
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier: A7u1JWpJkhgMQuJ5cxNlFr27oxRX+v3aq4FwTwBoVmY=
Subject key identifier: 51:E8:F3:5F:59:5F:56:8C:2C:A0:51:C1:ED:82:7E:AB:D5:F7:3A:A5
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial: 01A0D8728CB66E546C01E547D985440A7BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number: 066A
Signing time: Fri 25 Sep 2026 12:03:00 +0000
Manifest this update: Fri 25 Sep 2026 12:03:00 +0000
Manifest next update: Sat 26 Sep 2026 12:03:00 +0000
Files and hashes: 1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: cltCxVjWDT63kOvpW5soeP1wlfs68k82w8zrVv+wYU0=)
2: 3tqIIgWkHb-czJrWJ45mBIkK_cQ.roa (hash: XvC13IkxH0azxvzs9FuTSJdwmaTsmRlyyRpZAdkI6ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:8c:b6:6e:54:6c:01:e5:47:d9:85:44:0a:7b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Validity
Not Before: Sep 25 12:03:00 2026 GMT
Not After : Sep 26 12:03:00 2026 GMT
Subject: CN=51e8f35f595f568c2ca051c1ed827eabd5f73aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:a5:a9:30:df:29:52:b4:74:12:25:67:64:
b0:d4:e8:c9:eb:79:97:c7:57:c8:92:e6:51:d9:d1:
f6:22:0b:95:83:27:36:be:74:30:30:e8:20:44:29:
ae:54:36:74:57:b0:0f:dd:9f:9a:ac:5f:2a:0d:8f:
df:ae:9f:72:c3:57:24:2b:10:f2:c7:37:62:f5:1c:
eb:50:40:c7:ad:73:a4:fe:88:5f:6b:53:67:21:e6:
84:14:50:31:ea:6f:9b:3e:02:57:e4:9c:83:b1:a1:
0f:9d:65:eb:fe:d8:32:1d:dc:2f:37:47:d1:da:2a:
95:3e:aa:e1:09:f9:b9:dc:0c:27:4d:5c:7c:9e:b1:
c0:07:eb:d9:48:bc:29:13:3b:53:ae:ab:14:5b:45:
9c:ba:86:82:5b:61:d1:c9:8b:a8:25:02:7a:54:fa:
eb:77:27:0d:36:6a:a4:66:7d:a4:0e:49:fd:54:80:
f6:fa:a3:ec:ff:48:3b:b2:bb:bb:38:d8:79:ea:b4:
34:d7:02:b8:91:b7:94:28:14:ad:da:ca:d6:b8:ba:
bd:3e:3e:d9:d2:f2:95:7b:74:c9:50:38:a0:9c:5b:
be:72:dd:95:4c:5b:79:ac:9b:35:54:12:15:c5:e4:
40:c7:75:dc:6c:9a:5d:65:e9:ac:95:67:82:71:26:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E8:F3:5F:59:5F:56:8C:2C:A0:51:C1:ED:82:7E:AB:D5:F7:3A:A5
X509v3 Authority Key Identifier:
keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e1:be:7f:5a:ec:c9:06:8b:2b:91:ec:1c:15:93:1f:45:17:
7c:7a:af:3a:3f:6b:e0:b3:5b:d8:e2:66:95:6a:95:6d:61:ae:
b2:8f:6d:66:09:c2:09:b0:2d:a0:0d:ed:8e:95:7e:23:95:87:
f8:a2:2a:cb:97:a5:d7:25:c1:e8:7c:5c:ce:1e:cb:d6:86:ba:
69:c4:52:55:97:16:30:fe:9c:8f:cc:8b:88:30:7c:4a:42:4c:
60:a8:86:16:ad:b9:3e:5e:5f:6c:ae:97:89:9f:82:9e:6f:05:
a6:f2:1b:32:eb:0a:ca:29:ee:64:c5:58:d7:c9:66:58:96:c6:
bb:7d:c5:37:3f:4b:36:33:73:3b:1f:36:1f:64:da:d2:c1:e2:
7d:2f:85:2d:5a:79:3e:bc:56:2c:33:d0:c5:87:8a:72:3c:79:
ba:c8:e4:a7:55:b2:48:05:9c:ba:48:fe:99:1f:76:13:15:40:
ea:24:d9:cf:81:49:17:2b:aa:96:14:d3:db:45:d1:b3:26:28:
29:64:26:d4:6d:21:58:00:5c:cd:f4:48:04:05:60:ee:8a:24:
87:04:93:82:57:18:8d:b6:f1:e0:12:16:aa:2f:82:e3:8f:59:
3c:8a:b3:56:7b:b6:0c:14:87:2c:24:18:c6:d5:af:bd:1b:30:
c7:2f:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:48:53 2026 by rpki-client