Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: PSZxsw53uDC3kxcJz9JLt4nAyjHUXOKuxwCYyadt0IY=
Subject key identifier: 5D:17:6D:5C:3E:25:62:5C:66:2F:AD:50:68:B8:B7:67:43:E7:D8:A6
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 019EBF5A2560948E8773A487FD42B97F2F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0C45
Signing time: Sat 13 Jun 2026 05:00:16 +0000
Manifest this update: Sat 13 Jun 2026 05:00:16 +0000
Manifest next update: Sun 14 Jun 2026 05:00:16 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: KxWk6oHayYZLC1CJ0A9PKs4ikC44icDFJOPOw0GSjso=)
2: dligzRRVoWtfjy4qlRdbw7o42uM.roa (hash: 2ujZTExymeWh5nps9OWeUYEciPPWZb859+jQp6T2I7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:25:60:94:8e:87:73:a4:87:fd:42:b9:7f:2f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Jun 13 05:00:16 2026 GMT
Not After : Jun 14 05:00:16 2026 GMT
Subject: CN=5d176d5c3e25625c662fad5068b8b76743e7d8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:7a:a5:2f:6c:4c:26:af:06:bf:e1:89:2c:
06:b3:de:c7:f6:76:f1:a7:0d:3f:b7:d2:40:d3:48:
b4:82:9e:6b:1f:e1:75:35:a2:70:5c:a3:93:de:1b:
5b:9c:6d:6a:6d:68:14:d6:1d:dd:16:c5:45:de:41:
90:5e:f7:9d:08:db:4d:eb:2b:c1:12:be:b9:8b:8b:
eb:a7:b2:c0:01:2f:e5:0b:ab:93:f3:19:3a:5b:fe:
f9:22:9f:85:07:36:46:aa:b2:4c:88:f6:d2:36:7e:
07:4a:08:56:66:7e:fd:90:f0:90:f8:04:6e:db:ab:
8f:4d:0c:d4:eb:c2:3e:0b:9d:22:6e:d0:71:f9:66:
a5:ae:59:c6:49:d3:eb:33:23:20:1c:5e:56:a8:38:
d3:c3:7d:38:5b:90:e0:c7:09:6e:fd:6b:17:a7:79:
14:83:6b:12:83:b4:0c:e7:b7:45:8e:16:4c:3f:47:
43:2b:04:aa:3b:12:6d:a2:61:f4:c9:a3:38:09:7e:
44:10:ec:fb:18:19:6c:1a:7a:15:eb:2a:32:98:40:
16:ad:69:c3:81:d9:93:f0:5b:ff:cb:9c:b2:c8:af:
e2:9b:65:be:92:11:4f:4b:34:aa:c9:87:87:bb:6e:
e4:2c:ab:ca:55:c4:73:4d:37:da:ad:a2:b7:35:e9:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:17:6D:5C:3E:25:62:5C:66:2F:AD:50:68:B8:B7:67:43:E7:D8:A6
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:33:76:28:0f:02:b3:8c:96:12:49:ad:0e:ac:27:da:57:c7:
8e:6d:c1:e5:39:26:b8:07:52:7e:72:57:39:af:19:02:cf:52:
a2:20:ac:d6:a3:f5:36:5a:a3:44:d9:84:d2:8b:9e:59:3d:7e:
65:a4:7f:10:5e:f7:3b:87:19:48:c6:8f:1a:38:ba:1d:39:df:
a5:69:f2:57:df:d1:70:25:ec:14:75:32:d8:14:27:91:1b:44:
e7:08:23:eb:26:ee:fb:57:1f:4f:2e:25:75:66:e7:d8:fa:21:
53:72:3a:6c:f6:5d:80:b4:28:de:07:0f:f9:9f:bb:67:b9:00:
6d:9c:09:68:7c:65:cb:60:54:51:af:04:74:d2:87:be:35:72:
90:41:0a:0f:7b:d4:c6:ef:01:50:39:8d:cb:9f:40:bd:ad:85:
79:9f:6c:86:e2:8d:c2:1f:01:3f:5b:3f:e0:4d:73:6e:11:39:
50:9d:60:15:4b:d9:15:dd:c2:1a:61:59:d7:8a:1f:f4:3e:32:
d0:ee:81:71:41:71:80:de:79:99:6e:0d:29:3c:ca:d0:28:fb:
a5:41:5f:05:de:22:73:bc:4d:d5:79:0b:03:d3:56:43:0b:f5:
ae:e4:25:53:07:8a:5e:25:9b:9a:eb:91:cb:80:bc:34:72:90:
2a:8f:c8:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WiVglI6Hc6SH/UK5fy8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjQ2NjdjMzRhN2RiYjAyZjA1MzBiY2U0ODJkMTFhZDQy
NDg3YmQwHhcNMjYwNjEzMDUwMDE2WhcNMjYwNjE0MDUwMDE2WjAzMTEwLwYDVQQD
Eyg1ZDE3NmQ1YzNlMjU2MjVjNjYyZmFkNTA2OGI4Yjc2NzQzZTdkOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp416pS9sTCavBr/hiSwGs97H9nbx
pw0/t9JA00i0gp5rH+F1NaJwXKOT3htbnG1qbWgU1h3dFsVF3kGQXvedCNtN6yvB
Er65i4vrp7LAAS/lC6uT8xk6W/75Ip+FBzZGqrJMiPbSNn4HSghWZn79kPCQ+ARu
26uPTQzU68I+C50ibtBx+WalrlnGSdPrMyMgHF5WqDjTw304W5Dgxwlu/WsXp3kU
g2sSg7QM57dFjhZMP0dDKwSqOxJtomH0yaM4CX5EEOz7GBlsGnoV6yoymEAWrWnD
gdmT8Fv/y5yyyK/im2W+khFPSzSqyYeHu27kLKvKVcRzTTfaraK3NemgiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0XbVw+JWJcZi+tUGi4t2dD59imMB8GA1UdIwQY
MBaAFNRkZnw0p9uwLwUwvOSC0RrUJIe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUt
MjYwZGU2Y2JmNDU2LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUtMjYwZGU2Y2JmNDU2
LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjN2KA8C
s4yWEkmtDqwn2lfHjm3B5TkmuAdSfnJXOa8ZAs9SoiCs1qP1NlqjRNmE0oueWT1+
ZaR/EF73O4cZSMaPGji6HTnfpWnyV9/RcCXsFHUy2BQnkRtE5wgj6ybu+1cfTy4l
dWbn2PohU3I6bPZdgLQo3gcP+Z+7Z7kAbZwJaHxly2BUUa8EdNKHvjVykEEKD3vU
xu8BUDmNy59Ava2FeZ9shuKNwh8BP1s/4E1zbhE5UJ1gFUvZFd3CGmFZ14of9D4y
0O6BcUFxgN55mW4NKTzK0Cj7pUFfBd4ic7xN1XkLA9NWQwv1ruQlUweKXiWbmuuR
y4C8NHKQKo/I4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:05 2026 by rpki-client