Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier: StE86ZtXB3QoJMZGs1eSuk/PVKbsyVYMvVBCfeM6fGs=
Subject key identifier: 52:FD:C8:A1:88:EA:27:D5:23:56:51:3C:F7:9D:37:E1:49:6B:92:D1
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer: /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial: 01A15B1E8C1CE06503D2A3101F61827CBE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number: 1581
Signing time: Tue 20 Oct 2026 21:01:30 +0000
Manifest this update: Tue 20 Oct 2026 21:01:30 +0000
Manifest next update: Wed 21 Oct 2026 21:01:30 +0000
Files and hashes: 1: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: nx8N3DZuX5EqlnwTEoIYYYUAq1/9KMTACGJ6SmGLUhI=)
2: VF3A5uqK3baTRWsNVPe20tVkhMU.roa (hash: oCRuLVCgV+aXZr+hRj4Ct4VJ7B5cjA1VYigwMKDagmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:1e:8c:1c:e0:65:03:d2:a3:10:1f:61:82:7c:be:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Validity
Not Before: Oct 20 21:01:30 2026 GMT
Not After : Oct 21 21:01:30 2026 GMT
Subject: CN=52fdc8a188ea27d52356513cf79d37e1496b92d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:62:ba:4c:45:54:29:60:af:18:16:9f:85:
a8:8b:d0:c4:d7:a9:f4:7d:fe:87:cb:c7:e9:e4:8c:
76:de:db:54:56:79:2a:dd:6b:b9:ce:fa:d5:51:1b:
12:44:26:d9:5a:19:79:e8:7b:18:2e:2b:70:3b:31:
99:91:0d:e6:ae:6d:f3:27:44:76:63:fe:6e:f7:ce:
f3:11:c3:50:4e:f9:2b:b1:ec:59:ab:d3:5f:73:5c:
0d:7a:74:37:9b:e1:15:e2:b1:70:7e:4b:15:51:41:
8d:2b:42:bf:fb:ef:7d:49:e8:aa:8c:a8:90:60:40:
57:b1:49:8e:67:f3:10:43:aa:e7:99:3d:38:df:d6:
38:b2:af:27:02:4d:b8:2a:32:c9:15:99:6c:88:0f:
8f:ea:7e:a8:33:79:a4:3d:27:13:d5:da:9d:d6:0c:
1a:8d:58:ea:02:21:8a:57:ce:f8:50:45:0f:16:ae:
21:89:1d:b6:15:db:b7:5e:44:63:9d:cf:92:57:2d:
d3:14:f5:d7:e3:98:fb:c6:0a:16:f6:d9:3e:e6:54:
0c:fb:4e:fb:61:bd:76:87:ea:a1:4c:ca:9a:67:31:
d5:7b:b7:6d:38:77:fb:57:e2:15:82:bf:68:b0:9b:
e0:27:3e:9a:3a:c8:ad:7f:7a:db:b7:e7:b9:3b:bc:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FD:C8:A1:88:EA:27:D5:23:56:51:3C:F7:9D:37:E1:49:6B:92:D1
X509v3 Authority Key Identifier:
keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:a0:48:ef:c0:36:b2:d8:11:0c:7c:e6:59:da:03:c3:07:70:
ef:c0:d3:b9:c7:f4:e8:a3:f1:94:af:54:ea:75:04:3a:ae:38:
6d:7d:08:50:47:07:c5:7a:a4:50:a9:5a:74:4e:0a:3f:0f:32:
10:79:d4:d8:ee:3c:b5:dc:b9:5b:36:0a:ab:2c:f6:53:4e:bf:
39:a3:c1:d2:de:ba:c6:12:2a:2a:78:1a:54:a1:b1:5a:ab:32:
0c:7a:bb:09:14:4d:fc:d9:2c:13:b2:20:cf:c6:fa:3c:5a:67:
4f:28:e2:de:60:01:6a:83:72:ae:b7:99:f0:ac:aa:20:96:f1:
57:1f:1c:f6:73:26:35:ab:0b:e3:a8:5a:c6:36:ad:62:1f:3c:
b1:01:2f:ac:a3:d0:73:3c:ee:83:74:e8:12:00:81:e6:ca:46:
09:20:c2:7a:75:1c:e2:9f:52:1b:f1:e6:90:14:ab:5a:f6:3b:
b5:5f:96:b1:f5:36:80:34:d6:d9:11:7a:85:34:f3:36:6f:a2:
56:66:92:ab:4e:dc:0d:84:11:42:72:92:6f:32:23:63:9b:22:
79:8c:68:1a:af:81:83:c9:ca:4e:71:3a:61:ba:55:6b:df:ba:
f9:df:15:c4:90:25:72:44:3d:e2:5a:ed:6c:2b:21:b7:12:b9:
d2:09:e3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:45:44 2026 by rpki-client