Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier: 8PLSSf6D4CwZfF5Kh1U5Ovrk1eGuiZ9aRe1Ug6kIi3M=
Subject key identifier: 52:AB:C6:55:09:19:AB:8B:85:5E:B2:6C:BD:D6:0C:47:05:6D:6E:4B
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial: 01A0C70EE9E2395954E103F4D467A15052A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number: 0661
Signing time: Tue 22 Sep 2026 03:00:38 +0000
Manifest this update: Tue 22 Sep 2026 03:00:38 +0000
Manifest next update: Wed 23 Sep 2026 03:00:38 +0000
Files and hashes: 1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: bmVnPZFbo1GKjIZlnMzE3EmsdGwfpw573Wtf94YmjmM=)
2: 3tqIIgWkHb-czJrWJ45mBIkK_cQ.roa (hash: XvC13IkxH0azxvzs9FuTSJdwmaTsmRlyyRpZAdkI6ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:e9:e2:39:59:54:e1:03:f4:d4:67:a1:50:52:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Validity
Not Before: Sep 22 03:00:38 2026 GMT
Not After : Sep 23 03:00:38 2026 GMT
Subject: CN=52abc6550919ab8b855eb26cbdd60c47056d6e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:ee:87:bb:b9:37:fd:da:61:71:12:07:77:
70:42:7e:cd:60:83:86:57:b5:20:50:7c:f9:62:37:
2c:e7:c5:6f:c7:e1:4d:19:24:9c:9e:3c:ab:6f:1e:
f7:a8:a4:13:eb:2d:88:12:aa:8f:f7:f9:9e:77:0c:
0b:42:d7:a5:04:44:99:a3:69:60:f0:fd:48:1e:0e:
2e:c1:b5:af:8f:b4:23:92:d0:f8:8a:ae:3e:3a:cd:
50:e1:20:d3:84:f1:98:35:dc:72:da:ab:00:92:7a:
75:b2:a6:70:7b:ae:02:0f:8d:1e:f1:44:bd:14:c0:
7c:59:4f:4b:4d:7f:67:14:43:a9:3f:e9:7e:05:8e:
80:39:17:40:1f:8e:33:69:a9:b4:74:64:67:e0:76:
98:92:fd:93:c5:d3:55:5b:21:cf:f3:e7:c6:ff:05:
ed:fa:0b:09:66:f8:7e:07:97:f4:56:48:71:0f:4a:
51:33:ec:c4:97:9f:95:77:54:8d:17:9f:b6:d2:29:
cb:74:07:ff:1a:77:3c:cc:ab:34:d5:ef:80:f1:30:
ec:4e:5b:03:43:91:06:41:c5:9d:8c:d4:a4:3e:ed:
1d:52:00:a2:d0:ac:8b:da:63:7b:a6:42:9d:92:a1:
04:64:ed:1a:e0:d5:8e:90:26:25:51:d1:f8:74:6b:
78:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AB:C6:55:09:19:AB:8B:85:5E:B2:6C:BD:D6:0C:47:05:6D:6E:4B
X509v3 Authority Key Identifier:
keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:29:02:6c:a8:ff:bc:45:5e:f7:5e:e3:ed:04:c7:a1:1b:73:
f2:c1:0b:24:89:f6:3a:84:15:0e:75:91:73:da:74:c4:a9:a1:
a8:fe:e4:19:f1:82:81:3c:82:ff:79:d9:0c:ea:dd:88:3c:82:
b0:a9:fe:de:2d:54:3b:ec:5a:10:5d:dd:82:66:0b:d3:b0:d5:
83:ec:7a:d9:95:b4:55:8d:53:1e:c9:cd:53:7a:03:01:04:f2:
95:d5:df:6f:c7:17:5a:14:e7:fd:43:14:8f:5d:34:96:45:46:
c4:82:63:32:86:02:a1:a0:70:ad:c1:20:f0:f1:e5:06:80:f3:
b7:56:52:51:52:83:40:d4:50:21:d5:28:92:bc:2e:b6:61:81:
85:2e:21:b9:73:f8:55:d3:c1:ca:10:51:9b:d0:e5:b7:67:61:
bc:13:e8:d0:df:d5:4c:6f:e2:07:49:1a:e2:bd:c5:b3:d4:02:
38:ab:1a:87:ed:ab:06:8e:a0:a1:d2:ef:90:0e:7d:5a:ea:fd:
4d:97:c6:dd:45:b9:d3:ea:16:1b:eb:4c:29:a4:81:40:f0:40:
03:b1:62:e1:21:ba:b0:1b:a8:d7:e3:5e:6f:f1:9b:de:39:47:
20:1a:c4:bc:23:65:d3:f1:33:cc:21:1c:1d:d4:f1:be:72:34:
65:c8:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:59:50 2026 by rpki-client