Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File: 1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier: 59KKoQ4+TWsrYQTp54WuQuLQoA5IGZcreA3LCsX8KLk=
Subject key identifier: D3:25:D5:9E:13:B9:4B:BB:7F:B2:8B:16:05:83:80:12:D4:36:D8:B5
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer: /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial: 01A13DEEBBAF8B18C1989AB3529515E21F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number: 10C3
Signing time: Thu 15 Oct 2026 05:00:17 +0000
Manifest this update: Thu 15 Oct 2026 05:00:17 +0000
Manifest next update: Fri 16 Oct 2026 05:00:17 +0000
Files and hashes: 1: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: /a/ZgwK6xooCL0RN3fmNT4iKrQm6LuyZdOwT5lU/iq8=)
2: j23BZZk_JCF_SfyfxVWcOAzB598.roa (hash: E3VUgy7wmstrKfM+/rHOKE3M1MtzxmFo74y/4C1q9hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:bb:af:8b:18:c1:98:9a:b3:52:95:15:e2:1f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Validity
Not Before: Oct 15 05:00:17 2026 GMT
Not After : Oct 16 05:00:17 2026 GMT
Subject: CN=d325d59e13b94bbb7fb28b1605838012d436d8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1f:1c:81:b3:4e:30:e4:a9:1d:45:76:1a:8a:
3e:b0:c9:20:9d:a2:0f:d1:b5:99:ec:48:12:e4:c1:
a8:7d:c9:0d:da:31:1e:5b:dd:08:c7:64:13:2e:b5:
30:84:b4:c5:9a:59:c8:8d:e7:46:79:03:49:a4:99:
c5:c7:63:dd:f1:31:1e:79:2c:0a:15:c1:d8:39:2f:
2e:07:e7:78:3f:61:c0:fb:47:a4:db:18:23:71:a5:
94:08:be:8d:c5:c9:f2:01:d5:ba:7d:1d:98:aa:a0:
be:a9:68:60:f6:92:78:1c:97:a8:75:0e:58:a3:60:
4d:d2:f9:c1:e3:64:f0:e1:2c:f8:27:c2:27:f9:71:
f4:24:19:d4:7f:e0:12:48:52:c9:e2:1e:98:5e:00:
81:88:6d:1d:40:ee:43:69:9a:fb:10:87:3a:1d:e1:
02:6c:c2:f6:92:3d:f9:4b:a7:d5:f4:b6:63:5d:ff:
5e:1c:4f:8e:11:aa:eb:c7:3f:8d:56:92:42:f8:d2:
59:46:91:72:b5:52:46:b1:07:1d:9b:1c:4e:d0:49:
cf:43:e8:45:29:c7:e4:ea:f3:bf:46:80:78:39:97:
b9:36:87:fd:21:c6:27:64:42:c1:11:fc:26:31:5a:
80:68:77:51:10:64:d2:ff:37:f5:9a:a8:42:12:17:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:25:D5:9E:13:B9:4B:BB:7F:B2:8B:16:05:83:80:12:D4:36:D8:B5
X509v3 Authority Key Identifier:
keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b7:a6:7e:88:d4:05:8e:2f:15:46:56:e5:96:18:6a:46:90:
e0:1e:91:b4:f9:6d:33:06:7a:c5:bf:1d:7b:a4:c5:e4:5e:bd:
c3:c6:62:ed:73:5d:fa:56:dd:7c:93:b0:1f:9e:d7:fa:f0:5e:
72:a4:9a:f1:33:46:4f:66:97:30:37:b1:c8:b1:e8:48:0f:3a:
6e:c7:4f:68:f4:65:95:9e:27:f8:33:1f:43:8b:1a:85:e3:d9:
a1:b7:f0:07:50:da:ab:8c:e7:74:ea:eb:d1:08:80:a1:2c:f1:
2c:a4:43:20:5b:fa:3d:d4:35:69:40:ca:3d:10:c3:db:83:c1:
77:ec:3c:2b:dd:c6:19:98:38:4b:0a:d1:9b:90:ff:ba:1d:59:
60:d8:be:7e:ef:65:a9:c7:ef:a9:b1:7f:7b:b4:8d:dc:e1:ed:
aa:b5:58:ff:2c:11:ea:eb:04:e5:f9:d4:c2:e3:a0:02:45:9a:
4c:c2:17:99:34:6b:4d:04:e1:d3:73:8a:08:68:c3:c8:db:42:
70:97:bf:f6:ce:10:d4:9d:91:c5:38:31:a0:6d:30:d3:38:eb:
18:a0:29:80:4d:54:91:1e:37:fa:60:da:a0:b5:c5:b1:23:2d:
81:b6:7a:70:99:99:5c:99:7e:c5:f0:48:93:9f:a6:a1:2c:ea:
d3:c9:f9:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE97ruvixjBmJqzUpUV4h9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjJmOWIxYzBmNmZhOWNhNTMxNzY0ZTI2ZDNhZWQyMTFi
ZmVkODEwHhcNMjYxMDE1MDUwMDE3WhcNMjYxMDE2MDUwMDE3WjAzMTEwLwYDVQQD
EyhkMzI1ZDU5ZTEzYjk0YmJiN2ZiMjhiMTYwNTgzODAxMmQ0MzZkOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR8cgbNOMOSpHUV2Goo+sMkgnaIP
0bWZ7EgS5MGofckN2jEeW90Ix2QTLrUwhLTFmlnIjedGeQNJpJnFx2Pd8TEeeSwK
FcHYOS8uB+d4P2HA+0ek2xgjcaWUCL6NxcnyAdW6fR2YqqC+qWhg9pJ4HJeodQ5Y
o2BN0vnB42Tw4Sz4J8In+XH0JBnUf+ASSFLJ4h6YXgCBiG0dQO5DaZr7EIc6HeEC
bML2kj35S6fV9LZjXf9eHE+OEarrxz+NVpJC+NJZRpFytVJGsQcdmxxO0EnPQ+hF
Kcfk6vO/RoB4OZe5Nof9IcYnZELBEfwmMVqAaHdREGTS/zf1mqhCEhdEMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMl1Z4TuUu7f7KLFgWDgBLUNti1MB8GA1UdIwQY
MBaAFNRi+bHA9vqcpTF2TibTrtIRv+2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdMNXNjRDItcHlsTVhaT0p0T3UwaEdfN1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMDBjODEtNTZmNS00ZGI2LWE2NmEt
YjEwNDNiNjM1YTFlLzEvMUdMNXNjRDItcHlsTVhaT0p0T3UwaEdfN1lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xMDBjODEtNTZmNS00ZGI2LWE2NmEtYjEwNDNiNjM1YTFl
LzEvMUdMNXNjRDItcHlsTVhaT0p0T3UwaEdfN1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKremfojU
BY4vFUZW5ZYYakaQ4B6RtPltMwZ6xb8de6TF5F69w8Zi7XNd+lbdfJOwH57X+vBe
cqSa8TNGT2aXMDexyLHoSA86bsdPaPRllZ4n+DMfQ4sahePZobfwB1Daq4zndOrr
0QiAoSzxLKRDIFv6PdQ1aUDKPRDD24PBd+w8K93GGZg4SwrRm5D/uh1ZYNi+fu9l
qcfvqbF/e7SN3OHtqrVY/ywR6usE5fnUwuOgAkWaTMIXmTRrTQTh03OKCGjDyNtC
cJe/9s4Q1J2RxTgxoG0w0zjrGKApgE1UkR43+mDaoLXFsSMtgbZ6cJmZXJl+xfBI
k5+moSzq08n52g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:21 2026 by rpki-client