3b:23:
65:ea:e5:04:d1:11:38:b6:25:83:f1:08:28:d3:fc:
86:cc:75:bb:cb:e2:b7:5e:d6:b0:3f:b6:83:e7:fa:
b1:43:b5:5e:77:fa:17:02:a8:dd:ce:c7:ca:cf:e1:
58:2f:c5:76:41:ae:6e:25:a6:31:96:2a:bb:68:a9:
fa:90:2f:af:cd:23:57:25:e1:95:a4:f0:b3:2b:ae:
c3:c0:79:30:48:a4:e2:aa:ed:21:56:74:9a:56:94:
5d:d2:b4:70:07:42:e2:63:f5:25:48:03:67:d7:73:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BB:28:1E:45:1A:08:CC:A1:53:13:86:25:92:31:EA:59:C5:AF:A3
X509v3 Authority Key Identifier:
keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:98:3d:bf:b0:43:37:34:84:a3:44:f6:61:7c:6c:f8:4c:a2:
64:a2:52:5e:c7:cf:88:4e:00:df:56:96:ae:b9:c1:b4:12:69:
1a:c7:03:c0:31:02:7e:6d:64:73:48:53:44:f7:9c:e9:31:7d:
07:9a:51:e1:02:c6:37:31:29:b8:6e:4a:a0:eb:0a:a1:04:1e:
58:61:15:e3:25:75:18:86:03:db:0b:7b:99:c1:5e:d4:4e:53:
2f:f5:2b:22:3d:6f:10:d1:72:63:f5:d3:6b:07:7f:e5:99:aa:
bc:72:59:bb:ac:06:cd:b7:b6:51:0e:ef:4d:db:6b:33:22:76:
d2:44:8f:46:91:9b:5f:53:ea:83:0f:22:11:49:1c:3d:84:75:
95:fd:d2:31:bf:53:71:24:05:21:4f:11:d9:ae:7b:04:c2:bf:
cc:32:73:9f:19:6a:45:cd:c7:8c:88:54:36:46:3d:6e:1b:99:
db:70:d9:3f:81:7b:53:f3:c8:f0:c1:e5:bf:fb:f2:4e:fb:4c:
bf:0c:ef:67:be:6e:c4:35:98:87:dd:6a:78:cf:28:e8:a2:23:
eb:e4:18:fb:bb:bc:4b:ca:1c:5b:c1:6c:f1:a0:6e:9a:59:30:
fd:2c:e3:9e:47:e7:44:a0:aa:33:a3:d5:91:9c:95:7d:e2:f3:
ad:ef:a5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:37 2026 by rpki-client