Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: uKzobk6GjQ0H3KJ1i2NddmFHC0QTH+RmDaBBcvhc7Mg=
Subject key identifier: F6:7F:BB:D4:95:E9:07:EE:83:95:A4:9F:89:2B:7A:1E:57:50:AC:FB
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 01A001DD5FAEE44305E78405DF346B4FB2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0CEC
Signing time: Fri 14 Aug 2026 20:01:20 +0000
Manifest this update: Fri 14 Aug 2026 20:01:20 +0000
Manifest next update: Sat 15 Aug 2026 20:01:20 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: CL0KmMKr8e7ohqwfp+u9gr3zlKpJOO2jKBzaKNAdHUA=)
2: dligzRRVoWtfjy4qlRdbw7o42uM.roa (hash: 2ujZTExymeWh5nps9OWeUYEciPPWZb859+jQp6T2I7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:5f:ae:e4:43:05:e7:84:05:df:34:6b:4f:b2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Aug 14 20:01:20 2026 GMT
Not After : Aug 15 20:01:20 2026 GMT
Subject: CN=f67fbbd495e907ee8395a49f892b7a1e5750acfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:aa:8a:dd:05:21:2e:a9:63:c5:57:2b:e4:93:
d0:8f:7d:3e:e3:16:30:fc:72:02:6c:9c:76:6e:ec:
b7:5a:b1:12:e0:2c:96:1a:95:3e:b0:4c:58:8a:32:
97:16:84:bd:70:5f:b9:a7:c0:24:bc:20:4e:b5:ed:
e5:19:8b:0d:0c:db:47:5f:b9:21:4d:0c:49:23:27:
01:9f:e5:5d:d3:92:fc:b1:76:fe:fc:ed:71:82:44:
73:44:9a:07:54:e9:75:5a:30:08:78:7b:e3:2b:35:
1a:9e:5d:83:68:37:16:bd:86:98:c5:76:92:64:1c:
1e:23:fd:43:bb:9a:08:b4:b7:a1:93:b6:9f:cc:7e:
d1:9a:a0:82:0f:b8:28:d4:72:88:87:23:e7:16:e2:
a7:34:dd:78:8e:80:26:48:22:af:27:07:cf:60:01:
48:b1:a6:13:0f:fd:af:49:9b:b7:4b:82:7e:0e:45:
04:6e:90:28:42:11:ac:6e:f0:c3:b3:51:a5:c9:62:
83:61:77:0c:b3:3f:db:41:00:a8:19:33:6f:87:65:
ce:8c:13:92:cf:a7:3e:0e:23:bc:ef:58:16:15:1a:
f9:fc:bd:a9:c1:9a:ec:6e:33:d1:5d:3a:15:94:40:
43:d8:86:ca:97:c8:8c:4f:6b:5c:69:60:4c:6b:f9:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7F:BB:D4:95:E9:07:EE:83:95:A4:9F:89:2B:7A:1E:57:50:AC:FB
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f8:2b:26:3c:a7:f0:80:ea:4d:01:1f:32:18:fc:5a:0e:b0:
75:c9:41:8c:2d:ce:77:de:6f:65:15:75:d0:a4:8a:18:65:32:
58:b7:0d:cf:ff:e1:bb:e9:c4:06:ff:00:0f:0a:bf:45:c5:ff:
d4:ef:37:94:ec:d2:f7:54:65:58:63:d2:f5:db:a6:21:d5:01:
06:ad:d4:5e:57:2c:27:98:4a:a8:67:4b:19:b8:ea:e2:17:ee:
ba:2a:86:b1:85:76:71:ec:a2:b5:0a:59:77:71:d3:b2:8c:71:
f3:ba:db:a4:d9:66:75:fb:5b:45:48:07:8c:ab:ef:fd:a7:43:
d0:87:4c:31:f3:0c:9e:57:0c:f5:50:3a:fc:a8:ae:46:e4:32:
cd:62:b5:a6:9b:86:bc:c8:25:e2:c8:df:77:8e:74:fd:be:80:
71:5c:3b:97:d7:a4:05:42:24:99:a9:4c:22:03:c6:f6:9a:eb:
87:c9:6c:6b:54:00:25:9e:41:b7:d3:36:8b:0c:96:ce:60:e5:
d9:62:9d:7f:77:bd:3b:7b:cc:47:9b:2f:93:b9:35:a7:c6:6c:
9f:d8:03:2a:bc:c2:a5:b1:ca:8e:94:c0:fa:ef:94:eb:94:52:
46:93:75:3c:42:97:84:2a:81:9e:c7:9a:3d:51:a3:51:9d:10:
06:92:f3:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3V+u5EMF54QF3zRrT7LjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjQ2NjdjMzRhN2RiYjAyZjA1MzBiY2U0ODJkMTFhZDQy
NDg3YmQwHhcNMjYwODE0MjAwMTIwWhcNMjYwODE1MjAwMTIwWjAzMTEwLwYDVQQD
EyhmNjdmYmJkNDk1ZTkwN2VlODM5NWE0OWY4OTJiN2ExZTU3NTBhY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46qK3QUhLqljxVcr5JPQj30+4xYw
/HICbJx2buy3WrES4CyWGpU+sExYijKXFoS9cF+5p8AkvCBOte3lGYsNDNtHX7kh
TQxJIycBn+Vd05L8sXb+/O1xgkRzRJoHVOl1WjAIeHvjKzUanl2DaDcWvYaYxXaS
ZBweI/1Du5oItLehk7afzH7RmqCCD7go1HKIhyPnFuKnNN14joAmSCKvJwfPYAFI
saYTD/2vSZu3S4J+DkUEbpAoQhGsbvDDs1GlyWKDYXcMsz/bQQCoGTNvh2XOjBOS
z6c+DiO871gWFRr5/L2pwZrsbjPRXToVlEBD2IbKl8iMT2tcaWBMa/l8rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ/u9SV6Qfug5Wkn4kreh5XUKz7MB8GA1UdIwQY
MBaAFNRkZnw0p9uwLwUwvOSC0RrUJIe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUt
MjYwZGU2Y2JmNDU2LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUtMjYwZGU2Y2JmNDU2
LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPgrJjyn
8IDqTQEfMhj8Wg6wdclBjC3Od95vZRV10KSKGGUyWLcNz//hu+nEBv8ADwq/RcX/
1O83lOzS91RlWGPS9dumIdUBBq3UXlcsJ5hKqGdLGbjq4hfuuiqGsYV2ceyitQpZ
d3HTsoxx87rbpNlmdftbRUgHjKvv/adD0IdMMfMMnlcM9VA6/KiuRuQyzWK1ppuG
vMgl4sjfd450/b6AcVw7l9ekBUIkmalMIgPG9prrh8lsa1QAJZ5Bt9M2iwyWzmDl
2WKdf3e9O3vMR5svk7k1p8Zsn9gDKrzCpbHKjpTA+u+U65RSRpN1PEKXhCqBnsea
PVGjUZ0QBpLzcw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:59 2026 by rpki-client