Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File: 1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier: +Cb9UP+BiiH+ELgFFJfkJFliV87jfbO633OqLpr+H7k=
Subject key identifier: BD:E8:B6:0E:08:D5:C2:9C:BF:F1:70:77:80:26:BE:4C:28:72:B7:AA
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer: /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial: 01A11560EE7F397535C73CC6DB64254C922B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number: 10AE
Signing time: Wed 07 Oct 2026 08:00:36 +0000
Manifest this update: Wed 07 Oct 2026 08:00:36 +0000
Manifest next update: Thu 08 Oct 2026 08:00:36 +0000
Files and hashes: 1: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: yzCU2RyIdEEIDMAJxPWpm2AGxg6JoA7rnegVpl8Vt00=)
2: j23BZZk_JCF_SfyfxVWcOAzB598.roa (hash: E3VUgy7wmstrKfM+/rHOKE3M1MtzxmFo74y/4C1q9hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:60:ee:7f:39:75:35:c7:3c:c6:db:64:25:4c:92:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Validity
Not Before: Oct 7 08:00:36 2026 GMT
Not After : Oct 8 08:00:36 2026 GMT
Subject: CN=bde8b60e08d5c29cbff170778026be4c2872b7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:fe:07:d9:80:54:4a:92:99:e1:f5:3f:2b:
67:b9:dc:bd:2f:35:90:be:9d:8e:a8:4a:7f:93:9f:
fd:8e:ee:06:83:37:7a:82:af:7f:c6:0b:8b:88:54:
be:2b:ba:0f:61:c1:02:63:f0:39:41:c2:df:9f:aa:
22:bf:84:e8:7d:36:a8:40:17:0f:02:ce:e0:79:02:
5c:40:f5:ee:73:8c:6c:8d:17:6d:7c:5e:6e:c4:33:
ea:3c:b8:2c:7c:45:c3:2c:90:bc:26:62:27:e5:43:
85:ab:ef:a7:31:3f:20:ea:71:be:57:05:61:98:a7:
e7:62:5f:e3:f6:f7:19:69:57:88:7e:ea:a3:ce:6b:
fe:d8:eb:48:4d:2b:78:6f:8f:c8:d3:dc:ec:cf:c7:
77:b7:11:a0:81:b0:f8:97:fb:5d:b3:f2:cc:9d:97:
c9:91:5d:e2:15:a6:26:50:8d:a8:9b:15:8e:7a:02:
a8:90:62:52:5a:e8:6b:ab:44:cf:3b:67:74:1a:7f:
3b:ac:b8:7f:ff:4f:75:04:c2:51:0a:4c:66:f4:70:
03:53:de:fb:76:3a:29:b9:76:1b:c1:25:cb:ac:85:
74:34:c7:19:21:9a:fa:04:77:8e:2d:3f:66:67:61:
c8:1d:db:8e:6a:65:94:c0:60:9a:46:9f:42:e5:81:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E8:B6:0E:08:D5:C2:9C:BF:F1:70:77:80:26:BE:4C:28:72:B7:AA
X509v3 Authority Key Identifier:
keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a2:57:3b:47:f5:7d:48:42:8c:42:b9:eb:06:dc:aa:a1:9f:
ca:36:80:be:d9:72:ad:67:c0:33:f0:6d:24:0c:e5:4c:ee:cc:
04:c5:a1:64:83:11:e3:b8:17:1c:5d:70:d1:91:54:ec:1d:b9:
19:cc:4e:0f:91:f0:12:9c:84:99:c6:c7:0b:a3:5c:6d:53:d4:
03:1d:b7:38:5d:e6:10:0d:fd:f6:cb:a7:62:16:e6:09:aa:11:
a9:1d:84:bc:15:a8:12:b3:0f:fd:24:d6:bd:db:f6:0d:3f:49:
6e:ee:38:31:cc:b5:1b:7f:d1:23:61:8a:44:a2:dd:c1:69:11:
dd:2c:51:b2:c4:88:fe:99:c1:02:2d:a5:15:a0:bc:37:ac:ae:
a0:22:2b:0d:07:58:af:0b:b0:36:61:45:46:5e:4e:4a:d6:c0:
36:a0:73:c2:fe:db:c8:49:7d:a2:87:6a:76:83:58:20:5f:ef:
06:e1:a8:29:19:66:11:99:02:e4:3b:3a:9a:65:17:16:eb:96:
36:c0:a6:e1:ef:56:fb:43:f9:4f:46:8a:04:0b:1a:a7:53:16:
f1:a7:fe:de:a9:c9:97:61:b7:98:f2:d6:d2:15:71:08:4f:59:
08:d7:91:2d:5d:f0:76:b9:ed:d1:d5:36:41:8c:6a:d3:1a:65:
bd:b9:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:47:11 2026 by rpki-client