Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
File: 1gKgc6GrxkQ1el-XOO62dqSpPcY.mft (raw, json)
Hash identifier: N/YvCqmnZ6dWkI1qIyabIGJ7UycHy0uJwOlV6l0A2mQ=
Subject key identifier: 67:AA:B8:DA:E3:37:C4:3F:3E:38:73:E8:51:79:82:E4:22:C4:25:DA
Authority key identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
Certificate issuer: /CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Certificate serial: 019D37C031D4F46FA0E096DC8EC7A580B0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
Manifest number: 022F
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: 1gKgc6GrxkQ1el-XOO62dqSpPcY.crl (hash: ROB1sf6adqZNoMEZsLg0jBdISfLDTB7h2K/BeHFDgxo=)
2: M0TOyn3Fajg4bXPrKGJxN9Hvjss.roa (hash: iz1xOigpd52YAYJIyKzuYKInMpgIKrWsoBQltN69+EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:31:d4:f4:6f:a0:e0:96:dc:8e:c7:a5:80:b0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=67aab8dae337c43f3e3873e8517982e422c425da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:91:2f:f1:d6:34:a3:df:27:ea:f1:e6:37:
ef:ab:2b:13:56:e1:10:d7:56:c7:d5:74:bb:d3:86:
4f:55:d5:86:76:e9:a6:f5:f5:6a:80:7f:aa:23:fa:
09:b1:d2:a7:cc:ea:c9:c1:ce:51:bd:de:f5:d1:8c:
e2:c8:9e:7b:ae:54:6b:3a:a4:5b:21:99:d4:55:f6:
30:79:fc:ce:54:b0:6f:9d:5d:bf:6f:c8:b8:20:4d:
f5:50:28:52:cd:02:fa:7b:59:86:23:cc:d4:9e:c8:
8a:87:19:7c:f3:9b:1e:b2:50:41:07:38:f5:66:bd:
c2:da:0a:a8:cc:e0:55:39:0e:9f:43:53:17:13:d4:
ee:ea:20:1b:2a:0c:d1:6e:df:1e:40:df:cd:ed:14:
15:d5:71:de:9d:4f:2a:2e:af:d5:c7:44:1b:2d:5e:
e4:7f:ca:74:b4:c2:f9:59:f2:d8:c6:16:2c:83:08:
dc:f1:81:6e:35:d7:5e:78:64:51:03:74:7f:e4:8c:
61:cc:0a:f3:84:85:4e:a6:ca:2b:e7:04:4e:9d:63:
7c:1e:99:91:58:6c:5c:f7:f7:96:e6:dd:16:83:2e:
e4:1a:86:44:c4:fa:3f:53:1e:7f:b9:65:38:1f:2b:
99:8b:31:f9:73:13:1a:17:56:db:11:cf:f5:90:f2:
eb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AA:B8:DA:E3:37:C4:3F:3E:38:73:E8:51:79:82:E4:22:C4:25:DA
X509v3 Authority Key Identifier:
keyid:D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c8:e8:7f:4c:d1:35:1c:f3:80:fc:fa:53:3d:eb:e2:af:d5:
16:90:30:e3:a9:4a:79:40:8a:f3:e6:54:f8:20:94:f4:ad:91:
ee:d5:9b:82:51:89:0b:6d:26:07:7a:f3:d9:a6:4a:c4:af:ff:
6e:9e:c2:40:4a:a3:b0:a7:b4:fe:0a:68:a1:e2:62:69:26:98:
34:bc:36:1b:bb:6a:7b:85:a6:ed:d2:d7:5a:3e:6d:db:2f:6a:
53:c7:fa:60:46:56:8c:72:51:20:85:a0:6c:f4:d6:e0:4f:e1:
93:d0:01:6f:92:a3:bb:86:c3:a8:dd:d3:8a:52:d8:9e:28:8c:
ce:b5:27:1c:5c:74:04:c0:75:90:99:49:cc:04:7b:ef:f7:60:
bb:25:c7:0e:7a:c3:5c:dc:05:f2:05:bc:18:ad:54:53:38:62:
dd:2d:e2:7c:8b:33:03:2c:f7:5d:fb:d1:71:58:26:02:cf:02:
ac:ac:fe:1e:86:48:ee:48:bf:f1:d8:b4:70:48:4b:a9:a7:1f:
e3:a7:49:be:70:62:23:3b:e7:36:2f:8f:68:8e:f7:f0:c6:24:
2f:86:2f:e7:f2:65:ec:fe:a1:d8:c8:1a:88:d0:55:81:fd:43:
a6:99:c9:6d:a2:2b:c7:35:77:0e:39:da:bc:11:22:56:54:f8:
a8:62:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:16 2026 by rpki-client