Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
File: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft (raw, json)
Hash identifier: IOTQDtvZDI8FntUYHy4wTH6b5cx42KzPQHJd2/R+Ks4=
Subject key identifier: 3B:38:7B:02:BD:DF:A0:E2:DA:B8:38:5D:2D:B8:6D:28:5F:D0:B3:B1
Authority key identifier: D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
Certificate issuer: /CN=d60ce3443860a7f70d43350776909a4810a48621
Certificate serial: 01A13DB7C59549B36EBB8DF8E4D3DDB95E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
Manifest number: 0FE9
Signing time: Thu 15 Oct 2026 04:00:16 +0000
Manifest this update: Thu 15 Oct 2026 04:00:16 +0000
Manifest next update: Fri 16 Oct 2026 04:00:16 +0000
Files and hashes: 1: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl (hash: Eg8paDS3ouj3D0lARFg6XG5Gd9g9y/zCSAGsVtK+0F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:c5:95:49:b3:6e:bb:8d:f8:e4:d3:dd:b9:5e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60ce3443860a7f70d43350776909a4810a48621
Validity
Not Before: Oct 15 04:00:16 2026 GMT
Not After : Oct 16 04:00:16 2026 GMT
Subject: CN=3b387b02bddfa0e2dab8385d2db86d285fd0b3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:4f:19:c5:dc:6b:5b:8f:c5:c7:b6:f6:98:
1b:c0:1d:24:ac:e1:40:0d:7f:75:f5:c1:a2:a4:84:
b9:6d:96:2d:4e:9e:f4:ee:e6:c4:16:4a:04:5e:93:
96:c4:6e:57:63:14:86:d8:c4:50:9e:f5:21:a7:90:
92:e9:7e:84:12:af:4a:c4:b7:40:fc:0f:6f:af:50:
f6:8d:36:03:e5:83:b8:3c:00:55:a4:f6:05:16:f6:
3b:38:c9:9d:04:0e:6a:ce:20:2c:d5:cb:6d:58:f8:
16:29:94:b8:1a:0a:51:b8:6b:89:6d:88:b2:90:86:
1b:17:29:ce:f5:53:2d:b2:9f:98:be:49:65:d6:71:
8d:a2:77:12:37:13:3b:a2:f6:82:8e:ed:16:85:43:
f5:ff:0a:e3:84:de:e0:96:7c:e3:f5:4f:b1:b9:3b:
e5:1a:84:fc:6b:5e:88:96:ec:51:c3:75:c1:20:26:
ee:7c:01:41:02:ee:34:a0:a4:2d:41:9f:cf:ea:43:
45:cb:88:02:76:50:da:77:78:10:e2:17:73:ea:98:
4d:1d:4e:91:0b:39:20:c3:9f:39:74:7e:a4:9f:00:
e1:a1:cd:27:34:cf:8c:58:f1:01:ba:03:15:32:d9:
51:c3:9b:ee:7f:2d:c5:aa:c8:b9:72:d2:98:83:79:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:7B:02:BD:DF:A0:E2:DA:B8:38:5D:2D:B8:6D:28:5F:D0:B3:B1
X509v3 Authority Key Identifier:
keyid:D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:12:7d:c9:fc:60:37:03:8c:52:40:ef:10:90:55:bd:99:ec:
d4:8d:76:74:7e:63:69:76:af:17:85:c9:5e:0f:8b:19:18:13:
e0:a6:e5:cf:70:7a:7e:65:9f:53:87:8c:fc:d3:13:82:ee:f1:
5c:77:99:ac:01:9c:90:9d:6b:89:b3:6f:ed:c0:6a:d0:ee:cd:
c3:ae:7a:5e:19:2b:d2:d1:6f:91:f3:5f:17:a6:40:50:e6:65:
0e:8b:18:7b:40:3f:b8:43:ab:6e:b1:4e:09:73:cc:34:d5:c7:
54:bf:1e:06:15:78:33:84:68:52:6f:72:eb:21:5f:ad:48:94:
30:1a:22:f9:2a:db:00:8e:1a:fc:d5:ea:b0:b3:8b:9a:43:dd:
b2:cb:ac:2a:23:b5:f1:17:40:ed:3d:e9:3d:e1:3a:7d:52:5d:
d4:e7:32:64:51:58:30:20:44:b5:b4:4c:81:52:cf:dd:a9:bb:
80:9c:15:d4:3c:be:d6:ca:8a:af:8f:38:c5:a1:d6:d3:57:41:
0b:68:3d:1b:79:bb:7d:01:fd:bd:3f:2d:38:2f:cf:8b:ab:d7:
8c:04:82:a2:c7:93:92:da:e6:f7:cb:4c:00:50:bc:da:3b:b7:
11:90:a9:a4:2f:3b:0c:63:c4:6e:c1:42:55:ee:07:38:e4:41:
5f:ab:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:36:17 2026 by rpki-client