Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.mft
File: g95n01Eg9Y_rQvF0KXUkbj6GhYw.mft (raw, json)
Hash identifier: Mho3Y+cUz3E73/6hKPaIpEINwJ7FRdOVA2ScELlJSK8=
Subject key identifier: 15:04:D8:DC:9B:B0:37:34:B9:14:E9:ED:1B:04:3B:20:8D:EC:17:9A
Authority key identifier: 83:DE:67:D3:51:20:F5:8F:EB:42:F1:74:29:75:24:6E:3E:86:85:8C
Certificate issuer: /CN=83de67d35120f58feb42f1742975246e3e86858c
Certificate serial: 01A0E6633A63293BC19EDBEA8820B14A7F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g95n01Eg9Y_rQvF0KXUkbj6GhYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.mft
Manifest number: 7F
Signing time: Mon 28 Sep 2026 05:00:57 +0000
Manifest this update: Mon 28 Sep 2026 05:00:57 +0000
Manifest next update: Tue 29 Sep 2026 05:00:57 +0000
Files and hashes: 1: VbKJonlhe1F5DkNoQxo7uZm3120.roa (hash: GBv6fwxw0ftuofIeqMxid8GFdyjI4W6j2/qOfqs8Jmo=)
2: g95n01Eg9Y_rQvF0KXUkbj6GhYw.crl (hash: nLPvKRMCebOc2+6n6cVrblWC/8HMkfVdBJzMLfkPdH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g95n01Eg9Y_rQvF0KXUkbj6GhYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:3a:63:29:3b:c1:9e:db:ea:88:20:b1:4a:7f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83de67d35120f58feb42f1742975246e3e86858c
Validity
Not Before: Sep 28 05:00:57 2026 GMT
Not After : Sep 29 05:00:57 2026 GMT
Subject: CN=1504d8dc9bb03734b914e9ed1b043b208dec179a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:f3:24:37:06:8a:11:30:ae:96:14:63:c1:
93:ae:f0:72:72:da:2e:71:f5:3a:75:88:98:c6:b1:
4f:8d:fb:00:88:c1:e9:e0:be:7d:4a:46:e5:0e:13:
07:86:14:0d:1e:db:37:e5:95:cc:38:04:ba:8c:e5:
52:3b:38:ff:de:9d:17:35:54:5a:eb:d2:ae:51:fa:
21:44:e5:3a:df:7e:30:9e:2a:b3:14:0f:02:53:0a:
eb:60:04:69:ab:cc:9b:13:ba:d3:60:e7:4f:e9:97:
af:0c:c9:a7:4c:4d:ce:49:87:95:d8:5b:0e:d2:73:
54:b4:56:12:11:05:80:9e:7e:08:60:2a:11:6a:fb:
32:13:36:a4:39:cc:32:93:f7:62:cb:1a:f8:53:36:
21:9f:15:ee:6f:9b:47:46:46:ba:32:84:76:6a:f8:
c1:27:57:5b:39:75:54:8a:bd:ca:c9:3a:7c:36:08:
32:87:a1:60:ee:35:05:0c:f1:96:c9:e9:c5:33:0c:
7f:49:41:a2:2d:32:1d:9e:3f:b2:b8:59:f2:74:a1:
ec:a4:11:cf:52:13:a4:0b:d6:6a:ad:dd:fc:33:bb:
77:dd:01:33:1c:67:1d:2c:f7:fc:2a:50:7c:1d:51:
3a:4f:d4:89:a0:d8:94:98:be:2f:10:8d:f4:f1:c0:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:04:D8:DC:9B:B0:37:34:B9:14:E9:ED:1B:04:3B:20:8D:EC:17:9A
X509v3 Authority Key Identifier:
keyid:83:DE:67:D3:51:20:F5:8F:EB:42:F1:74:29:75:24:6E:3E:86:85:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g95n01Eg9Y_rQvF0KXUkbj6GhYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:53:c8:bd:9a:91:9d:ed:0e:90:f3:23:9c:d4:14:55:76:0c:
38:5d:b0:c0:5c:9d:9e:63:bc:7e:0b:4b:27:91:32:52:7c:92:
f5:87:be:8e:5e:a5:bc:e4:09:67:6c:9d:ea:fb:1b:a7:ae:77:
0b:5d:ef:99:20:59:43:f9:4a:8e:1c:77:af:d8:f2:7d:95:ab:
01:7f:4d:4d:ea:83:d8:49:5d:c5:b7:cb:3a:5a:32:4f:ce:96:
51:e2:69:3c:31:4d:70:6a:ee:57:84:e6:38:12:3d:1e:bd:44:
fc:d2:26:67:59:b5:43:6c:fe:a6:c9:2e:24:0d:5b:e3:ed:e5:
a6:cd:e6:04:44:b2:8a:4a:95:47:45:d5:2d:f1:be:c5:db:00:
82:45:7f:b4:f3:fe:f6:49:a3:2c:94:73:e4:11:63:93:fd:44:
e3:ad:30:3f:26:46:2f:b5:ac:a9:7b:c0:81:af:a7:72:14:0b:
94:5d:85:d1:f2:3a:37:a5:fa:f6:70:67:26:a8:47:58:86:42:
58:de:8b:44:b2:d4:73:c7:aa:d3:6d:dc:7f:ab:29:52:6c:41:
ad:36:cd:da:9e:1f:62:02:5e:04:4c:56:d3:00:b9:5a:b5:de:
ef:1a:dc:a0:26:86:ff:5d:76:5b:43:4a:29:ae:84:4e:c1:28:
5b:eb:c7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:57:08 2026 by rpki-client