Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
File: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft (raw, json)
Hash identifier: LvKiNQaLLLlX/ASWplnHOtpnmvbtWd3l2bW41F0YWMc=
Subject key identifier: 22:2F:2A:7B:0B:32:A4:2D:09:C6:D5:FF:33:EB:40:AE:4E:37:3C:89
Authority key identifier: D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
Certificate issuer: /CN=d60ce3443860a7f70d43350776909a4810a48621
Certificate serial: 019FAA19A9C65E93DFBF48DFFD3D397A2037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
Manifest number: 0F18
Signing time: Tue 28 Jul 2026 19:00:36 +0000
Manifest this update: Tue 28 Jul 2026 19:00:36 +0000
Manifest next update: Wed 29 Jul 2026 19:00:36 +0000
Files and hashes: 1: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl (hash: 7azfKt8Pmk7reLRLpv780B/+OQ7q6uiIBxcZTrS/0vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:a9:c6:5e:93:df:bf:48:df:fd:3d:39:7a:20:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60ce3443860a7f70d43350776909a4810a48621
Validity
Not Before: Jul 28 19:00:36 2026 GMT
Not After : Jul 29 19:00:36 2026 GMT
Subject: CN=222f2a7b0b32a42d09c6d5ff33eb40ae4e373c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:74:5b:55:94:97:b8:7f:be:65:fc:43:04:5b:
fb:ba:4a:f2:88:b1:0d:9f:76:f4:88:ba:ca:25:53:
c6:90:1b:bf:28:ac:18:38:ee:14:1d:2d:76:c3:10:
5a:79:ec:42:bc:6e:78:63:53:5b:f6:59:f4:4f:15:
25:80:83:2d:2e:f1:af:f1:fc:f8:7b:cf:2d:7b:c6:
c5:26:e5:2a:22:92:21:46:a0:cc:2d:ce:6a:d9:89:
99:5f:9a:db:6c:6a:b5:46:4d:0c:9e:07:06:1f:46:
33:93:da:61:46:28:7b:77:7f:c1:1a:86:72:30:89:
c7:42:61:7d:47:72:29:af:ec:03:5a:e5:6f:7d:44:
bd:ea:9a:c7:59:18:1c:08:16:5c:62:c4:53:68:b0:
9d:ac:28:d8:86:b5:1a:4d:b2:57:59:e1:fa:db:01:
69:d1:9d:92:90:0a:46:89:cb:d4:0a:44:ef:67:4d:
7e:f4:d5:b5:56:0c:b2:35:c1:c3:80:a7:de:d1:53:
b7:a5:67:2b:c8:74:c4:65:3f:31:fd:51:ac:ef:53:
cf:1f:8d:9b:1b:04:b9:ad:6a:34:a0:8e:d9:a8:1f:
10:6f:4d:f7:cc:fc:d7:44:a6:ef:a0:09:d1:2a:88:
4b:f3:8d:1a:62:b5:b3:57:dd:c7:0a:b4:33:8e:f2:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2F:2A:7B:0B:32:A4:2D:09:C6:D5:FF:33:EB:40:AE:4E:37:3C:89
X509v3 Authority Key Identifier:
keyid:D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d6:1d:32:0b:81:4c:ab:c4:82:5a:d7:72:37:a4:8a:53:2b:
9d:e4:79:57:27:ac:57:8a:a4:96:7e:a2:e4:80:8d:e0:41:c4:
8b:e3:9b:c5:1e:44:69:56:83:9c:56:07:60:ba:21:0c:23:f1:
c1:35:c1:b9:fc:11:36:eb:20:65:f7:f2:1c:5e:a1:95:cc:c5:
11:16:a5:b6:f2:3d:41:67:c6:0e:19:88:55:24:76:81:40:4a:
fa:77:61:42:29:b1:d4:66:a4:23:2a:ef:9a:0f:54:4e:d6:be:
b2:cb:c7:3b:27:ff:90:e6:38:db:27:15:93:20:47:08:ae:c5:
b0:bc:cc:06:a3:55:ce:0b:34:99:a7:74:d8:b8:34:cb:78:61:
9e:9b:e4:37:e8:b8:d1:2c:df:92:28:1c:99:8c:10:19:50:e4:
6e:b8:ee:19:6b:9e:b0:66:01:3d:26:fb:05:b6:bc:b7:b8:7b:
d2:1e:f4:97:da:67:34:70:b6:10:62:e0:ea:b2:97:f9:79:85:
13:e1:20:b6:21:55:7c:ff:ef:b0:4e:d2:7f:63:8f:ca:c3:3c:
9d:a4:47:7a:ea:5f:55:b1:54:7e:9c:f9:0e:09:07:5d:72:20:
84:60:da:ad:00:e0:60:5f:9b:fc:b3:60:9a:e8:9b:01:0a:48:
8c:c1:dc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:57:41 2026 by rpki-client