Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
File: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json)
Hash identifier: GZNcguC2A8P1ivlhfU3P2kLc43oJUb+AbGJKc/Z4tS8=
Subject key identifier: 4D:9E:62:5F:4C:31:B4:48:47:F2:7D:AB:3D:65:67:7E:D1:6F:2F:61
Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
Certificate issuer: /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Certificate serial: 019FA975A341C8259FAEC5538FF6366D799A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
Manifest number: 1403
Signing time: Tue 28 Jul 2026 16:01:26 +0000
Manifest this update: Tue 28 Jul 2026 16:01:26 +0000
Manifest next update: Wed 29 Jul 2026 16:01:26 +0000
Files and hashes: 1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: 1vEQuYJVctwWUHgR4pjt/YDpFXDwmizf+mvIwFM2RzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:a3:41:c8:25:9f:ae:c5:53:8f:f6:36:6d:79:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Validity
Not Before: Jul 28 16:01:26 2026 GMT
Not After : Jul 29 16:01:26 2026 GMT
Subject: CN=4d9e625f4c31b44847f27dab3d65677ed16f2f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:69:40:43:f5:59:0b:86:4b:69:b2:92:4f:
f0:c7:c4:ed:d1:b4:76:5c:76:a6:19:e4:c5:d4:d8:
30:56:e4:ae:5d:fa:f3:5d:a0:54:48:8f:ee:6a:ae:
37:81:fa:f5:25:cf:46:63:6d:be:c2:bd:c5:e5:1a:
4b:aa:78:da:fc:22:ff:0f:4c:32:43:5c:c3:61:1f:
dd:4d:90:de:65:18:27:2b:c5:94:cf:07:98:04:8f:
84:16:6e:33:8f:b4:7c:91:0f:44:7d:cd:ee:98:2d:
e6:8a:f7:16:3e:b6:44:b9:30:25:2b:c2:f9:1c:3d:
fc:06:cc:3d:f7:86:3c:91:20:a5:34:51:51:a8:88:
fd:e7:15:5a:5b:4d:cd:38:6e:38:2f:3b:cc:56:46:
27:fb:e0:58:fa:f7:40:31:9f:f0:bc:ed:f9:7d:b9:
93:ae:98:4d:b7:c4:34:ef:0f:b8:6f:ac:e2:d0:39:
4c:8b:6b:52:c3:07:a8:28:1e:13:7f:69:a4:43:65:
43:4b:27:0e:6e:1b:e6:cf:ab:8a:58:87:e0:69:ba:
e2:3e:35:e1:47:e5:1f:3d:6a:c1:74:76:ba:9f:2e:
67:ca:e8:49:eb:a3:54:53:f3:82:b4:fb:0c:79:4f:
75:e3:b9:41:47:60:32:17:0c:a8:81:b3:d4:79:0c:
48:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9E:62:5F:4C:31:B4:48:47:F2:7D:AB:3D:65:67:7E:D1:6F:2F:61
X509v3 Authority Key Identifier:
keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9b:5f:87:57:5d:77:85:c8:8a:44:0d:c2:37:a4:3c:eb:9f:
d6:df:fe:a6:ff:a9:02:5c:96:58:37:36:b8:cc:5b:67:6c:f0:
e8:0d:fe:95:8d:db:6e:20:0a:87:a5:36:ba:32:6d:c4:29:db:
10:ca:55:78:49:c9:1a:09:fd:f1:b3:14:03:54:fd:20:79:e8:
8e:55:b9:bf:29:da:70:1f:5b:d8:98:2b:51:6b:00:36:17:06:
a0:54:6e:f3:14:c9:a0:ec:48:0c:25:19:6d:e9:cc:d6:44:da:
30:54:c5:d5:d6:55:bb:42:eb:3d:11:e5:67:f5:af:41:04:58:
55:11:7e:58:7b:df:db:a9:d9:d1:40:bb:6a:3e:6c:ab:6b:56:
c3:81:b2:f4:c5:ca:01:c4:71:2a:2c:d2:0b:64:95:f2:5a:63:
76:5f:fa:23:7d:00:c4:ff:47:ee:28:8f:ee:0e:b5:e0:25:29:
1f:70:f1:6a:60:b2:e6:99:49:74:c4:42:25:6a:cd:3f:b7:de:
5d:f0:90:5d:11:50:ed:ca:31:a0:f1:c2:e8:99:f8:82:97:b2:
ca:22:fc:cb:fb:d0:a9:f5:e7:15:41:d9:57:d0:97:4b:13:64:
c5:4b:5f:b5:4f:6f:cf:e8:85:cb:82:68:fd:d4:ae:22:92:99:
bb:09:11:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:42 2026 by rpki-client