Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier: s71zBJ05yJ2P8iyE1pVD40hCr1q75NGnoRa54AqOd3c=
Subject key identifier: 48:7F:4C:9B:C9:DF:C1:D3:70:93:9E:4A:22:21:49:BD:F4:15:C0:E5
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer: /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial: 01A0D45D75E4A3EC0C82F9E337EFEACCCEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 17:01:29 +0000
Manifest this update: Thu 24 Sep 2026 17:01:29 +0000
Manifest next update: Fri 25 Sep 2026 17:01:29 +0000
Files and hashes: 1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: opHIhGI6azIxkTbbCDu43KvlfAjbMpC92tG4GY0xXoQ=)
2: R5kKLGujwVyN11kdJlzsqOL8oRw.roa (hash: cDKxoErZto4JESswwKsE0Hav5uBoVZS9w/0qja84b7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:75:e4:a3:ec:0c:82:f9:e3:37:ef:ea:cc:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Validity
Not Before: Sep 24 17:01:29 2026 GMT
Not After : Sep 25 17:01:29 2026 GMT
Subject: CN=487f4c9bc9dfc1d370939e4a222149bdf415c0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:66:79:d3:75:e1:60:b4:fc:8e:fe:4d:62:95:
e1:35:16:0f:10:ce:54:4b:87:61:80:0d:2b:dc:55:
46:a6:b5:f4:87:1f:66:9f:90:e0:88:98:ec:de:e2:
f8:51:f6:ee:b1:59:43:50:57:af:26:c1:94:1d:c5:
ff:70:dc:20:ce:8c:b9:c3:f8:f2:56:7c:49:6d:98:
44:5d:a2:a2:34:26:3f:c0:34:ee:f8:81:d5:db:0b:
7b:2a:e4:66:60:86:b3:00:d7:a1:67:c9:0f:4d:20:
0c:2c:4d:db:03:ea:6c:3a:a4:77:1f:a5:db:44:a2:
61:00:28:3f:94:d2:27:f6:d3:5e:33:e8:88:36:4b:
7a:8a:63:f6:9b:91:29:b7:40:44:63:84:4c:8c:44:
a0:61:d5:22:c4:a3:99:f4:34:62:4d:e7:8d:31:80:
85:48:98:d7:df:30:53:49:b7:de:58:ff:86:c1:81:
e6:d0:c5:3c:33:ed:02:3e:25:3c:6b:e9:3b:b0:a6:
18:49:a7:1f:14:54:96:80:4c:5d:60:50:2c:30:4e:
e8:cd:3c:7d:5e:16:ac:5e:05:10:61:1e:bd:44:cc:
1c:29:a1:e0:f3:71:75:19:bc:81:16:ad:9f:ee:c7:
8e:93:cb:ca:75:fc:ed:31:2e:16:9f:9d:30:d7:c5:
65:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7F:4C:9B:C9:DF:C1:D3:70:93:9E:4A:22:21:49:BD:F4:15:C0:E5
X509v3 Authority Key Identifier:
keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7e:7c:7b:26:53:ca:0e:da:84:35:2f:0a:26:c2:5b:6d:bc:
9d:6d:dc:3f:c0:9b:cf:9e:b6:e7:3a:6c:5a:d3:46:35:70:4a:
5e:7d:93:a9:22:c4:94:f1:46:76:83:a1:25:f0:c5:15:41:c6:
27:98:f1:84:ec:54:a1:52:ec:5c:3d:06:87:ac:40:93:59:db:
33:dc:c7:6c:65:31:1a:56:37:93:da:bc:80:19:b2:2c:60:3e:
22:4d:6e:2f:d3:1a:db:86:d6:14:d5:39:ef:59:cd:df:b8:2b:
09:52:8e:8c:99:fe:f1:68:00:0a:ae:03:4b:b9:54:92:8a:f7:
db:a2:e6:11:d2:ef:59:d9:fa:02:c9:b8:dc:36:47:2d:ae:cb:
dc:ab:51:ac:46:22:fa:e6:fa:42:19:05:82:fd:da:be:40:f1:
02:ed:e8:24:33:89:57:4b:ed:09:fa:9d:81:ea:6e:0c:07:03:
8f:5d:69:78:bb:26:d4:73:c1:86:49:ca:b8:04:f1:09:3d:f9:
92:a3:b0:e4:98:5c:51:10:81:34:05:61:bc:7d:a5:4d:c3:67:
2a:86:2d:21:47:55:53:af:16:2a:68:5e:0b:99:6e:a6:1b:fd:
bb:b4:3d:62:71:80:d5:4b:f1:c6:58:eb:d2:d2:ee:f6:40:2b:
5c:c9:85:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:54:10 2026 by rpki-client