Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: C9bupt8iPD2YRIzVITRBatVQ+//OQ3NgL6C26smgQ1U=
Subject key identifier: 25:84:B4:57:51:F6:4C:F3:95:3E:DB:7D:0A:3B:67:C6:49:E6:52:E1
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 019D99D02142C8B21BEE10B4D5643AA656EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0BAD
Signing time: Fri 17 Apr 2026 05:00:47 +0000
Manifest this update: Fri 17 Apr 2026 05:00:47 +0000
Manifest next update: Sat 18 Apr 2026 05:00:47 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: ghVPcZd+G2jqTIG2yR52ZPKOt0ZTxJKvLbHVfFQBv9o=)
2: dligzRRVoWtfjy4qlRdbw7o42uM.roa (hash: 2ujZTExymeWh5nps9OWeUYEciPPWZb859+jQp6T2I7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:21:42:c8:b2:1b:ee:10:b4:d5:64:3a:a6:56:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Apr 17 05:00:47 2026 GMT
Not After : Apr 18 05:00:47 2026 GMT
Subject: CN=2584b45751f64cf3953edb7d0a3b67c649e652e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:f7:92:de:5d:20:73:b0:1d:d5:f2:c4:8a:
8d:01:a4:ee:52:30:47:c4:83:00:95:b2:49:55:dd:
76:04:70:cb:22:55:ca:0e:f8:0f:1b:f0:72:ca:0e:
0c:d0:33:31:40:61:bf:6b:91:a2:81:dd:38:bb:6d:
f7:38:e3:e8:4e:11:3f:14:95:23:09:f8:37:58:71:
5f:f8:f3:c7:cd:4a:67:de:a8:bf:53:a3:f4:78:c8:
57:ab:2f:82:a4:30:68:f8:ca:3e:1e:3e:3d:68:5b:
62:87:8b:32:8a:12:b6:07:75:72:40:05:98:df:36:
63:4f:c6:2f:bd:5d:08:0f:4a:f6:90:f3:31:d0:e4:
16:0a:0b:2e:47:f1:76:e7:ab:cf:37:ae:0a:c7:0d:
e9:a2:6f:18:7c:17:25:29:42:e4:80:e4:6c:de:84:
95:b6:71:e3:79:ab:23:77:4e:f7:2c:d1:44:ac:b0:
a9:3f:55:87:1d:80:a5:fd:47:86:44:59:61:0f:f6:
f0:84:17:db:82:df:58:4e:15:e4:0d:8e:d4:41:a9:
67:da:29:25:6a:0a:0e:07:d7:69:5c:70:0d:02:43:
2e:ac:29:cc:d0:28:23:f1:da:d2:06:ef:4b:a6:d0:
87:e8:49:61:08:a8:69:85:ce:c8:be:09:76:5f:ac:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:84:B4:57:51:F6:4C:F3:95:3E:DB:7D:0A:3B:67:C6:49:E6:52:E1
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7c:18:60:e0:46:f5:31:8d:24:09:4f:ca:fb:90:99:e4:e0:
77:f6:0f:2d:73:b2:fd:35:03:fe:ea:8f:56:4a:be:e7:fb:26:
46:42:ca:9d:67:1d:07:aa:90:e6:0d:9a:e2:b5:b4:fb:f3:ad:
e3:d2:bb:b3:c5:0a:66:7b:58:9a:e4:18:a3:00:62:c7:1c:7f:
16:04:9c:67:87:aa:8c:8b:29:a8:c2:c5:5c:97:07:50:60:b0:
4a:15:00:21:5c:a2:7d:8d:6d:63:21:a7:af:bc:ed:dc:ea:0a:
db:b1:ee:79:76:1b:6b:e7:3f:e9:72:b6:c6:f9:a1:76:f4:da:
6c:1a:a5:2c:73:e1:9d:9e:fc:f8:b4:4a:cd:73:83:a3:61:39:
0a:23:0d:b9:9d:4c:0a:e7:cb:dc:06:7f:be:94:d1:40:87:60:
f8:c4:e4:33:fd:91:3e:0d:08:05:11:0f:94:c4:81:1a:13:3a:
07:cc:7c:63:96:93:3a:23:94:52:b0:75:e7:25:10:df:12:4b:
d2:6a:6e:13:6a:89:d6:f0:9a:14:c3:33:90:49:c6:6c:70:5b:
1c:c3:e3:e3:c5:dd:dc:e9:6c:31:44:5a:27:7a:6c:b4:af:78:
d2:46:a0:ab:32:32:7d:76:ec:20:97:14:03:ed:2b:9b:bc:aa:
42:3b:87:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:23 2026 by rpki-client