Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
File: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft (raw, json)
Hash identifier: 6HGG8BSKTzEmFpWFXsqCAgSttt96jUkc9O8bAleL4cI=
Subject key identifier: 01:EA:4A:AC:69:8E:F4:2D:F9:68:63:F1:AE:A1:60:9A:87:05:97:14
Authority key identifier: D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
Certificate issuer: /CN=d60ce3443860a7f70d43350776909a4810a48621
Certificate serial: 01A001016B8C82A998FD05257C43E4A10A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
Manifest number: 0F45
Signing time: Fri 14 Aug 2026 16:01:05 +0000
Manifest this update: Fri 14 Aug 2026 16:01:05 +0000
Manifest next update: Sat 15 Aug 2026 16:01:05 +0000
Files and hashes: 1: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl (hash: D+3WYbXOWBE/0h4Z3kwQopFjsyYNM7W8+VIL7heG2NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:6b:8c:82:a9:98:fd:05:25:7c:43:e4:a1:0a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60ce3443860a7f70d43350776909a4810a48621
Validity
Not Before: Aug 14 16:01:05 2026 GMT
Not After : Aug 15 16:01:05 2026 GMT
Subject: CN=01ea4aac698ef42df96863f1aea1609a87059714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:c3:f6:06:ff:3f:bc:b1:09:58:6c:35:39:
d1:d5:28:84:d7:92:c9:19:ff:bd:19:32:63:be:0d:
d9:83:f3:12:e6:92:d4:22:f5:ea:71:46:13:58:43:
10:ba:60:06:e0:24:57:05:01:fd:d8:1a:84:a0:ea:
16:05:2d:9c:3b:e4:76:33:45:eb:19:4f:e9:50:7b:
7b:67:8f:4c:c9:b4:70:14:b0:50:f2:fc:d1:a0:c3:
36:05:a5:43:d8:6a:8b:de:55:e2:67:8c:ed:87:b0:
8f:50:9a:f6:d2:b8:6e:54:b6:b4:17:f5:98:94:e2:
87:94:38:d6:f0:74:1b:c5:6e:6a:f9:65:87:f5:f2:
ac:46:58:0c:83:50:1b:67:2f:fe:ca:2b:bc:4e:31:
fd:d4:f6:2b:52:70:f7:87:39:76:83:4c:02:06:49:
df:92:f4:09:d5:df:b0:7a:fb:dc:98:e9:ea:30:06:
1b:d7:b8:36:33:3f:9a:30:48:00:35:c4:99:ac:c3:
ac:b0:1e:74:57:40:1a:eb:f9:82:d9:7d:ca:74:81:
7d:4e:d8:11:1c:f8:b7:2b:62:d3:37:4a:9e:63:b7:
fe:5c:4c:25:99:32:dc:25:97:77:57:e2:be:e2:91:
92:85:a6:79:99:0e:e1:55:d5:6a:f0:83:25:2d:2e:
fc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EA:4A:AC:69:8E:F4:2D:F9:68:63:F1:AE:A1:60:9A:87:05:97:14
X509v3 Authority Key Identifier:
keyid:D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d9:62:b7:15:b4:f5:9e:a5:2d:28:f2:bd:aa:78:dd:7a:78:
06:84:65:89:e9:eb:1f:b5:25:a0:58:eb:f0:26:b1:44:53:e0:
c1:15:c4:c0:c8:b7:fa:b8:d1:0e:e4:e0:ab:52:b8:73:3f:9e:
15:51:8f:db:32:f3:08:74:70:74:61:16:cc:b7:bb:be:6a:c5:
f5:f0:7c:c0:d3:ff:86:67:6a:7a:a2:88:6d:14:fd:f6:1b:29:
7b:60:ed:59:3d:88:c9:f4:3c:54:ef:76:36:f7:1e:ce:a2:be:
b7:5a:60:f3:bf:df:4b:c3:50:a4:de:a9:43:e8:29:66:80:7d:
bc:6d:67:29:0d:70:e0:67:60:d9:6c:3a:29:fd:86:6e:2a:b8:
28:00:71:c6:a9:f1:96:87:a2:36:5a:89:41:42:6d:5d:1d:72:
f6:20:27:4d:6b:59:a9:39:23:0d:60:ac:42:5b:12:f6:df:49:
b8:80:e7:8e:a6:bf:08:1d:d4:98:e5:92:83:6c:ab:cd:6b:74:
17:ba:a0:30:68:38:e0:c3:b5:00:e4:d0:e8:e5:4c:59:34:56:
4f:e4:08:8a:ea:d5:c9:c7:83:63:6d:1d:c3:82:1d:a8:1e:9d:
f6:81:02:92:ea:d4:10:c6:24:49:91:cb:b8:92:f7:57:f9:63:
11:40:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:51 2026 by rpki-client