Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
File: G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft (raw, json)
Hash identifier: sC8E5lagP6wOglujKG0DsEqlSbBVqsxMXW5dpRewFW8=
Subject key identifier: 8F:90:18:42:19:95:E6:FA:32:A5:1C:A0:BD:46:CD:4D:57:CC:AD:51
Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
Certificate issuer: /CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Certificate serial: 01A08B6872F3218FE632F5B00520C4E0D806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
Manifest number: 10DD
Signing time: Thu 10 Sep 2026 13:01:13 +0000
Manifest this update: Thu 10 Sep 2026 13:01:13 +0000
Manifest next update: Fri 11 Sep 2026 13:01:13 +0000
Files and hashes: 1: G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl (hash: dIw4HalCZu6gf8OYGknwHd6xfeLBqZZl3QU+XToHFN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:72:f3:21:8f:e6:32:f5:b0:05:20:c4:e0:d8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Validity
Not Before: Sep 10 13:01:13 2026 GMT
Not After : Sep 11 13:01:13 2026 GMT
Subject: CN=8f9018421995e6fa32a51ca0bd46cd4d57ccad51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:71:67:68:10:84:98:71:19:c4:3d:5f:38:
58:b7:f5:87:48:69:46:4b:a8:0c:fc:6d:ca:aa:3c:
b1:fb:68:ef:6c:11:4a:89:43:2e:37:3a:b3:07:1a:
1d:f0:ae:9e:33:ea:1d:73:ff:d7:45:30:b4:23:ca:
ec:9b:39:c2:c2:07:df:c0:70:bf:bb:07:fd:0f:1d:
76:c8:bf:4f:9e:b7:49:8c:28:25:fe:12:e9:48:21:
67:fa:2a:39:32:42:b1:58:65:d0:5d:a1:9d:f1:05:
46:ed:1b:27:ba:0b:6d:dc:6d:93:da:ab:52:b4:54:
98:b3:7a:fc:73:83:ea:58:25:90:84:d3:7f:a3:d4:
9a:bf:a0:12:65:cc:d3:5b:96:a2:76:df:b5:05:b6:
98:8a:18:87:3e:f5:4f:8c:12:4d:33:81:9f:f6:23:
af:e3:67:4b:b0:d6:85:bf:6e:13:39:35:af:ee:13:
a5:64:cb:b9:e5:8a:9b:df:fa:e6:a5:51:85:09:ff:
eb:91:3b:b7:c7:80:4b:b1:05:f5:b0:46:f0:f4:6f:
63:45:1e:16:5e:f5:50:15:2c:84:fd:f4:42:a4:8b:
fd:bf:06:29:98:e4:0b:ac:d1:cc:43:2d:92:86:8d:
3e:ce:0c:bc:1c:57:70:bc:d4:44:45:0d:e5:d6:03:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:90:18:42:19:95:E6:FA:32:A5:1C:A0:BD:46:CD:4D:57:CC:AD:51
X509v3 Authority Key Identifier:
keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7d:c8:75:34:b8:3c:fd:9f:0e:9e:f2:8a:9d:f5:ae:7b:37:
11:68:31:c8:57:47:d7:eb:04:c8:59:f5:4b:82:f7:59:2e:8b:
5a:fd:90:13:20:a5:4f:1d:f1:81:24:a3:09:b6:d2:14:38:fd:
84:68:e9:4a:29:b0:c7:a0:f3:9e:41:2a:41:d4:b7:f3:40:aa:
07:64:34:de:2c:c6:49:01:cf:18:ed:ea:1f:07:78:ac:f9:82:
39:69:8c:d7:ac:7f:65:f9:a9:8e:e8:ee:53:29:72:cf:bc:33:
16:ad:33:31:88:0e:39:85:1d:77:df:de:71:b6:2f:93:22:ad:
81:b4:90:14:cd:4b:7b:43:c5:48:3e:ee:d6:1b:68:8a:79:9f:
20:4e:9a:67:ad:4c:e2:25:92:00:46:97:14:ef:47:1d:d4:bb:
15:f4:bf:f3:64:0e:4d:5c:66:89:f6:cd:48:d9:b6:af:82:be:
bc:e7:61:cc:a8:88:b2:2e:0d:70:27:b1:d5:18:5b:8c:89:ee:
1e:39:1d:81:bc:3b:45:73:2d:20:24:08:c5:96:00:62:e5:e2:
0e:7e:5c:58:94:6b:50:c1:3d:4a:b0:77:52:be:79:7a:81:a9:
b6:94:2e:31:23:de:1f:37:7a:b4:b7:0d:1c:10:a5:39:ea:b7:
a2:f6:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:08:56 2026 by rpki-client