Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File: 1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier: TtFLAt5Oh5SH8+5QYpz5tfhAA0L7E3ntljisy97uWeg=
Subject key identifier: 45:B9:1B:64:BE:6B:DA:36:E7:0E:24:EF:F0:11:8A:50:BA:06:D1:0F
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer: /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial: 01A0DD603EA05B0E8039145992412721F245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number: 1091
Signing time: Sat 26 Sep 2026 11:01:07 +0000
Manifest this update: Sat 26 Sep 2026 11:01:07 +0000
Manifest next update: Sun 27 Sep 2026 11:01:07 +0000
Files and hashes: 1: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: eWRXBQOuxvZUg+tc5k/79hdIBMrZLAjxPSbP+Va9RWg=)
2: j23BZZk_JCF_SfyfxVWcOAzB598.roa (hash: E3VUgy7wmstrKfM+/rHOKE3M1MtzxmFo74y/4C1q9hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:3e:a0:5b:0e:80:39:14:59:92:41:27:21:f2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Validity
Not Before: Sep 26 11:01:07 2026 GMT
Not After : Sep 27 11:01:07 2026 GMT
Subject: CN=45b91b64be6bda36e70e24eff0118a50ba06d10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:55:4a:64:c5:2c:24:73:93:fd:0d:bc:70:
2f:14:85:98:af:35:3a:ad:94:c1:e1:07:10:8b:5a:
10:bb:b4:fa:0c:fe:a1:bb:2f:78:01:99:14:81:74:
04:f2:52:43:47:e5:e0:cd:2c:34:9b:7e:9a:d0:b5:
47:64:2b:5f:86:a1:51:51:20:76:dc:20:a0:31:f6:
0c:e4:e6:6c:76:13:44:69:47:e8:d2:d2:e0:ed:65:
56:c0:70:4a:48:f2:f0:f1:77:6b:e5:f2:ac:ac:d0:
d3:7f:f9:86:21:00:e9:3a:4e:81:ec:4a:c5:c4:7b:
55:05:a0:44:04:35:31:b9:ac:e2:28:c0:59:76:e1:
9c:8a:80:2d:42:11:90:c6:e6:44:48:76:5c:6f:5b:
3c:ed:8d:09:5e:5f:03:47:91:e7:5a:8e:d4:34:f6:
72:ab:29:88:d4:e4:d7:2f:1f:8a:6c:42:f7:61:d1:
ea:af:05:6b:dc:e0:43:a6:6a:cc:5b:23:c4:6b:73:
4a:ed:64:17:36:5f:d2:87:d7:d3:9f:dd:29:d4:7c:
c6:2e:4c:e6:e9:38:d9:6a:29:57:0b:ff:30:df:00:
7a:72:7c:eb:b2:7d:15:c5:fa:06:da:e3:cb:73:e0:
cf:fc:e0:45:fb:d3:58:87:13:12:1c:97:02:26:bd:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B9:1B:64:BE:6B:DA:36:E7:0E:24:EF:F0:11:8A:50:BA:06:D1:0F
X509v3 Authority Key Identifier:
keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fc:33:8a:c3:b3:07:d1:18:3c:d8:ec:ab:88:36:5a:e8:72:
69:6d:b8:5b:7d:d5:5a:6f:3d:bb:39:4e:19:96:8c:ad:3b:15:
ad:06:6d:99:11:43:9a:13:91:33:23:96:ab:ba:5b:b1:e5:f7:
91:b7:74:e0:f0:cd:41:04:e9:cd:6d:81:17:76:ca:22:ef:4c:
02:41:05:64:f0:03:79:6f:8c:2b:cd:f9:b3:4e:6a:82:a5:55:
c1:b6:e7:a4:b0:f6:84:ca:1e:67:c4:2b:6b:f3:6d:19:e8:24:
30:fe:65:d0:71:a7:04:c0:da:8b:cb:9b:3e:19:0b:a5:99:a5:
71:26:8d:7d:42:cc:44:40:5f:ad:41:8c:48:0a:09:e9:22:c4:
ae:e8:81:9e:81:06:4e:cb:38:96:62:7a:88:0d:a7:ee:3f:21:
77:90:df:ee:d0:de:f7:bc:bc:87:5e:9b:93:27:f9:07:92:1e:
48:dc:6a:9c:98:80:0b:01:7f:9e:87:c9:17:e3:1b:1f:1c:6d:
88:44:04:ad:cc:1b:11:21:a7:44:03:4e:d5:76:a6:1b:06:3f:
34:78:3f:2c:a9:72:05:3b:ca:5b:5f:d9:a3:41:47:6f:fe:8b:
a2:a8:b5:58:ca:5e:83:76:ef:da:2b:0e:90:67:51:ba:31:85:
d2:a0:3e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:06:49 2026 by rpki-client