Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier: kCbwiEphxIzy+6CzaZzbH8OlvOmp19WePpJYDJVBs9E=
Subject key identifier: FF:FC:AC:2D:EA:16:7D:17:5D:32:56:5E:00:10:6B:8A:F5:9C:90:4C
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial: 019D2771C02A85EE3302C1681D2D7ADDD198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number: 0480
Signing time: Thu 26 Mar 2026 00:00:59 +0000
Manifest this update: Thu 26 Mar 2026 00:00:59 +0000
Manifest next update: Fri 27 Mar 2026 00:00:59 +0000
Files and hashes: 1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: GPju2+nC2A66jffb/wdFNaaJTYqj8JqmOioama2T4+s=)
2: xzZmjyBgUA5PVhf5CC_hJNwcVzY.roa (hash: NZxy7sLP8vd+st6fA6TY6gFnYnOKj2RudHOzgNs7jsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c0:2a:85:ee:33:02:c1:68:1d:2d:7a:dd:d1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Validity
Not Before: Mar 26 00:00:59 2026 GMT
Not After : Mar 27 00:00:59 2026 GMT
Subject: CN=fffcac2dea167d175d32565e00106b8af59c904c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:d3:64:26:a4:37:01:96:e5:7f:b6:22:7c:
9d:b8:68:0a:e7:a6:77:c8:0e:10:0f:a2:a1:4e:b7:
45:cb:78:fd:ca:19:37:06:d7:e5:4c:f6:23:16:50:
c6:cc:37:ec:85:85:0c:50:b5:6e:eb:22:08:95:68:
c0:7f:11:b0:41:04:c0:c1:ad:12:ae:3a:51:bf:e1:
5d:99:5f:92:41:81:fd:37:d6:15:1a:27:f9:fb:b6:
20:57:9c:61:cb:3b:da:3c:a5:9e:70:4c:54:9a:43:
59:23:bd:7c:f9:fd:bc:69:02:25:dc:e3:56:de:ee:
4a:30:8c:f8:ac:06:cb:ec:d6:d1:6d:0e:45:f6:b1:
f1:82:53:1a:86:b1:fe:c4:f7:fb:9a:92:b1:01:11:
ff:61:d2:01:8c:3f:0a:d5:64:f1:ae:d2:63:82:7e:
77:e4:3a:95:bd:9f:a0:95:41:3b:3c:26:85:12:45:
c4:93:3d:21:b1:7d:12:72:8e:5d:5a:ac:8d:9b:d4:
25:35:1e:b6:4f:6f:aa:aa:0e:3d:b4:be:5e:bd:61:
76:94:21:24:f6:21:36:15:3d:16:f8:d3:90:f5:1a:
95:1d:a4:3c:a0:eb:c4:06:c7:90:56:6c:29:13:e7:
46:28:ef:43:27:db:38:3e:0d:2a:0c:fd:85:b0:f7:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FC:AC:2D:EA:16:7D:17:5D:32:56:5E:00:10:6B:8A:F5:9C:90:4C
X509v3 Authority Key Identifier:
keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1a:a4:7b:77:56:3f:a2:a2:20:ed:38:fa:43:72:62:33:f2:
5c:f5:6c:7e:0c:55:af:de:0a:ba:18:da:49:02:97:c2:16:5c:
da:f5:da:b9:c2:54:e3:2a:7a:98:28:7c:ce:8c:2c:db:11:11:
92:2c:5e:a1:79:78:6a:7c:4b:a5:ff:6b:39:36:02:d9:5d:85:
db:10:e8:d7:17:94:b8:35:29:dc:d5:f6:6d:4b:b7:e4:02:8f:
7d:bc:d4:6d:03:95:1e:cd:23:93:df:87:37:90:4e:bd:c7:32:
36:83:5c:bd:2b:52:c6:27:0e:a1:25:0a:e9:0e:e3:49:f4:06:
bc:a1:6c:e2:b9:37:5b:44:5d:8a:fb:60:ac:62:00:90:a8:08:
45:1c:8d:5e:46:20:4c:15:00:ce:4e:c6:9c:44:38:e7:e8:5c:
92:41:8c:d9:37:3d:2a:06:65:d9:e6:5d:1f:c6:ab:3e:5e:9f:
01:2a:28:ea:7a:84:71:49:80:78:53:82:9c:ce:83:0f:bb:29:
b1:39:10:f7:41:4a:da:89:6e:f5:65:8b:e5:3c:a7:67:03:82:
11:7b:e7:0c:f1:9a:ff:ac:db:ed:e7:26:93:e2:32:5a:22:77:
07:d3:8c:e6:ab:35:63:4c:41:73:7d:3f:df:d7:5f:71:fd:a2:
02:6e:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:34 2026 by rpki-client