Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: pZ02j/SRgOaXzTjuY0JIt9/ZgWuVrKovVtckvmOIsMo=
Subject key identifier: B3:9A:79:3B:CD:48:4F:0F:31:C5:A3:14:C6:71:DC:E6:0B:78:7E:0D
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 01A0C6D8820DE857B1CA6F8E7957043A7011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0D52
Signing time: Tue 22 Sep 2026 02:01:12 +0000
Manifest this update: Tue 22 Sep 2026 02:01:12 +0000
Manifest next update: Wed 23 Sep 2026 02:01:12 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: FyygmjgpMaSnsdEkyRGZxIZmdgCzq3ww6zOlC4k3V+Q=)
2: dligzRRVoWtfjy4qlRdbw7o42uM.roa (hash: 2ujZTExymeWh5nps9OWeUYEciPPWZb859+jQp6T2I7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:82:0d:e8:57:b1:ca:6f:8e:79:57:04:3a:70:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Sep 22 02:01:12 2026 GMT
Not After : Sep 23 02:01:12 2026 GMT
Subject: CN=b39a793bcd484f0f31c5a314c671dce60b787e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dc:80:75:7d:d9:6b:2c:49:b0:c8:47:ce:58:
0d:15:32:01:4c:e3:8e:a7:ca:ac:c6:87:24:81:35:
4e:0f:a0:66:41:f2:85:8c:e1:f7:51:dc:39:08:c8:
da:cb:21:1b:25:3e:28:1d:fe:a1:54:d6:94:65:e5:
4f:fa:c3:d3:5c:ee:c3:9c:d6:5d:d8:b6:f1:d6:8c:
b8:5a:e4:ce:7b:fe:df:01:fe:98:bf:15:67:cf:fe:
3c:bf:8f:2e:82:ef:92:d4:fb:4f:79:b2:f4:b5:b8:
6d:ac:f3:b0:69:3c:73:42:aa:26:e3:93:f0:36:ca:
86:0a:9a:02:43:12:f2:cc:47:e0:fb:0f:35:18:b5:
96:69:5b:ea:f8:b4:c4:cc:54:5f:45:f5:51:3f:3e:
f6:8d:50:2d:d9:86:82:a7:ac:90:87:75:03:5c:f9:
07:3d:fc:9d:0e:40:65:3a:50:27:47:51:1a:44:db:
be:d2:eb:5d:31:80:6f:35:e9:86:27:a2:bf:11:0e:
95:60:41:5a:d2:27:cf:0e:44:a7:27:33:e4:ca:80:
48:ca:17:d6:65:b9:86:1f:9e:0d:9d:94:02:31:8b:
37:99:4a:bb:4e:d6:54:c4:e1:32:a0:e5:f4:82:15:
1d:12:3c:f9:74:63:3d:f8:d1:70:74:22:ae:dd:10:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9A:79:3B:CD:48:4F:0F:31:C5:A3:14:C6:71:DC:E6:0B:78:7E:0D
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c4:35:52:69:b6:34:f3:1b:0d:12:39:0e:7c:bb:a3:41:8c:
a6:4e:07:5b:48:e6:66:7c:67:09:13:da:2c:bd:6d:47:a2:91:
d2:15:75:6a:86:99:6f:66:a3:df:51:30:da:d2:2c:52:87:6e:
38:06:af:d7:92:03:64:4d:3b:2d:fc:af:61:a9:34:d1:1c:3d:
d1:60:9a:f8:84:b6:12:31:66:bc:b2:58:3d:a9:46:2c:b7:21:
88:19:5c:bd:b5:bb:78:79:dd:fe:ce:4d:ca:84:d8:a1:5c:bd:
b8:a3:42:99:b5:84:82:96:a9:fb:ce:7e:80:34:21:a6:76:85:
2d:be:2e:a7:3d:1c:b1:8f:f7:d4:01:5e:c8:d1:19:20:80:19:
1c:48:43:18:ae:4c:5b:36:1b:1c:71:4f:eb:28:dc:da:ff:4a:
7f:c0:e7:eb:cc:ab:b4:4d:d9:a0:c5:03:fc:51:9c:fd:a4:0b:
02:62:01:de:0f:11:bf:40:55:b1:95:f5:ab:e7:e0:0f:20:28:
09:d7:ca:a0:be:70:58:40:0f:16:21:cc:e5:46:17:a3:4a:18:
e6:5c:6e:85:ff:47:be:01:63:cb:48:f9:f5:c3:b7:e5:f6:98:
54:73:5b:f9:c7:09:67:3c:33:c1:26:75:c8:aa:43:ff:43:3e:
11:a3:56:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:47:02 2026 by rpki-client