Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: JH2Sg8OFKeCGKHpRcF1hN+XGq87MyTCYywtMIVHznHk=
Subject key identifier: 23:20:8E:17:DF:DE:54:9C:E5:E5:95:A7:1B:D2:CB:9F:CB:C9:13:7E
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 019CAC47134B444AF19EA49427333994D5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0B32
Signing time: Mon 02 Mar 2026 02:01:04 +0000
Manifest this update: Mon 02 Mar 2026 02:01:04 +0000
Manifest next update: Tue 03 Mar 2026 02:01:04 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: jIqfd5v6+f2Kn/bORhHPWItvwk6lYSi2YM4MxRRib60=)
2: dligzRRVoWtfjy4qlRdbw7o42uM.roa (hash: 2ujZTExymeWh5nps9OWeUYEciPPWZb859+jQp6T2I7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:13:4b:44:4a:f1:9e:a4:94:27:33:39:94:d5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Mar 2 02:01:04 2026 GMT
Not After : Mar 3 02:01:04 2026 GMT
Subject: CN=23208e17dfde549ce5e595a71bd2cb9fcbc9137e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9a:36:97:4f:5d:7f:17:3e:ce:bf:41:66:68:
22:06:14:d3:e8:b8:1d:fa:36:82:ed:b9:6b:6e:73:
8f:51:84:13:ed:28:ac:a1:4b:6a:97:a7:b8:5c:41:
f2:41:6d:5b:cb:ee:69:29:1f:5a:8c:b1:04:8d:fd:
09:6c:2d:b6:a5:b0:3a:57:9c:9a:30:c1:8a:42:9d:
f5:e6:6f:46:3a:51:9f:ed:0b:d5:44:c9:c9:d1:3c:
00:0b:23:4b:88:9b:f1:6b:0b:82:c9:b4:b7:48:c9:
1f:98:c9:ef:1e:27:c7:f6:40:af:fe:4a:79:88:2f:
2d:a2:62:b4:85:07:f3:9d:5f:1c:46:4d:ab:f4:62:
f2:f7:05:73:22:6a:57:a4:8a:9a:c9:34:59:fe:b7:
e0:4e:03:00:69:a8:25:e9:e3:27:38:b1:eb:eb:1a:
f7:b3:8c:56:2e:66:c8:4e:fa:8b:c3:ba:b5:ff:be:
11:1b:91:83:f7:8a:b9:61:51:96:1b:f9:ac:3c:f0:
6c:b6:2e:26:fe:e0:c2:ba:03:b4:43:8e:e0:33:84:
8d:7f:f2:09:e8:21:3a:bf:c2:9d:f0:8e:ca:62:7c:
88:af:4a:85:25:39:72:ed:d1:80:a8:98:41:16:c1:
ff:7d:35:33:84:ab:f6:d4:f6:b7:6a:08:65:8d:b1:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:20:8E:17:DF:DE:54:9C:E5:E5:95:A7:1B:D2:CB:9F:CB:C9:13:7E
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:61:a4:f2:bb:a8:1c:a4:af:3b:19:ac:b2:66:5b:7a:c9:40:
9c:a5:36:5e:14:f3:8d:a2:7b:0e:f5:de:8b:48:b8:a0:41:03:
89:b0:8f:c5:ce:bf:75:25:20:66:fa:ea:2f:d5:0d:f8:3a:39:
c6:23:29:fb:02:6e:07:0f:64:00:19:2f:be:56:00:6d:bc:c6:
f6:3f:7a:46:22:2a:0c:62:f7:be:7a:fe:3a:76:ff:5d:82:b8:
5a:15:ba:1e:7e:e1:9f:ce:5e:18:27:03:19:89:70:b7:86:98:
8a:ac:7e:02:f9:81:99:93:66:04:28:b4:c9:96:36:8e:04:ec:
1a:56:6d:8b:9a:51:73:ba:12:a2:27:cd:2d:e0:a0:5c:6c:dd:
8a:00:d4:0b:8c:1f:77:67:1f:31:d0:be:dc:a7:00:35:cc:8f:
71:1f:3a:0f:7b:f3:f1:13:49:e2:00:d3:0b:e8:57:d0:dd:2c:
51:ab:fe:41:37:ec:fd:f2:1d:7f:84:02:81:4d:c4:75:be:76:
35:8b:57:df:13:79:ea:d7:c0:1d:cf:7e:93:07:65:44:09:5a:
2a:e9:9c:eb:49:0b:1b:c7:36:3d:da:0b:02:29:b6:ec:a7:26:
9a:7d:e9:ea:b9:72:f7:aa:3f:c8:67:f0:81:30:ea:67:e6:c2:
b1:3a:91:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:20 2026 by rpki-client