Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
File: 1-GSAgviI1Al6xM26hGYLkw91A18.mft (raw, json)
Hash identifier: 87AkP5lZwN5FFzBnZhBdDQMaaxPhuCKqDiGR8XIV0lI=
Subject key identifier: 10:79:D8:E3:62:27:83:CF:29:52:C1:E5:E8:E7:AB:AE:65:88:A7:29
Authority key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
Certificate issuer: /CN=f8648082f888d4097ac4cdba84660b930f75035f
Certificate serial: 019FA9ABFDEC5FA3CB080074A5352231CA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
Manifest number: 0289
Signing time: Tue 28 Jul 2026 17:00:48 +0000
Manifest this update: Tue 28 Jul 2026 17:00:48 +0000
Manifest next update: Wed 29 Jul 2026 17:00:48 +0000
Files and hashes: 1: 1-GSAgviI1Al6xM26hGYLkw91A18.crl (hash: l41HUjtzsqLMIjd55kQwQeZ3D7x06/7oRStZ90McNQ0=)
2: Ld1IptB75UF1wrERs5D-utW7pW8.roa (hash: qkhGZ0ztjC9ORXPQw0r6Rit5ibpjpCY4xiHV/vyohFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:fd:ec:5f:a3:cb:08:00:74:a5:35:22:31:ca:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8648082f888d4097ac4cdba84660b930f75035f
Validity
Not Before: Jul 28 17:00:48 2026 GMT
Not After : Jul 29 17:00:48 2026 GMT
Subject: CN=1079d8e3622783cf2952c1e5e8e7abae6588a729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:c6:0e:cc:24:0f:0c:33:d7:68:4c:1b:b9:
34:90:98:2d:4f:72:d7:2b:c5:da:57:3b:f0:62:4f:
69:f6:75:77:ec:b9:18:eb:2e:16:fd:04:6b:d7:87:
1b:34:fd:9a:bf:d9:37:00:61:0d:b2:58:5e:d9:d0:
1e:f1:0d:0f:07:a0:67:18:a1:e5:49:4a:e2:15:f2:
8c:5f:07:64:43:1d:7a:90:e7:a3:2c:8a:35:a9:fb:
83:6c:e6:62:1c:41:18:54:81:ae:c2:4d:d6:e9:03:
32:e5:54:b7:6a:8a:df:43:fd:28:36:bd:3e:1d:31:
4d:c5:0b:88:c9:c0:d9:c4:03:f2:f9:bb:57:48:a8:
63:57:59:88:23:82:cb:a1:35:2c:f8:d8:01:3f:be:
f7:39:d3:57:32:bc:8d:f2:d7:1a:1d:b1:ff:ed:4a:
41:67:3f:cb:ca:58:0a:6c:6a:59:98:ab:18:d8:74:
76:5c:b9:b3:94:20:e2:f7:57:ba:09:9f:b0:68:cc:
b0:eb:b3:5b:5d:33:09:56:8f:3c:9f:89:d4:dd:f5:
ba:dc:7d:30:28:8d:bf:69:4e:f4:e2:58:c5:5c:0c:
ac:e6:1e:56:96:88:51:8c:a2:49:35:57:e0:07:d8:
d2:2a:50:81:7c:9d:6a:6c:73:2c:3a:e4:0c:6b:5d:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:79:D8:E3:62:27:83:CF:29:52:C1:E5:E8:E7:AB:AE:65:88:A7:29
X509v3 Authority Key Identifier:
keyid:F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:42:84:fd:d2:e2:17:88:85:f5:5b:0d:50:26:03:a1:83:dc:
b0:41:c0:64:be:8b:de:ba:32:7b:65:42:50:0d:e6:52:ce:ac:
4c:68:50:6f:82:c6:4b:8f:67:a8:c0:cb:bf:b4:69:05:f5:b9:
77:c2:90:be:43:56:96:8d:a0:5f:9b:79:46:1a:f6:70:36:45:
9e:81:e9:45:74:6b:ee:84:9e:ae:9a:4e:97:ed:03:b5:f0:ab:
ee:25:c2:f1:4d:66:95:3f:dc:fe:1c:69:d5:bb:1c:f8:8a:8c:
82:1a:72:dd:aa:65:ec:db:a3:99:7f:4e:2e:59:8e:e9:77:04:
28:63:03:b6:02:f5:f6:40:78:b3:15:62:5d:9e:a0:ee:76:76:
7d:77:04:75:26:05:2d:eb:21:87:f1:a6:a6:5e:6f:e0:5b:0e:
fb:d8:17:50:e4:fb:b9:05:9a:a9:21:d8:5d:85:49:9a:a9:57:
1c:6e:cf:06:b8:d8:02:60:d1:f4:f5:91:02:77:a9:32:d6:74:
49:55:5e:95:4e:bd:53:35:82:a8:ba:58:e4:a5:bd:8c:d9:2e:
45:3d:b9:e9:1e:13:45:22:db:24:48:3b:29:6c:74:fb:01:9d:
0a:0d:aa:92:d7:1b:d5:1d:9a:aa:8e:26:0a:49:7d:d3:13:29:
7d:b6:63:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:33:07 2026 by rpki-client