Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
File: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json)
Hash identifier: 7zISwfzRG8Ldhyaa3k4ZqAkxF3Oc/ugAvZOFT592m7M=
Subject key identifier: 14:09:26:F3:20:84:1C:A0:C5:BA:6D:67:5E:EE:26:82:09:19:10:D1
Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
Certificate issuer: /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Certificate serial: 019CAAC69C2978E9BF94DAA07C2DD7B26398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
Manifest number: 1276
Signing time: Sun 01 Mar 2026 19:01:08 +0000
Manifest this update: Sun 01 Mar 2026 19:01:08 +0000
Manifest next update: Mon 02 Mar 2026 19:01:08 +0000
Files and hashes: 1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: jQIY98VWCoWG44M6sdWcQnKq/Ei3CUdkg3kweLjObhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:9c:29:78:e9:bf:94:da:a0:7c:2d:d7:b2:63:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Validity
Not Before: Mar 1 19:01:08 2026 GMT
Not After : Mar 2 19:01:08 2026 GMT
Subject: CN=140926f320841ca0c5ba6d675eee2682091910d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:39:b4:a8:af:16:06:98:fc:5e:be:e5:9b:
06:d0:a7:4a:a2:72:9a:51:74:1c:88:5f:52:f5:ce:
12:3c:2a:55:e5:c2:4a:fb:bd:b8:59:28:8a:03:3f:
a0:39:26:0d:5d:93:90:fa:6a:db:c5:d6:e9:31:c0:
56:dd:55:1e:c0:46:ee:c7:d0:8a:92:1d:e8:f3:ba:
18:fa:77:b4:e2:4f:8f:d3:d6:27:02:f9:ed:e4:65:
e0:d9:ff:fd:1a:6d:74:06:53:ba:05:01:ba:5d:d2:
d2:8a:f6:04:09:f2:6c:f5:9a:c6:3b:58:47:c8:c3:
f8:7b:85:d0:4b:2c:0c:7e:a8:d3:15:55:5a:ae:ef:
64:0a:d2:26:ba:89:d3:e8:fc:ad:07:83:26:da:08:
6a:13:22:26:f2:c8:67:9c:1a:67:58:ff:9b:26:f2:
87:c0:d0:54:c9:e2:f1:87:86:9d:a3:7a:16:91:b3:
01:b9:e1:f0:27:72:52:d1:41:27:79:af:c0:a8:58:
aa:83:ad:af:ca:96:c4:c4:55:70:56:3a:ed:1e:2f:
15:72:8b:da:b0:93:b5:bb:91:11:24:e2:75:2a:31:
c7:0b:9c:e3:44:29:54:71:c9:40:54:44:27:8f:52:
f0:2c:c4:b3:4c:d5:69:3d:e2:dc:a5:dd:d3:3e:e1:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:09:26:F3:20:84:1C:A0:C5:BA:6D:67:5E:EE:26:82:09:19:10:D1
X509v3 Authority Key Identifier:
keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8a:ef:87:b3:01:fa:42:3d:80:23:7b:33:d0:79:7a:e7:d4:
de:fa:27:a0:d7:29:ad:64:7e:58:92:0d:62:d1:24:e5:aa:0c:
27:8a:9d:b2:40:35:bc:32:20:bb:0a:18:a0:e6:a6:12:0e:2c:
31:26:d9:57:c3:e1:c4:25:64:29:3c:f0:21:2a:85:3c:8f:b1:
c2:9b:f2:76:e2:02:23:21:fd:9e:aa:33:15:3f:91:a6:cd:e1:
05:8c:10:af:4e:77:bb:40:27:96:36:5d:c4:0e:86:ff:99:2f:
cb:52:7f:d5:2d:ad:b7:80:d4:b0:e4:0d:37:72:26:11:6f:d7:
a7:5a:98:51:81:2d:e0:61:2c:44:34:fa:e1:81:e1:0e:3a:7c:
23:0b:e3:78:7f:da:46:91:c9:ba:ea:12:50:89:f8:20:bc:f5:
6f:c4:fe:e4:bd:c6:61:0a:eb:76:78:37:a5:4e:ed:ca:86:3c:
68:00:03:e7:29:7b:67:bd:28:b0:42:03:36:f3:19:ac:e7:39:
61:2d:46:bf:33:95:36:46:27:f0:46:0f:29:71:92:aa:f2:03:
9b:7c:a0:7e:4b:c3:df:e0:ee:a4:bd:9f:69:55:34:06:9c:b2:
5f:0a:82:e1:d8:e7:a5:3c:98:ca:2c:9e:ec:a7:4c:3b:e7:a9:
de:4e:6f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:28 2026 by rpki-client