Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
File: 1gKgc6GrxkQ1el-XOO62dqSpPcY.mft (raw, json)
Hash identifier: QkgAez82FKWYFtPIM4Z7VwJNOk8gYu2ms+LYd/s5dlc=
Subject key identifier: 68:C5:B1:64:AC:64:89:A6:51:C0:07:B9:6F:69:2C:73:90:80:8A:A3
Authority key identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
Certificate issuer: /CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Certificate serial: 01A03FA9F99B6AE10D08F5185E52CDB969B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
Manifest number: 03C1
Signing time: Wed 26 Aug 2026 20:01:39 +0000
Manifest this update: Wed 26 Aug 2026 20:01:39 +0000
Manifest next update: Thu 27 Aug 2026 20:01:39 +0000
Files and hashes: 1: 1gKgc6GrxkQ1el-XOO62dqSpPcY.crl (hash: zfx5HJAMwEpPND6ueD0e8L65ypcs/XRbyxysb6W3fw4=)
2: rK0z1TiNfJOaF3HXB1_sAZ-3RlA.roa (hash: WOLvx0AjMY9Du4g/aClrv5eIz8O7Ff49lQ/abQMFyg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:f9:9b:6a:e1:0d:08:f5:18:5e:52:cd:b9:69:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Validity
Not Before: Aug 26 20:01:39 2026 GMT
Not After : Aug 27 20:01:39 2026 GMT
Subject: CN=68c5b164ac6489a651c007b96f692c7390808aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f5:79:6c:38:b7:ec:6d:aa:eb:45:75:c9:ff:
47:66:f6:cb:d1:cf:80:98:62:40:17:d1:e7:37:91:
9f:e3:8c:7c:27:f5:f6:62:5b:23:f7:6e:19:0d:22:
fc:4a:49:39:33:cf:e9:dc:39:72:10:b9:e2:00:13:
23:60:6b:d9:57:73:92:7a:c0:22:b5:04:d7:0e:54:
c3:ed:54:1b:db:b7:28:7d:6c:70:aa:5c:3f:aa:24:
fc:6d:ad:04:54:0b:95:59:49:22:aa:bc:51:75:2e:
e3:06:37:54:53:64:3f:7c:92:66:da:3b:0a:cb:42:
30:97:3b:77:cc:1f:87:46:a4:f8:0a:44:94:4e:46:
b8:bc:da:60:ac:66:db:ab:14:0c:3f:74:24:fe:f4:
2b:6d:4d:d2:4c:a0:0c:32:cb:e5:f7:44:36:04:3c:
f0:1c:f1:53:c6:a5:b2:ab:88:cc:f8:9f:8b:37:e8:
0f:42:e5:e3:0e:a5:c0:cc:1a:48:fc:87:03:2f:61:
50:31:8d:cd:de:e0:ff:c5:0c:a4:3c:6c:a6:99:78:
48:c2:ac:7e:2f:76:08:6a:be:e4:ed:e4:46:f2:59:
d8:10:1e:8b:2f:35:20:30:c4:f1:f8:e9:d6:fc:57:
33:92:e0:e4:0d:fb:52:60:06:1d:12:3a:c2:d3:91:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C5:B1:64:AC:64:89:A6:51:C0:07:B9:6F:69:2C:73:90:80:8A:A3
X509v3 Authority Key Identifier:
keyid:D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4e:81:1a:9f:3d:e1:e4:bf:de:28:32:52:52:84:da:d2:87:
3b:e5:0f:d5:95:64:d4:6f:a1:aa:61:e6:01:be:78:1d:8a:4f:
fc:4d:dd:ab:36:32:30:9e:ed:5b:a9:b3:68:e2:46:6c:b4:27:
bf:16:fa:fa:4b:0e:fe:36:d7:da:96:b1:45:1a:50:05:01:aa:
4b:f3:db:2f:d8:34:36:9a:a1:1c:db:59:00:78:87:bd:d3:3e:
04:aa:92:14:e5:b1:c7:6e:d2:4c:f1:66:51:0f:a7:6b:82:f7:
70:4a:79:d6:61:43:7e:db:45:b4:c0:f7:9c:8a:66:33:9c:4a:
10:a5:36:e1:49:2e:fa:51:2d:9a:93:c1:6b:29:c6:c0:15:29:
bb:bc:ef:a6:27:41:f1:3c:ce:ee:d3:bf:05:ea:22:ee:ef:98:
ba:6b:71:81:6f:01:33:03:9e:1c:ca:84:8a:c3:c0:2e:27:df:
a5:11:c8:40:5a:b0:28:ae:c4:41:7b:3f:ca:9c:ad:8f:39:ad:
52:44:55:fc:8c:01:5b:6e:47:a7:31:8a:01:3b:be:4f:20:c6:
13:52:0b:8e:13:fd:f0:af:e6:ec:11:a1:cc:60:60:4a:6d:c7:
35:1c:d4:14:79:24:04:f3:1b:c7:d7:28:bd:a3:07:d3:85:aa:
00:7a:39:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:00 2026 by rpki-client