Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File: 1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier: i6dfSGhoB7/0+6ZvmtfYVmWcwlGHuWbKgc8H2lVc12M=
Subject key identifier: 58:92:64:62:35:53:A4:3A:A8:99:EF:D3:F9:7F:3C:F1:51:14:76:6E
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer: /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial: 019D9B19E4BA70FB64C15244912EBF982FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number: 0EE1
Signing time: Fri 17 Apr 2026 11:00:58 +0000
Manifest this update: Fri 17 Apr 2026 11:00:58 +0000
Manifest next update: Sat 18 Apr 2026 11:00:58 +0000
Files and hashes: 1: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: p8SJj6ZErf8DERAapSatxGrH8MOVlWcQSpubtcDB/1U=)
2: j23BZZk_JCF_SfyfxVWcOAzB598.roa (hash: E3VUgy7wmstrKfM+/rHOKE3M1MtzxmFo74y/4C1q9hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:e4:ba:70:fb:64:c1:52:44:91:2e:bf:98:2f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Validity
Not Before: Apr 17 11:00:58 2026 GMT
Not After : Apr 18 11:00:58 2026 GMT
Subject: CN=589264623553a43aa899efd3f97f3cf15114766e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:8f:c7:45:cf:1f:df:f6:5c:86:58:72:22:
19:f1:ca:f6:8b:47:cf:cb:9e:ee:b4:57:4a:16:d6:
ab:2d:de:87:d6:f2:a1:66:9d:9b:ac:b2:63:69:52:
ad:6e:aa:9c:b1:05:1a:84:c7:49:10:62:cf:f9:2e:
40:a9:84:49:45:c6:bc:1a:fc:0d:0e:90:70:ab:81:
8c:7b:b4:84:15:e7:be:e8:be:5d:78:f0:7c:d5:83:
71:fc:ca:12:51:a2:d0:ea:b0:dd:58:f9:c3:1e:96:
b3:00:54:f8:33:1e:92:e1:46:f9:92:af:53:d0:ae:
a7:ac:85:3a:c7:e8:aa:b5:d8:c1:6a:86:79:3c:94:
69:3b:69:2c:eb:9f:c6:cf:d2:a5:28:f5:72:ad:94:
4f:e5:c0:f3:3d:80:af:1d:cf:b8:b8:7d:a0:b0:9e:
ed:57:fa:d1:51:c2:26:f0:b9:9d:ef:66:4a:10:ca:
c5:dd:f1:95:a7:e5:b3:d3:61:67:57:3a:19:9c:d3:
bd:1e:87:7a:4c:af:1a:6e:30:c3:6d:42:40:24:be:
f0:bc:0b:5b:70:8f:37:3d:90:2e:3f:e6:c3:d2:ef:
25:37:fa:73:6a:a0:32:16:24:94:be:09:5f:b8:75:
b4:85:0e:84:49:f9:a9:6e:15:cf:88:86:2f:5b:f3:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:92:64:62:35:53:A4:3A:A8:99:EF:D3:F9:7F:3C:F1:51:14:76:6E
X509v3 Authority Key Identifier:
keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:79:55:23:5b:40:8e:c7:93:a4:86:d5:77:2a:83:30:0a:a6:
e5:96:7e:4e:a1:e0:04:98:4c:6a:21:e6:d9:f5:c7:6b:23:48:
01:eb:5d:31:85:66:c4:92:40:11:ce:40:12:f9:28:3d:78:08:
ce:74:08:56:c3:56:a9:58:89:32:83:e3:5e:06:a7:b8:39:a7:
3c:de:8b:69:d8:12:33:28:df:34:8b:cc:cc:5f:37:c4:62:25:
64:c6:c4:87:4e:bb:bb:5f:f2:20:6d:9c:0a:56:2d:f0:8f:e8:
6c:67:3b:9a:ce:74:6e:15:98:42:a8:6e:37:7c:a3:bd:1a:43:
55:8a:12:b8:da:a9:7f:54:2e:a9:71:fd:de:07:e2:49:5f:1f:
16:84:63:ab:d0:13:e6:ff:a6:47:da:64:35:fb:31:aa:14:1c:
28:f0:11:40:ec:fa:33:08:a3:be:77:f3:e4:b5:21:d2:6b:fd:
38:e3:22:90:19:31:19:46:fe:c5:e7:cb:80:9d:13:f4:a1:ae:
ee:ef:66:9c:b5:0d:f1:27:b7:c6:e1:d4:40:ec:6c:36:18:d6:
14:ad:51:83:94:36:bf:c9:ff:f4:43:e6:95:8c:f4:59:a1:3e:
f9:ac:2d:49:d2:5a:c0:87:7e:5f:05:09:b6:1f:39:36:7f:31:
68:3d:15:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:05 2026 by rpki-client