Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
File: 1-GSAgviI1Al6xM26hGYLkw91A18.mft (raw, json)
Hash identifier: AH9z0XO7UZBzpzpPzYzNmWHK+zXVQJuGAuMy9aaNAho=
Subject key identifier: 84:0B:B5:9D:52:DC:9D:9C:DD:AB:E0:7C:8E:FA:96:6C:4C:55:8C:16
Authority key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
Certificate issuer: /CN=f8648082f888d4097ac4cdba84660b930f75035f
Certificate serial: 019CACEBF20F710C673D2F5B8C4C0F15D578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
Manifest number: FD
Signing time: Mon 02 Mar 2026 05:01:09 +0000
Manifest this update: Mon 02 Mar 2026 05:01:09 +0000
Manifest next update: Tue 03 Mar 2026 05:01:09 +0000
Files and hashes: 1: 1-GSAgviI1Al6xM26hGYLkw91A18.crl (hash: hZJ1+tDs4aDGUltUfCHLctK0cYbS1LFY8THTtAzKUbQ=)
2: Ld1IptB75UF1wrERs5D-utW7pW8.roa (hash: qkhGZ0ztjC9ORXPQw0r6Rit5ibpjpCY4xiHV/vyohFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:f2:0f:71:0c:67:3d:2f:5b:8c:4c:0f:15:d5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8648082f888d4097ac4cdba84660b930f75035f
Validity
Not Before: Mar 2 05:01:09 2026 GMT
Not After : Mar 3 05:01:09 2026 GMT
Subject: CN=840bb59d52dc9d9cddabe07c8efa966c4c558c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:15:af:b9:66:8f:87:a1:6e:2e:63:c6:7f:
fa:7c:2b:be:1d:a5:57:ca:94:fa:79:06:9e:c8:5f:
49:98:e6:af:11:d1:22:01:97:41:e3:f1:3a:83:1f:
82:18:1a:ac:91:d8:8a:2c:13:37:6b:a1:de:39:7e:
60:bf:5d:5e:39:22:16:47:03:09:60:d0:41:4b:19:
2d:da:12:53:ee:ca:07:c5:55:95:88:75:56:47:01:
89:be:8f:90:57:62:ff:8c:61:93:cb:7b:f1:57:d8:
dc:6e:64:4f:59:90:7e:9a:56:e2:16:24:e7:4e:3b:
7a:c9:57:07:8a:67:2c:26:1a:41:c9:d7:15:dd:cd:
e5:3e:00:78:be:5b:a1:00:ca:70:77:9b:00:84:fe:
39:a2:6d:1d:83:4f:0f:ce:94:e7:a6:23:40:4d:27:
b4:a6:50:a8:37:eb:4a:0c:f1:16:56:e2:ad:09:5d:
e7:09:b7:05:b5:f6:6b:8d:a3:20:97:84:7b:84:fc:
ff:91:2f:1d:1e:70:b0:9b:94:f6:c8:93:b5:34:4b:
35:5d:b5:2f:ea:72:43:c8:99:44:cc:c0:bb:0a:d8:
c2:a3:a4:23:8a:b8:79:de:8f:91:a7:7c:d8:5f:9b:
7d:9a:8d:ed:82:ad:0b:4f:b1:1b:d6:2a:e4:c2:92:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0B:B5:9D:52:DC:9D:9C:DD:AB:E0:7C:8E:FA:96:6C:4C:55:8C:16
X509v3 Authority Key Identifier:
keyid:F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3e:88:c5:4d:cf:1c:48:9f:8b:b6:47:28:1c:76:3a:d2:05:
f8:d1:6e:af:fb:3f:a2:b5:a9:c3:d8:79:84:bd:99:12:59:5a:
85:7d:61:c8:13:49:5d:e0:70:cd:f8:46:88:65:93:17:7f:09:
71:49:69:58:42:48:6f:ce:8e:b6:33:66:ea:6a:2d:d0:cd:da:
82:31:b1:8a:b5:f6:8a:d1:24:ba:c6:e0:ee:93:3f:f4:17:ee:
e7:ad:0b:5b:58:26:dc:c0:fe:d9:ae:0c:bf:f4:2d:cf:c1:c1:
2f:7e:1a:88:57:32:5b:f2:cb:97:c3:2a:73:33:4e:69:86:59:
70:9a:11:82:de:81:2b:de:f4:3b:b9:b0:73:0c:d4:72:f7:14:
54:fa:f9:06:70:bb:c3:ea:b2:d2:0b:bf:30:0c:78:dc:d8:c9:
50:70:26:b7:15:7a:51:a2:70:9b:8b:0c:75:2b:46:29:4b:72:
c1:8e:38:7c:a2:f6:83:b0:8b:c2:ca:ab:51:09:3e:03:0f:40:
b5:f7:56:8a:95:5d:85:da:bf:36:b4:0c:49:16:65:ca:4b:1c:
8c:b7:bf:bd:53:27:9a:5f:94:51:6c:73:10:cd:4b:df:3d:12:
5b:a2:f9:63:91:99:80:9c:15:bd:e5:8f:00:49:35:16:ac:9b:
54:ef:e8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:14 2026 by rpki-client