Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
File: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json)
Hash identifier: ltGdYZRSMVpKP/i9CaTAwKRaGh5IdMXTsGyYQEx402w=
Subject key identifier: DC:BA:7E:2E:41:26:28:2B:2C:E0:65:24:51:17:8C:DE:DE:28:1E:73
Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
Certificate issuer: /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Certificate serial: 019D98503630272B98134DC90DA00912704F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
Manifest number: 12F1
Signing time: Thu 16 Apr 2026 22:01:26 +0000
Manifest this update: Thu 16 Apr 2026 22:01:26 +0000
Manifest next update: Fri 17 Apr 2026 22:01:26 +0000
Files and hashes: 1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: 285YSQfz29/9C+XnDYNH+KOqB1GQfGnOkhH+U3WoaZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:36:30:27:2b:98:13:4d:c9:0d:a0:09:12:70:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Validity
Not Before: Apr 16 22:01:26 2026 GMT
Not After : Apr 17 22:01:26 2026 GMT
Subject: CN=dcba7e2e4126282b2ce0652451178cdede281e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:24:9c:5d:31:50:5a:bb:8d:09:24:79:58:
d5:c6:d9:6b:79:94:e6:e7:7f:0c:fc:c6:1a:4b:27:
f8:89:be:b1:5f:a5:a2:d2:a6:b9:38:c4:42:02:9d:
8c:f5:e5:12:8a:81:02:36:49:4e:63:a2:74:fa:8f:
f4:10:64:39:43:22:c6:30:64:75:c5:e7:9f:51:f9:
06:3e:98:d4:06:ae:ed:b7:36:e8:a7:41:f9:5b:ab:
0b:be:ca:db:64:61:44:7d:24:e1:82:db:db:a9:52:
47:93:38:3a:13:3a:d9:be:7c:13:43:64:24:fd:72:
86:91:b5:77:de:6e:e5:a6:ba:c2:3e:d3:d8:51:93:
7d:74:41:3f:89:78:fe:1e:f0:19:f6:bb:7b:40:32:
9f:99:1e:f4:b5:9b:90:53:85:08:35:f5:10:39:9a:
8d:ee:ac:a1:68:b8:50:30:72:61:31:be:0c:f7:1f:
fa:a5:7f:eb:58:01:65:1d:00:37:2b:dc:51:10:a4:
ea:57:cb:07:1b:f1:0e:88:51:bc:3b:48:81:c3:6a:
de:d7:b0:79:82:bb:66:7e:8f:ee:8e:5d:4c:0c:77:
61:49:ab:5a:f4:2c:fd:5e:48:fb:f4:9d:ea:76:8e:
0b:91:78:00:e4:27:b0:ec:96:a8:4b:f6:35:fc:53:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BA:7E:2E:41:26:28:2B:2C:E0:65:24:51:17:8C:DE:DE:28:1E:73
X509v3 Authority Key Identifier:
keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2d:24:16:8b:28:65:84:c8:34:a1:4a:18:6f:73:ca:05:e4:
6a:23:77:61:45:e8:c2:6f:f1:e0:c0:6d:15:1f:a1:ed:1a:28:
96:f3:f5:ad:9e:15:2a:f4:f2:fa:fd:04:28:e8:88:bf:3b:94:
d6:c5:eb:6e:6f:d5:33:7d:f8:d5:15:07:8a:89:ef:50:c7:c6:
0c:7f:ac:69:fe:29:b8:8e:34:52:31:31:03:2b:ee:f5:c8:0b:
db:4c:66:53:30:23:0b:fe:2e:23:bc:13:d2:87:8a:e1:21:56:
49:4a:87:df:ae:cb:e7:99:a0:31:bd:c8:27:23:fb:92:fc:dc:
67:a9:6c:34:30:15:d9:be:b3:b0:2c:f8:f0:47:25:de:09:33:
43:59:2d:d4:d3:da:01:22:ab:89:c4:7e:54:90:1e:b2:43:f1:
35:04:d8:ac:2c:41:e9:99:b6:47:b7:71:77:35:c5:f9:04:30:
c6:68:1e:eb:52:28:f0:ae:96:42:d0:4f:11:dd:18:d3:e9:05:
c7:51:fb:46:5f:9e:62:4e:50:0a:5b:73:9b:4a:56:59:f1:12:
02:ea:8a:5d:25:7a:3c:8e:e5:28:9c:35:ac:3c:38:1d:f0:4c:
b8:55:48:a7:a1:63:e5:54:e5:bf:41:c7:52:c8:0e:b1:59:fb:
68:68:7c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:34 2026 by rpki-client