Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: aiPJQ9TaC9ZesTmFbXzGoyhlDLqr872baKqLH2KRgX0=
Subject key identifier: 1B:34:6D:F9:FA:5B:F1:17:C1:17:E6:3A:44:22:E1:63:44:BB:7B:25
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 01A12B4440174A98A8F1A0D622C3C370ACBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0D86
Signing time: Sun 11 Oct 2026 14:00:55 +0000
Manifest this update: Sun 11 Oct 2026 14:00:55 +0000
Manifest next update: Mon 12 Oct 2026 14:00:55 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: 4ipDHTrctOjPRAv2RPmdwNrk5nEHiKxy3t4agKehLII=)
2: dligzRRVoWtfjy4qlRdbw7o42uM.roa (hash: 2ujZTExymeWh5nps9OWeUYEciPPWZb859+jQp6T2I7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:40:17:4a:98:a8:f1:a0:d6:22:c3:c3:70:ac:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Oct 11 14:00:55 2026 GMT
Not After : Oct 12 14:00:55 2026 GMT
Subject: CN=1b346df9fa5bf117c117e63a4422e16344bb7b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:16:8c:7c:08:5a:bf:18:e5:8e:ac:e9:71:fa:
cd:21:45:17:ab:30:ef:5b:f9:48:80:15:4f:bb:58:
72:0e:8c:9e:fc:d6:b7:bc:6e:83:3e:ef:56:44:63:
90:e9:e0:73:2d:76:11:2e:34:42:da:d1:f9:fb:4a:
a0:ff:7c:52:02:a2:6f:9f:7b:41:b4:a1:74:29:75:
d3:82:8a:b2:f9:32:de:ba:af:1b:c2:33:1c:bb:0c:
8d:f2:14:89:f7:6c:81:a9:92:e2:47:78:cd:dd:a8:
03:66:dc:42:b9:6a:a2:14:5c:73:c5:eb:3f:56:63:
ed:6c:37:68:15:bf:43:c1:9a:3f:19:23:d7:b7:1b:
f7:30:45:84:1b:b0:57:1e:57:a3:a6:c7:bd:0f:98:
f0:90:1e:78:71:b5:6d:ab:e1:50:7d:94:20:2a:97:
a3:8e:3c:8b:0b:74:7b:47:b6:a6:20:da:4b:53:9e:
a0:51:09:8d:f6:95:23:17:19:4b:2f:4d:10:6b:04:
c8:d1:72:c7:24:cc:83:d9:32:74:99:cb:7f:28:6d:
41:53:36:cc:44:8d:d3:85:7e:39:d3:bc:41:d2:55:
85:72:2b:19:e2:72:50:8e:4b:b2:af:33:a7:74:e7:
f4:80:71:4c:88:58:e2:51:7f:13:c7:77:2d:e7:cb:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:34:6D:F9:FA:5B:F1:17:C1:17:E6:3A:44:22:E1:63:44:BB:7B:25
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:da:ed:c4:63:57:70:6f:17:e6:b4:03:de:bf:76:ba:28:89:
97:c3:9b:8a:ca:75:03:d0:fd:a8:d6:ba:2c:12:bf:95:b0:6f:
3e:78:54:28:70:c3:9d:d5:07:3e:55:80:98:c8:e4:06:d4:f9:
b8:6d:c5:c0:5f:2c:11:19:73:72:f4:b3:31:2a:85:f7:2d:8d:
82:35:07:22:33:89:57:44:99:0e:fa:93:eb:72:48:b9:b1:fd:
01:2a:d1:4d:f1:ab:b0:b0:d6:13:2d:fa:3a:a8:7a:07:5b:cd:
5b:a2:69:88:38:1a:10:16:27:70:a3:37:9d:45:e6:6a:03:f5:
db:ad:79:29:5d:69:7b:c1:ec:26:51:5c:5e:81:c1:15:59:d3:
06:3a:59:13:9a:7a:07:c7:74:89:31:38:ad:cc:92:ee:11:ec:
37:83:e3:46:d8:4b:2e:1d:1f:cb:65:c1:7a:ab:5a:88:5b:4c:
41:81:c0:0e:fd:d6:08:6c:b0:00:93:7c:91:fb:3b:b6:f0:f2:
77:1d:77:8f:6b:12:2b:36:ea:d8:dd:1b:3e:d6:7c:29:ff:22:
24:45:98:fc:f1:a8:0a:b3:9c:3f:70:f8:cb:dc:07:56:74:7e:
63:e0:c1:50:e9:d9:13:21:aa:44:96:6c:17:96:9d:54:10:45:
50:1b:6c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:09:35 2026 by rpki-client