Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
File: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft (raw, json)
Hash identifier: 1Oh7c0nS7+YdyiCo07lKtuJUiP6dx74VUI6E4dqCBT0=
Subject key identifier: 0A:B3:05:EF:12:D5:B8:CD:18:72:9C:78:39:BB:44:D3:B0:2C:6B:01
Authority key identifier: D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
Certificate issuer: /CN=d60ce3443860a7f70d43350776909a4810a48621
Certificate serial: 019F8F0FFA9CE298118973120341E6346549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
Manifest number: 0F0A
Signing time: Thu 23 Jul 2026 13:00:16 +0000
Manifest this update: Thu 23 Jul 2026 13:00:16 +0000
Manifest next update: Fri 24 Jul 2026 13:00:16 +0000
Files and hashes: 1: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl (hash: 7Oa4M22/QLMOkhp1Jsvj5m793eOch0cAlLRuuuHtUw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:0f:fa:9c:e2:98:11:89:73:12:03:41:e6:34:65:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60ce3443860a7f70d43350776909a4810a48621
Validity
Not Before: Jul 23 13:00:16 2026 GMT
Not After : Jul 24 13:00:16 2026 GMT
Subject: CN=0ab305ef12d5b8cd18729c7839bb44d3b02c6b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:76:99:83:bd:c4:e1:3c:42:7c:38:1b:ed:
26:14:01:73:9e:6e:5f:d4:7d:dd:4d:ac:cf:78:7a:
1b:87:91:71:9f:78:62:36:fc:b4:14:88:68:aa:a9:
09:7a:08:81:77:02:fb:12:e5:ae:90:59:0b:d5:bc:
8d:d6:36:f0:3d:dc:b6:59:e6:6b:bc:ae:7c:30:4a:
fa:ea:02:e7:3c:3a:29:8a:0d:10:90:d9:24:0f:5d:
b0:f6:78:e9:8e:6e:e6:a6:cc:da:98:f5:51:cc:eb:
0f:14:f6:23:20:4c:4a:72:a4:f6:38:80:78:80:d3:
ce:2c:bd:94:7e:6f:23:19:73:64:c4:e0:44:c2:13:
ec:13:4f:cf:e4:76:ac:3d:85:95:f9:10:54:7d:61:
44:7d:cc:08:dc:d3:2f:36:9e:71:b6:b7:a1:f2:c3:
59:3d:96:f6:1e:d8:3d:4f:da:43:0c:33:88:f2:49:
eb:ac:09:c5:9f:0f:0a:c7:76:0f:88:84:e7:91:e4:
c0:8d:dd:c1:83:38:14:f9:ac:4c:79:92:2e:02:18:
fb:86:89:a4:8b:fe:b6:fb:57:8f:4d:a3:a1:2b:29:
ba:39:d7:ab:1b:48:e4:0c:bd:0d:67:5c:52:da:30:
c7:68:46:ca:e9:c3:75:30:50:8f:7f:1a:67:14:4e:
33:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B3:05:EF:12:D5:B8:CD:18:72:9C:78:39:BB:44:D3:B0:2C:6B:01
X509v3 Authority Key Identifier:
keyid:D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:30:ad:a8:94:a0:c8:9f:89:ac:93:b7:52:d5:8a:1e:ed:34:
bc:11:47:27:94:51:33:72:33:68:90:bf:9f:19:1c:50:49:10:
62:78:e9:16:4c:53:bb:22:c9:f7:c0:c6:0a:83:5c:e9:18:6d:
ba:a6:77:06:1c:9c:54:5a:e7:0a:87:26:76:4c:d2:cf:20:94:
fc:f0:69:fb:33:62:f3:7a:a7:f1:14:43:64:1e:20:6c:cb:ec:
1c:c3:21:51:3b:b8:0b:a0:72:0b:97:9e:91:61:07:6f:52:19:
55:3c:be:4e:f4:b0:c1:39:3d:2d:4d:42:7c:62:fb:22:70:30:
89:0f:63:cd:0b:4e:14:25:32:24:87:a0:fa:ca:3e:1f:36:be:
51:4b:3b:d8:1a:11:20:1d:0a:89:2a:b8:b2:54:3c:60:49:38:
71:1f:db:1f:a6:f4:92:90:fe:6c:39:a6:06:c8:06:d8:da:c0:
53:88:67:3e:12:a0:a2:83:cc:df:b7:7b:70:88:ee:af:d2:bf:
d8:50:92:56:5d:be:94:19:b3:2c:13:98:1e:f8:cd:72:d5:34:
52:bd:51:f7:aa:9e:74:96:15:e2:24:ca:b2:d1:2c:8a:2d:b1:
30:3f:b1:1d:a1:8c:7c:7a:11:b0:c5:12:e2:92:67:12:e3:ea:
74:75:54:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:20:12 2026 by rpki-client