Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File: 1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier: ufmzqG0ifoWFV4XrY+mUME3L+wciCZVqOZ7K6H6DK2E=
Subject key identifier: 3E:55:5B:A3:34:9F:E1:63:36:57:4F:1A:7E:3E:AA:00:04:85:E6:D9
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer: /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial: 019FAA50F5AF83CBD84F68C11B72EF315CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number: 0FF2
Signing time: Tue 28 Jul 2026 20:01:00 +0000
Manifest this update: Tue 28 Jul 2026 20:01:00 +0000
Manifest next update: Wed 29 Jul 2026 20:01:00 +0000
Files and hashes: 1: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: rovo6L0P0R8HoMXM9VegZB7H5JIrTBmYCq5gFos4+QQ=)
2: j23BZZk_JCF_SfyfxVWcOAzB598.roa (hash: E3VUgy7wmstrKfM+/rHOKE3M1MtzxmFo74y/4C1q9hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:f5:af:83:cb:d8:4f:68:c1:1b:72:ef:31:5c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Validity
Not Before: Jul 28 20:01:00 2026 GMT
Not After : Jul 29 20:01:00 2026 GMT
Subject: CN=3e555ba3349fe16336574f1a7e3eaa000485e6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:d8:48:0b:f2:e8:87:27:66:89:60:60:07:
89:fe:af:8b:3f:51:09:e7:4d:36:69:ed:e5:b5:dd:
0f:2c:05:60:8b:cf:73:d7:a3:3a:d9:57:08:d0:0f:
8b:b3:a3:5d:3f:0b:53:18:8b:0a:d2:d1:3d:68:34:
9b:51:b2:93:5a:a0:04:57:57:6f:17:03:8b:c2:58:
64:0f:ac:a7:62:15:3f:a7:9b:bb:15:b2:49:e8:d2:
5b:e3:fe:a0:8c:9c:06:b0:8f:e2:e2:e5:2f:26:e8:
bd:49:70:fe:9a:2a:68:7e:e9:79:86:66:31:90:34:
7d:3f:d0:e9:60:31:1d:ff:aa:dc:5f:d3:a0:02:0b:
cb:ae:6e:4e:d3:b2:d2:a0:1a:0d:3c:cf:37:b6:86:
c8:54:68:6d:26:95:78:cd:8d:c2:54:e4:e0:a5:1c:
af:89:dc:31:b9:a7:15:7b:05:c7:61:29:26:5d:5c:
51:7c:71:70:ce:c6:87:c1:99:e1:72:65:96:d0:e3:
9b:91:8c:76:a3:18:c9:e4:61:77:35:50:a5:2f:40:
1c:b3:41:d7:90:2c:f1:20:a0:59:2e:1f:63:33:16:
90:ad:92:02:0c:5b:e7:4b:3f:ac:7d:0b:3c:d2:7f:
98:95:84:af:40:36:43:d8:80:3f:6c:d5:bd:53:b9:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:55:5B:A3:34:9F:E1:63:36:57:4F:1A:7E:3E:AA:00:04:85:E6:D9
X509v3 Authority Key Identifier:
keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:12:95:5d:87:37:37:7b:b7:5a:d3:41:d5:72:16:02:c3:24:
a8:c2:d6:4d:e1:34:c5:15:c7:6c:db:35:53:78:d2:ba:04:b8:
ea:7a:47:c9:00:3c:50:94:61:80:af:9b:64:aa:cf:ee:27:37:
ae:35:c0:eb:d8:6f:67:0a:8f:45:07:a4:1f:42:9e:09:9a:bf:
16:23:20:5d:aa:80:36:8a:7a:cf:ed:99:49:de:bc:7a:68:9b:
d6:3a:3d:ee:a3:fb:9e:3a:5f:d0:b0:7c:21:60:68:4a:40:f5:
23:2b:fd:31:b5:3c:a5:11:bc:b3:c7:0d:27:2b:79:0c:4f:6d:
4f:cd:16:ad:69:51:c2:9a:ab:0b:10:54:9b:de:37:06:d2:5f:
44:3e:ce:6a:93:e2:c1:68:99:9b:ec:18:73:e4:aa:03:27:6f:
56:28:23:6c:75:eb:a6:ad:61:74:10:b9:7e:09:96:0e:17:dd:
72:3f:9a:fc:f3:e0:09:23:14:13:b5:21:51:fc:78:23:13:6f:
68:4f:cc:6a:34:d0:11:7e:fa:1e:83:3c:a2:51:c5:46:5d:24:
85:8d:96:88:05:34:58:ea:b7:65:e7:5e:d3:53:7e:67:c3:f7:
8e:eb:da:47:ea:6b:1b:d7:da:c6:76:71:b1:0b:f6:54:84:d2:
80:d4:b0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:47 2026 by rpki-client