Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
File: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json)
Hash identifier: EYO/LvxGkYzQWblysRW7bx49qF5nYZSqsrw9ciu2utw=
Subject key identifier: EA:CA:BC:9B:6F:81:C1:6E:17:04:79:99:D6:C6:20:5C:F1:C2:51:4E
Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
Certificate issuer: /CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Certificate serial: 019DA4F8415FDE916E5CD836FE05A5500640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
Manifest number: 1243
Signing time: Sun 19 Apr 2026 09:00:26 +0000
Manifest this update: Sun 19 Apr 2026 09:00:26 +0000
Manifest next update: Mon 20 Apr 2026 09:00:26 +0000
Files and hashes: 1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: RjszVa0aPh8sXtM2DQYpzqHy9Dw0DhnrGoyaNq8gdmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:41:5f:de:91:6e:5c:d8:36:fe:05:a5:50:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Validity
Not Before: Apr 19 09:00:26 2026 GMT
Not After : Apr 20 09:00:26 2026 GMT
Subject: CN=eacabc9b6f81c16e17047999d6c6205cf1c2514e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:f3:64:f8:64:64:42:53:e0:6c:31:67:7e:
0f:e4:96:0d:cd:aa:b3:14:2b:4c:95:1c:82:a5:e0:
9b:be:87:6d:d5:b6:50:4e:2c:37:d5:a9:b1:88:8c:
5e:6c:f6:83:81:01:6b:36:de:f7:af:b6:e2:e4:9a:
57:e8:28:51:f9:56:19:bf:1a:e4:cb:a9:d8:93:98:
bb:8b:2a:16:c0:ef:5e:61:36:86:4e:74:a7:e9:d8:
78:08:17:cf:21:85:b1:23:69:fb:b9:1c:a4:8f:86:
cc:b1:b0:20:74:4c:b6:23:6e:7a:3a:5e:c9:7c:cc:
43:c4:92:54:58:64:de:99:0e:27:1c:fe:ef:cb:32:
9c:b5:59:fb:22:33:3f:ae:5e:e3:a5:a5:38:5a:7e:
47:9c:74:74:b7:c9:a2:39:a3:7c:c3:37:bf:ad:70:
bb:64:93:5a:b2:71:7d:ad:9b:9f:f2:e8:e1:fe:bf:
6c:f8:81:05:a1:5b:4e:5f:0c:97:c4:13:b1:0d:26:
ca:e7:40:7f:5b:89:09:2d:91:81:a9:ec:93:54:98:
85:ee:58:97:2a:e4:22:16:d0:7d:9f:31:39:4d:6b:
5e:b4:dc:61:be:a2:a4:c0:53:74:17:d8:f0:ea:1c:
9c:6c:23:c5:3f:2e:a8:a1:da:c1:c9:07:9b:87:6b:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:BC:9B:6F:81:C1:6E:17:04:79:99:D6:C6:20:5C:F1:C2:51:4E
X509v3 Authority Key Identifier:
keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f0:74:e4:a3:31:59:10:e8:7b:3a:9c:9e:ba:91:fa:91:56:
20:81:3e:33:d5:8b:16:36:e3:13:c9:b3:70:34:f2:7e:24:0e:
ad:43:77:2f:12:3b:26:21:4e:b2:19:84:66:15:7b:28:bd:f6:
8a:14:ba:39:d2:d3:e0:f2:b2:0e:e9:50:9e:4d:14:e8:63:ba:
14:b6:96:9a:f3:bd:51:f7:08:70:93:ca:36:fd:5f:c6:54:7a:
3f:ae:2d:c7:74:71:ea:8a:6e:69:c1:f6:f1:83:73:7a:5b:67:
d1:2b:72:b8:5e:9e:df:f3:54:91:2a:c0:82:0a:3c:34:4b:83:
07:35:c1:5d:35:a4:6a:1a:d0:3a:97:7e:10:38:4c:42:4e:07:
7b:ec:05:ce:55:2a:26:9b:8d:1c:f8:26:c9:44:54:b9:fe:1f:
85:3e:3f:13:60:de:7e:df:e2:35:3e:4d:ac:c8:fc:e8:37:c1:
33:f1:be:71:5a:c4:70:68:4a:b4:d3:0e:64:a3:61:51:93:69:
0e:04:a7:b1:14:f5:54:83:31:77:dd:87:32:8d:56:cf:6f:e6:
e5:d3:d1:18:5d:05:d6:d9:5a:c1:f9:63:90:f1:fd:6e:12:fc:
e8:50:22:61:99:6c:82:8c:4c:58:03:62:d8:8f:78:f3:6d:ae:
eb:1b:6a:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+EFf3pFuXNg2/gWlUAZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NmM5YmU0NmNiYTMwNTEwNjYyMzNjYTRmOTYyOGEyNmRm
OGZjY2EwHhcNMjYwNDE5MDkwMDI2WhcNMjYwNDIwMDkwMDI2WjAzMTEwLwYDVQQD
EyhlYWNhYmM5YjZmODFjMTZlMTcwNDc5OTlkNmM2MjA1Y2YxYzI1MTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9DzZPhkZEJT4GwxZ34P5JYNzaqz
FCtMlRyCpeCbvodt1bZQTiw31amxiIxebPaDgQFrNt73r7bi5JpX6ChR+VYZvxrk
y6nYk5i7iyoWwO9eYTaGTnSn6dh4CBfPIYWxI2n7uRykj4bMsbAgdEy2I256Ol7J
fMxDxJJUWGTemQ4nHP7vyzKctVn7IjM/rl7jpaU4Wn5HnHR0t8miOaN8wze/rXC7
ZJNasnF9rZuf8ujh/r9s+IEFoVtOXwyXxBOxDSbK50B/W4kJLZGBqeyTVJiF7liX
KuQiFtB9nzE5TWtetNxhvqKkwFN0F9jw6hycbCPFPy6oodrByQebh2sbXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrKvJtvgcFuFwR5mdbGIFzxwlFOMB8GA1UdIwQY
MBaAFNRsm+RsujBRBmIzyk+WKKJt+PzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYmIyZGMtZGEwNi00NjdiLWIzMTIt
NzNjODY3MWE5MGY2LzEvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kYmIyZGMtZGEwNi00NjdiLWIzMTItNzNjODY3MWE5MGY2
LzEvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPB05KMx
WRDoezqcnrqR+pFWIIE+M9WLFjbjE8mzcDTyfiQOrUN3LxI7JiFOshmEZhV7KL32
ihS6OdLT4PKyDulQnk0U6GO6FLaWmvO9UfcIcJPKNv1fxlR6P64tx3Rx6opuacH2
8YNzeltn0StyuF6e3/NUkSrAggo8NEuDBzXBXTWkahrQOpd+EDhMQk4He+wFzlUq
JpuNHPgmyURUuf4fhT4/E2Deft/iNT5NrMj86DfBM/G+cVrEcGhKtNMOZKNhUZNp
DgSnsRT1VIMxd92HMo1Wz2/m5dPRGF0F1tlawfljkPH9bhL86FAiYZlsgoxMWANi
2I94822u6xtqpg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:49:45 2026 by rpki-client